This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          nPvijIAtpMatCiM7+g2soB0riqlS7jOWyPwN4Xd0ew8=
Subject key identifier:   A4:CD:1B:AB:B2:C8:5D:B7:EC:BC:08:B2:AD:BC:85:DC:C8:BA:83:8B
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       0913
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          0908
Signing time:             Sat 20 Dec 2025 19:45:08 +0000
Manifest this update:     Sat 20 Dec 2025 19:45:08 +0000
Manifest next update:     Sat 27 Dec 2025 19:45:08 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: +67hV3+zc0d1qpxkiKsBNB2Y2Bn2qB9nyncBfs6hNtc=)
                          2: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: TswTJHvENAD1Dt3sWcM8Wd5gmJihOCWr1zQhNFNqIck=)
                          3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Dec 20 19:45:08 2025 GMT
            Not After : Dec 27 19:45:08 2025 GMT
        Subject: CN=6946fcc4-9573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:44:5f:23:c8:63:5c:fd:59:b5:48:fb:4d:
                    5d:6d:e7:54:0a:3a:8f:65:78:c8:52:c6:96:a0:72:
                    40:60:f4:0e:ee:a6:7e:82:67:7a:80:88:0c:dc:a4:
                    e0:cb:70:97:3c:4b:ed:b8:03:22:4a:a5:9c:20:2d:
                    f3:ca:99:4d:f1:da:f3:0f:4d:3f:ee:8a:eb:c6:60:
                    b2:66:bc:c4:08:59:b9:2a:74:31:02:fa:75:3d:a3:
                    d4:84:51:37:91:63:35:99:3e:6c:28:8b:30:bb:11:
                    dd:09:c4:9f:67:ee:61:66:25:5a:d4:12:a9:d4:30:
                    d9:ae:02:f6:ba:c1:6a:ba:f9:ad:31:7c:a3:91:8e:
                    83:57:9b:52:b4:8d:ab:34:b8:74:d1:0b:f4:9d:44:
                    d0:bf:70:6c:75:41:16:bd:3a:ef:96:5a:69:3b:2b:
                    83:8f:6c:4d:07:29:22:22:b6:b5:87:53:c6:71:c5:
                    96:bf:ac:b8:02:5c:8d:27:a3:32:3d:e0:5a:7f:7c:
                    f8:7e:2b:9e:ce:93:c6:31:6f:6f:50:d2:5f:e5:c8:
                    d7:7b:6b:d3:c0:1b:79:15:24:a3:ac:e5:2b:eb:7e:
                    61:28:d6:74:e6:4a:70:51:a9:48:b0:81:25:72:3e:
                    fa:93:5f:37:63:6c:2e:0a:dd:fe:f3:2a:d8:24:bc:
                    37:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:1B:AB:B2:C8:5D:B7:EC:BC:08:B2:AD:BC:85:DC:C8:BA:83:8B
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3c:79:b7:be:e0:0f:62:a9:5d:82:06:d1:a5:3d:62:6a:2d:
         7b:13:7e:8d:64:0b:c4:2c:1e:c5:ec:f4:6b:c1:1d:91:38:7e:
         cc:78:16:bb:0c:36:63:37:50:e3:14:44:b0:1a:3e:03:91:95:
         e3:17:3a:72:d4:c1:c4:62:ee:cc:28:98:34:81:fc:0b:de:5d:
         b7:a4:d4:ce:55:ed:e5:8c:10:8e:47:3e:61:e5:38:a3:68:92:
         4f:fb:d6:c8:7c:e1:8d:0d:e1:5e:70:3a:3c:70:4c:c2:39:a9:
         d8:5c:08:83:47:79:6d:03:6b:84:67:9d:5e:8d:ec:1c:1d:24:
         e1:41:45:b9:3e:c8:ec:2d:41:cf:6f:d8:02:36:46:3a:e3:42:
         af:ef:aa:fb:7c:7e:ff:a0:03:3f:45:c6:6f:ca:82:ce:59:7b:
         31:bf:db:ab:8f:30:9b:76:9d:5f:ef:64:0d:ae:09:c6:0d:ab:
         98:dd:02:15:61:ef:e2:bf:33:66:f1:07:6c:47:25:56:e2:cb:
         63:df:7b:0f:ed:16:f0:e2:48:3c:b9:32:06:13:d8:85:ac:d9:
         33:63:ad:b4:ef:32:f1:7d:b8:6f:a6:00:ec:0b:b6:83:70:9d:
         6f:50:90:52:dc:5a:8a:0e:9d:f6:ff:90:67:15:6b:1d:57:48:
         8f:a7:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:44 2025 by rpki-client