This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File:                     -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier:          qHjk5rm6rBytfdXsp4FdXkjtast9Sk01e8sIN3cXc5o=
Subject key identifier:   40:21:27:AF:E4:54:8D:19:26:40:40:2A:49:61:58:89:5C:BC:14:B7
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer:       /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number:          6F
Signing time:             Fri 19 Dec 2025 05:52:31 +0000
Manifest this update:     Fri 19 Dec 2025 05:52:30 +0000
Manifest next update:     Fri 26 Dec 2025 05:52:30 +0000
Files and hashes:         1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: isqR0OzEy2IYYmLwMWxDeo61gwv4SSlktJbPXnw5XdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
                          rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
        Validity
            Not Before: Dec 19 05:52:30 2025 GMT
            Not After : Dec 26 05:52:30 2025 GMT
        Subject: CN=6944e81e-93a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:d7:a5:67:08:e1:d4:fd:96:fd:92:36:a5:
                    dd:f3:8f:06:8c:db:c9:0e:72:08:d9:67:3d:3f:4b:
                    e7:7e:dd:be:ef:c5:2c:42:07:89:77:0f:f5:dd:d3:
                    a3:9e:1c:a7:1e:d8:bd:b2:45:a8:81:54:cb:ad:1b:
                    ec:ae:01:23:0b:25:4d:a3:33:ea:9b:fb:96:3a:ed:
                    cb:28:81:8b:34:d8:7e:5a:21:48:21:f5:aa:96:e7:
                    4d:89:55:54:00:8a:90:63:9f:2a:e2:97:31:c7:9a:
                    58:3e:08:20:cf:d9:8e:5b:20:b9:1d:f4:00:39:4a:
                    d7:e3:2e:22:02:36:97:ac:7a:9e:ef:d3:af:c1:31:
                    06:db:70:e9:3c:c2:54:19:e5:2a:ae:f2:62:9b:7e:
                    e4:89:09:51:eb:e7:e0:be:68:d7:66:2b:51:90:7c:
                    52:11:75:4d:14:76:19:a9:1b:c2:57:da:9b:ec:b5:
                    b9:03:0d:24:c3:ed:5d:c8:a4:82:d6:6c:35:af:02:
                    5e:13:a6:d1:21:52:7a:f5:da:0a:d2:47:39:39:54:
                    f5:0d:5e:31:2c:bc:1f:a9:76:4e:60:de:34:27:36:
                    a5:59:de:35:0d:41:38:3c:ad:02:63:02:80:cc:b3:
                    d5:84:b4:db:27:ad:49:d4:f7:2d:af:1a:b9:53:0c:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:21:27:AF:E4:54:8D:19:26:40:40:2A:49:61:58:89:5C:BC:14:B7
            X509v3 Authority Key Identifier:
                keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:19:63:f1:84:d8:09:2d:8c:b1:e5:4e:39:dc:46:b6:5b:ff:
         5c:4b:22:f8:e9:4e:bf:b3:16:1c:aa:76:ba:b6:30:a6:7c:4e:
         94:8c:41:4c:52:c2:b9:ed:74:de:5a:2c:0b:25:71:b9:61:71:
         35:c9:6e:db:66:71:0f:46:cc:72:d1:36:ae:25:de:11:df:8d:
         61:0a:ce:58:be:69:f9:f3:bf:cd:58:05:99:71:6c:85:c1:c6:
         76:fa:29:c1:1f:27:14:92:44:55:5f:0e:35:d3:43:3e:49:94:
         e3:20:7d:ee:cf:fc:f3:1a:e1:2e:cf:b7:3e:30:80:11:54:c2:
         40:f5:9c:2b:9c:68:78:7d:1b:e7:e6:13:3b:4f:d3:6a:bc:b5:
         76:c3:35:f0:bd:af:ee:8c:f7:f3:ff:30:5e:23:c8:e3:c0:3a:
         91:f6:2e:2c:f0:e6:76:63:6f:44:c4:93:fc:8d:2c:05:03:37:
         48:44:ab:db:47:17:41:d7:66:86:6e:9b:da:7d:d8:fb:60:a2:
         d5:10:08:d0:46:f2:5b:70:1a:5b:61:2f:30:d1:e0:f7:bd:15:
         87:6c:34:35:c6:cb:e5:6c:a0:35:6b:17:0a:d6:83:4d:c2:db:
         23:f3:b2:cd:ce:a7:21:41:13:02:16:96:23:bb:88:0d:0a:ad:
         45:ee:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:52 2025 by rpki-client