This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File:                     xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier:          Sydz32tQ0umzTvPiDun0BBJoBFLHLWXgY4lruI1u44g=
Subject key identifier:   00:44:EB:42:6F:59:61:FE:83:13:3B:93:AA:A0:8C:02:4F:A7:F8:6B
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number:          EC
Signing time:             Mon 29 Dec 2025 04:27:02 +0000
Manifest this update:     Mon 29 Dec 2025 04:27:02 +0000
Manifest next update:     Mon 05 Jan 2026 04:27:02 +0000
Files and hashes:         1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: BYUMmkxH6LWkBKwxmYkMdHpKAWDlMKcQkryYhLI4+Q4=)
                          2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 04:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: Dec 29 04:27:02 2025 GMT
            Not After : Jan  5 04:27:02 2026 GMT
        Subject: CN=69520316-e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:d1:e8:87:4b:51:ca:61:8a:92:92:a1:8c:
                    72:b3:56:ac:f1:13:98:2e:36:4c:a8:e1:dd:7e:7b:
                    19:b0:ce:f6:6f:a8:0c:be:10:26:40:47:0a:90:3a:
                    04:7d:39:e3:22:06:29:05:d3:04:ec:51:c2:ba:d5:
                    a2:d7:8a:2b:19:56:d2:b9:6d:88:3a:34:bc:7d:fc:
                    15:97:e1:cf:59:27:0b:de:83:14:f7:e6:d4:39:79:
                    75:90:a6:44:a9:41:81:65:ae:b9:d3:58:cc:4b:da:
                    d4:be:60:69:7b:8b:32:e0:33:25:08:3b:e0:f6:c8:
                    45:21:fb:6a:72:7b:21:4c:e9:97:a5:65:26:e1:a7:
                    fc:4b:f3:2e:11:d4:26:4a:f6:c7:b1:80:f7:6f:96:
                    53:b7:14:f3:1c:44:79:99:4f:a4:2d:ad:85:e9:7c:
                    f0:56:10:9b:da:55:12:5b:55:5d:dc:3c:36:f2:55:
                    be:a1:81:25:f1:21:54:1f:a5:09:26:e9:3b:04:2b:
                    24:89:00:a7:a9:7e:a5:70:58:e8:f6:14:dd:2b:47:
                    d2:7d:aa:60:e5:5f:22:e9:7f:44:cf:89:30:c4:5c:
                    0d:dc:46:ce:0b:6f:c5:8c:b1:69:78:21:1d:0e:74:
                    85:db:b9:b9:a2:71:61:a9:83:6d:7b:9b:ed:9d:fb:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:44:EB:42:6F:59:61:FE:83:13:3B:93:AA:A0:8C:02:4F:A7:F8:6B
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:99:6e:2c:8a:0f:de:a0:11:e8:50:af:15:0f:4c:a7:a4:5a:
         c8:d3:2b:ca:c5:2b:41:5e:14:06:22:a3:70:5b:4a:d6:71:16:
         c8:da:31:be:ae:9d:5e:93:f5:a9:d9:12:f8:54:d3:e4:a1:fd:
         3a:56:97:b7:16:4c:5c:84:c1:bc:50:72:5b:70:f8:df:d6:ae:
         09:11:b0:ee:9f:94:a8:de:e5:8a:fb:6f:1a:fa:f5:6d:cd:76:
         b7:81:95:9e:d7:48:30:23:df:e9:0d:9f:0a:26:52:3f:da:9c:
         63:86:bf:53:65:96:ab:48:0d:f6:ce:b1:2f:d7:da:da:ca:b6:
         e1:b2:89:c9:35:ed:b9:92:da:bf:86:6c:80:78:05:d0:2f:48:
         40:0c:ea:41:5b:be:76:a1:43:72:56:71:2b:2c:8f:24:6e:62:
         93:41:af:8a:21:2d:08:d8:0e:56:a7:9d:89:17:8d:68:64:4b:
         17:42:a8:79:f1:65:b8:ae:57:5d:07:c4:42:ee:b5:9d:c9:af:
         70:75:77:78:44:fd:75:2b:df:65:4c:e6:44:3c:e9:e3:30:e3:
         0d:93:a5:f0:c5:03:59:39:db:fa:fc:38:e0:c8:58:85:5a:1b:
         b3:a0:b9:b3:68:f0:d6:44:4d:4b:1d:a2:67:aa:22:7f:e5:96:
         ec:e9:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 00:23:24 2025 by rpki-client