This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          PKGepLENplGj9BoI6ntc7UIgBMSPKpZRfNBZuGU5eq4=
Subject key identifier:   F3:86:9D:3F:43:F7:38:74:1B:A0:FA:53:56:14:2C:1D:A9:75:B2:F8
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       0952
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          093D
Signing time:             Thu 18 Dec 2025 19:44:47 +0000
Manifest this update:     Thu 18 Dec 2025 19:44:46 +0000
Manifest next update:     Thu 25 Dec 2025 19:44:46 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: yjRzvmMdRib78AMOEJ7SPcwei6Vs3H9TwafgkhD0HTs=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: 2b2aTZYDOmhxY6SSvMkJJGQRUxlhWtKkCxy8cICIbBU=)
                          3: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: QqXjL8VbZxhmEjdSw3N88F3r25OxZYwoIXrT9ON9o2Q=)
                          4: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: LRIzMgZ3JXY9cdVHWEMkJluQ5OITzmSd9SXhhzj1lKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386 (0x952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Dec 18 19:44:46 2025 GMT
            Not After : Dec 25 19:44:46 2025 GMT
        Subject: CN=694459af-4fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:5e:fe:d1:3a:e1:da:d5:5c:7b:85:15:ac:
                    8d:ee:17:61:6c:83:8b:86:bb:2b:d5:f0:93:64:b7:
                    c1:8b:41:10:0d:cc:10:19:4e:e2:c9:61:d7:78:b0:
                    d3:24:99:57:b9:68:09:69:d1:1b:e5:94:0e:35:59:
                    dd:8d:50:4a:a5:80:ec:91:29:72:e8:29:77:99:0e:
                    15:fb:cb:77:f6:7f:ea:c4:3c:49:8a:50:1b:a0:73:
                    06:f0:41:5a:14:7b:89:22:ac:f3:c4:bf:c4:12:6b:
                    2f:b8:d0:6a:4c:92:78:37:f5:cb:ac:13:c0:c0:01:
                    cb:37:e4:1d:ea:fd:85:b2:ac:31:7f:f5:a4:b2:09:
                    cc:5d:71:25:57:5f:bb:14:b4:2f:99:8c:74:1b:40:
                    fa:18:99:b4:5f:57:8a:55:17:13:4e:f8:ff:d5:34:
                    95:f2:7c:dd:1f:b7:bd:ca:a1:6e:4d:5b:0a:14:da:
                    74:69:ec:ca:cc:14:61:d2:f8:5e:e4:bd:cb:00:f4:
                    d5:43:a0:56:41:74:71:09:b4:02:3a:5c:e3:1e:89:
                    00:8f:85:7a:a4:2c:f7:f2:f3:f5:b8:4c:8c:66:97:
                    45:35:20:1e:d3:9f:e2:1f:da:1a:04:77:4e:a6:65:
                    af:93:57:b8:3d:d1:a4:d9:f4:3e:70:13:b1:4f:5f:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:9D:3F:43:F7:38:74:1B:A0:FA:53:56:14:2C:1D:A9:75:B2:F8
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:07:1d:70:47:2e:6b:73:4b:16:97:05:a3:ae:4f:e4:62:
         a9:81:58:47:ce:a1:de:71:3a:9c:18:05:1a:8c:d5:6b:53:d4:
         ff:cd:3a:93:e3:45:fe:05:52:a7:22:41:b0:b0:3a:f0:61:7a:
         71:7c:45:a7:90:69:56:ce:f0:0a:83:98:7b:41:10:22:32:0d:
         39:15:39:f3:02:97:5e:d5:18:80:9b:eb:60:59:f5:66:30:b8:
         7e:7d:49:6b:f9:70:5f:63:54:d7:ab:ea:07:7d:5e:7a:ed:60:
         3e:db:84:0c:bc:f3:cd:7d:0b:9f:6b:9a:b6:dd:47:5a:b2:23:
         dc:3f:cc:dc:22:0c:17:e8:de:9a:cf:36:a7:9b:85:f3:5a:9c:
         2f:3a:d7:d3:08:03:e7:1d:2e:f6:18:f7:25:18:8b:ef:19:5d:
         a1:20:ad:a5:0b:69:cd:bf:36:5c:4b:3f:22:e9:e0:f2:19:6f:
         c9:3f:f6:d3:ff:1b:f9:29:8e:30:8a:89:1a:ce:d8:88:a0:d5:
         2a:22:de:2e:0a:da:4f:ee:5c:a6:27:e1:46:e0:da:c7:24:80:
         d2:e1:11:ba:e4:4e:cb:85:26:1d:be:23:11:87:2b:2e:54:8d:
         dc:f8:89:50:b9:af:41:29:56:e0:67:aa:23:c8:c3:3a:b2:93:
         d3:41:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:24:00 2025 by rpki-client