This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
File:                     SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json)
Hash identifier:          8sJ1l8dLB3JZZQr+sJ5eKcCjX6OraYlWljQhaZCsql0=
Subject key identifier:   2D:09:58:7D:FE:9D:4F:77:B0:CA:10:73:C9:FB:F3:99:9A:99:0B:B1
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Certificate issuer:       /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
Manifest number:          04CE
Signing time:             Sat 20 Dec 2025 23:07:43 +0000
Manifest this update:     Sat 20 Dec 2025 23:07:43 +0000
Manifest next update:     Sat 27 Dec 2025 23:07:43 +0000
Files and hashes:         1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: 3WVxJSxaJB0H+fw2SkZq077yk+tYNsM2pmeDUDMMK/U=)
                          2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
                          rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
        Validity
            Not Before: Dec 20 23:07:43 2025 GMT
            Not After : Dec 27 23:07:43 2025 GMT
        Subject: CN=69472c3f-9783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:c5:25:09:de:7b:6b:d5:f3:1c:6b:2d:8f:
                    fb:cc:c4:08:96:dd:d2:36:ce:15:9f:68:32:03:8c:
                    cd:68:62:26:ad:be:28:2f:90:61:74:94:77:f6:28:
                    18:e3:f8:e0:ec:fc:1b:33:f6:9e:c3:ab:cd:16:3f:
                    b5:5d:d0:f9:e6:2a:5d:f0:90:f6:17:c5:2b:16:1d:
                    96:e3:9e:f6:ef:30:c3:c1:ae:e9:cc:b3:82:c9:19:
                    c5:da:35:55:04:01:9a:7b:e6:ea:1d:c2:d0:d4:b6:
                    c5:c7:cf:13:bf:49:0c:61:11:a7:ad:54:01:96:49:
                    1a:29:be:5a:d6:47:a5:7a:ba:6b:fb:a5:07:ae:7a:
                    73:4d:b0:b7:43:b4:73:3f:51:09:4f:a2:54:86:08:
                    eb:a9:b3:c3:cc:dc:e4:84:05:c8:30:c8:74:71:ed:
                    46:fc:18:20:90:f3:92:ca:ce:42:4a:7a:6f:09:d4:
                    8e:44:2a:95:96:5d:0d:25:9b:8c:44:bf:ac:8e:d3:
                    d5:04:58:1e:21:c9:02:38:86:63:b8:76:10:88:99:
                    18:92:ff:6f:8c:e7:d4:62:0b:98:82:ab:5e:28:5c:
                    02:84:d8:9c:b9:b1:fb:a8:2f:02:cf:f7:b2:f0:f3:
                    66:2a:31:c1:0f:38:0f:f8:96:b0:7a:89:42:e5:39:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:09:58:7D:FE:9D:4F:77:B0:CA:10:73:C9:FB:F3:99:9A:99:0B:B1
            X509v3 Authority Key Identifier:
                keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:d5:1e:28:7d:e2:78:bc:ca:a1:c6:2f:1d:a9:97:0e:66:
         83:e0:d4:7c:4b:83:eb:40:b6:bf:62:ee:a2:04:cd:3a:1b:03:
         79:e7:5a:3f:a1:de:a6:9d:46:83:4e:7b:d4:c3:19:ae:c3:d7:
         76:c4:8f:79:73:8c:ee:6d:40:8c:67:e5:8e:ab:97:97:86:d2:
         8b:18:3b:ce:e9:54:60:3e:9b:f9:6b:bd:d5:42:7f:9f:60:fc:
         3d:68:ff:14:8a:80:7c:b2:ce:73:4e:68:03:0d:a0:f7:00:e5:
         35:00:da:93:f0:e6:c0:4c:ad:04:ac:e8:07:79:45:02:58:1f:
         cb:02:20:e0:b5:98:ea:32:be:18:c4:59:2b:9d:18:be:5a:63:
         87:b8:44:65:f3:71:97:9d:77:f8:ad:d0:33:59:fb:27:82:73:
         b7:a0:1d:e7:3d:dc:0f:a0:bd:83:04:a9:b6:e5:69:4d:4c:2f:
         ed:81:96:b3:10:85:2a:13:f8:eb:79:bc:b3:9a:62:e7:64:68:
         5a:c0:19:5e:13:42:09:9a:2e:40:ec:ea:cf:2e:60:62:a1:d7:
         a6:f9:c6:58:df:e8:4a:5a:0c:b9:d6:e6:69:6d:91:bb:e5:fb:
         c7:eb:ce:bf:d2:14:50:26:2f:5a:20:8b:3e:ef:97:b6:0b:e4:
         25:1c:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:02:37 2025 by rpki-client