This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File:                     i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier:          DCxLoh+5NYh4BlrjoPjkWcGLtBJIrs8kP9RcW3SXS+0=
Subject key identifier:   ED:2D:B3:44:F3:94:D0:32:EB:98:3D:6B:92:4E:6E:E7:8B:FA:17:EB
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer:       /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number:          015C
Signing time:             Sat 27 Dec 2025 03:06:47 +0000
Manifest this update:     Sat 27 Dec 2025 03:06:47 +0000
Manifest next update:     Sat 03 Jan 2026 03:06:47 +0000
Files and hashes:         1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: 25RRbbNDqHG6tE+3zEV1GTeXJ1shnF182EqzFu5iecc=)
                          2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 6P1QigKgDh/og+D4IavE2ADNPbY260YTNHIn9cQtib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 03:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
        Validity
            Not Before: Dec 27 03:06:47 2025 GMT
            Not After : Jan  3 03:06:47 2026 GMT
        Subject: CN=694f4d47-f5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:2d:cd:8d:bb:cd:23:18:5c:25:a5:85:2a:
                    77:0d:49:16:19:57:2a:54:8e:ff:75:aa:79:73:bd:
                    40:a0:91:25:19:33:15:f5:02:0c:4c:99:2e:1f:79:
                    51:dd:d9:44:f2:2d:f7:62:05:19:46:fa:b5:19:dc:
                    7d:aa:d1:a4:71:27:54:26:ff:81:41:46:73:dc:af:
                    79:72:84:06:49:d2:92:47:f8:3f:95:a3:5b:4b:83:
                    67:09:5a:0c:1a:fd:8e:d2:97:ea:17:7e:88:33:df:
                    b8:c8:6e:a1:f9:c9:de:d8:44:de:c8:f3:3d:53:c4:
                    eb:e2:24:8d:8d:6e:4f:6b:5e:0e:60:c4:b6:ff:48:
                    89:a8:8c:3c:f0:81:bf:8c:6e:03:20:46:5e:a9:2f:
                    c8:f3:76:78:d6:1b:a1:8a:d4:3d:a9:4a:2f:6d:88:
                    41:86:ba:5b:fd:a8:f9:dd:cf:e2:9d:6c:22:57:a5:
                    7c:e8:c6:2b:f5:2d:b4:56:4c:bb:60:7a:05:48:c1:
                    c2:14:58:b0:f3:bf:57:ba:13:f2:eb:36:d1:85:ef:
                    dc:ee:6d:58:8b:07:e3:d8:ca:20:18:d5:4f:71:01:
                    c1:50:6f:58:63:aa:35:a0:f8:e6:fa:d2:43:55:19:
                    28:9f:d3:a7:db:53:b9:1f:37:68:c0:85:b7:0d:37:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:B3:44:F3:94:D0:32:EB:98:3D:6B:92:4E:6E:E7:8B:FA:17:EB
            X509v3 Authority Key Identifier:
                keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:6e:ae:27:ad:bc:80:df:b0:d7:73:e3:1b:81:58:48:03:1f:
         75:50:51:34:f1:64:53:92:47:5b:a8:c0:7a:7d:88:4f:53:cc:
         7d:ac:93:71:ec:bd:5e:6c:b8:68:6b:4f:cd:bd:bf:0d:38:72:
         cf:9b:24:ba:1c:be:5c:ea:ff:69:ab:be:98:23:7c:e9:01:50:
         cd:28:8e:c2:f5:be:83:a2:a3:53:67:0e:27:b7:62:aa:0d:46:
         e3:6e:8a:15:d9:16:ca:6c:57:e1:41:53:d5:e2:2c:c0:81:2b:
         6e:0b:47:e0:2b:cb:5e:17:e5:48:ca:48:cf:15:ad:8f:f6:71:
         82:73:de:c6:49:07:d9:bb:d2:c9:f1:13:35:a9:3a:20:ee:9a:
         62:b8:d7:c3:22:45:8c:17:8f:e0:03:74:41:32:bc:07:6e:ba:
         80:ea:29:88:29:9c:ea:d7:59:66:18:2c:ca:81:32:43:f1:ca:
         db:10:37:a4:e9:4a:48:6a:da:d5:a5:91:c4:5e:b0:9b:7d:8f:
         11:13:34:20:29:c7:14:e1:5b:7f:2a:b0:c5:f0:f8:f7:5c:bf:
         f9:3e:22:17:8d:7d:91:15:25:7d:d7:22:c9:c4:82:c1:d7:58:
         f5:d2:c1:e6:07:5e:cf:1f:55:34:ad:69:ef:02:ee:0b:b0:9a:
         6f:6d:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:37:07 2025 by rpki-client