This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
File:                     xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json)
Hash identifier:          U1oKy6v9mnN7sPWY6+TNemFfATgisVMauAiSQZDU7jw=
Subject key identifier:   F8:C9:54:8A:2C:2E:92:AC:AD:BD:97:5D:FD:30:44:63:99:3C:2F:D9
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
Manifest number:          0182
Signing time:             Fri 19 Dec 2025 03:14:19 +0000
Manifest this update:     Fri 19 Dec 2025 03:14:18 +0000
Manifest next update:     Fri 26 Dec 2025 03:14:18 +0000
Files and hashes:         1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: 7MJoYF//fd/0YEeE1pQDxWP67xtoIKlfEUrKyAZAjmY=)
                          2: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=)
                          3: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Dec 19 03:14:18 2025 GMT
            Not After : Dec 26 03:14:18 2025 GMT
        Subject: CN=6944c30b-6358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:e9:8b:db:77:e2:38:44:ff:db:64:eb:4a:
                    73:07:b8:00:87:85:7b:c3:86:c2:9a:cf:d4:fd:f8:
                    d2:52:2a:67:31:fa:f1:35:24:6c:d1:91:cc:f3:24:
                    53:99:f4:1a:37:62:a8:a0:42:b0:0a:d6:02:43:0f:
                    8a:c3:99:8f:fa:43:0b:90:6c:7e:7a:48:42:7c:1b:
                    71:1c:95:9d:ce:3a:8b:c6:a5:16:32:2a:e8:95:bf:
                    d3:af:e4:80:ca:dc:e9:0b:bd:6a:91:7e:5f:d5:ed:
                    a2:b1:26:51:72:9d:03:a9:59:fc:a2:54:61:a3:c0:
                    79:8a:a4:c4:07:d9:27:4f:e1:4b:3a:5e:5b:0b:43:
                    85:fe:3b:90:d4:3f:ee:8d:6a:af:ac:c8:09:26:28:
                    3f:e7:0d:ed:56:46:cf:2f:db:d6:26:07:a8:df:5f:
                    ac:55:0e:4f:60:88:c1:ea:f5:54:ff:26:2f:58:59:
                    78:34:87:c7:6c:28:6d:7b:4a:a1:64:4d:a6:7f:83:
                    02:aa:9f:ea:a3:90:18:69:7b:ca:97:7c:7f:d7:a6:
                    57:7d:49:23:07:60:8b:9b:a5:d2:3f:94:15:30:c1:
                    1e:b1:d1:e6:d9:d6:bc:de:63:9c:d1:35:d9:51:9e:
                    40:6e:8f:e6:64:50:7d:14:60:16:28:c7:4f:27:b1:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C9:54:8A:2C:2E:92:AC:AD:BD:97:5D:FD:30:44:63:99:3C:2F:D9
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:32:6a:e6:1e:7a:e3:ab:b0:02:62:7b:f6:f5:bb:4a:e6:
         ec:47:a4:9d:a7:7a:a5:c0:66:c4:60:3e:23:f2:71:5b:84:b0:
         60:ea:25:7c:fd:08:d8:4e:12:b6:0e:ea:6d:ca:97:ea:55:03:
         97:a1:16:ca:95:c0:8f:a5:2b:c5:58:ff:13:1a:40:4e:c6:78:
         56:9f:88:a8:4f:0f:db:78:02:ac:14:dc:e5:1e:9e:f6:ff:4d:
         ab:f5:88:a1:a8:d1:b4:49:11:6d:6e:f7:ef:c2:a4:35:34:2f:
         8d:1a:57:dc:00:c7:16:b7:f8:b6:88:32:d4:72:66:af:90:d0:
         86:8a:1a:42:9b:be:04:f3:db:4a:df:f9:12:9e:19:ab:c3:37:
         8c:6b:99:e4:d7:af:57:09:82:20:5e:63:61:13:bb:31:77:ae:
         c6:17:e6:49:e7:dc:a2:d6:31:50:36:1c:72:b9:a7:d8:9b:9e:
         69:1d:17:db:06:1b:89:ef:d5:6f:df:89:ca:00:94:8c:9a:15:
         1c:a6:23:21:8d:4b:11:0e:91:bd:a6:2a:e6:d9:6b:d6:82:1c:
         f9:36:13:fe:ae:1f:c5:ee:69:57:8a:c8:87:6b:2e:97:e7:49:
         5e:a7:4d:29:a5:df:09:d2:f7:5c:88:36:55:ce:d6:4d:9a:68:
         8a:3a:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:16 2025 by rpki-client