This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
File:                     sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json)
Hash identifier:          Suh9emVsQWu4mRa4rjxB5ZnLnOImyRE3EjgBsnNpJyc=
Subject key identifier:   31:DE:79:96:0B:A7:82:3E:2B:A0:68:07:FD:73:72:9C:84:3F:50:57
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Certificate issuer:       /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial:       08D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
Manifest number:          08CF
Signing time:             Thu 18 Dec 2025 19:57:43 +0000
Manifest this update:     Thu 18 Dec 2025 19:57:43 +0000
Manifest next update:     Thu 25 Dec 2025 19:57:43 +0000
Files and hashes:         1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: nSeYwKwVQ4BD1TM6qsfBkvzQgVkiyFZvpSNB401y9uw=)
                          2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
        Validity
            Not Before: Dec 18 19:57:43 2025 GMT
            Not After : Dec 25 19:57:43 2025 GMT
        Subject: CN=69445cb7-52e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:db:5c:d1:ae:ec:56:f7:f6:56:e3:d3:8f:ce:
                    f2:49:3b:b4:18:f0:48:ad:1f:90:af:d1:85:cf:3e:
                    93:0c:81:c1:02:76:23:40:c5:22:c9:a7:73:88:6a:
                    7b:06:f3:c9:30:0b:9a:e9:1d:92:55:3c:81:db:49:
                    b1:e2:eb:93:df:ba:e6:02:18:e2:41:6f:f3:aa:16:
                    2a:9b:10:19:2d:dd:74:b5:4b:ca:4d:5d:6d:d4:59:
                    fa:92:0b:7a:19:24:2f:e4:c2:be:07:20:37:18:47:
                    c7:01:b5:7f:7f:be:5e:4a:86:40:75:91:4a:75:a7:
                    c5:ef:c9:da:47:78:48:e5:77:cc:cd:4d:3d:ce:3f:
                    6c:00:cd:ba:81:23:5d:6b:37:9c:78:5a:8f:6d:f8:
                    35:80:13:db:ad:c6:98:11:c4:6b:74:5b:15:68:d2:
                    dc:66:e3:34:f1:e4:09:05:83:6e:f9:dd:31:05:6c:
                    cf:6b:a8:d3:b2:19:98:7f:69:14:4d:18:ce:53:c9:
                    43:c8:04:b3:df:38:4d:0c:1d:71:c5:8b:a3:fa:cd:
                    db:a8:a0:0b:40:6e:2a:44:9f:e4:82:dc:5a:a4:78:
                    f3:16:14:e4:5d:26:ef:86:c6:86:b3:e3:96:4e:39:
                    5f:cf:18:9d:83:c3:67:df:ba:96:99:b3:46:5d:8e:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DE:79:96:0B:A7:82:3E:2B:A0:68:07:FD:73:72:9C:84:3F:50:57
            X509v3 Authority Key Identifier:
                keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:05:50:93:f6:6b:17:e5:a2:4b:e3:f1:58:3e:96:6b:97:
         dd:81:56:3d:99:86:a6:a4:12:0e:23:bb:5a:8a:4e:e2:52:0c:
         09:e8:59:45:bf:6f:67:19:2b:96:e5:9a:ab:eb:51:4f:f4:79:
         2d:1f:22:09:30:5c:4e:e0:71:d8:47:03:58:e4:e6:c6:75:c2:
         6e:83:27:f5:58:64:5b:db:ac:b4:55:11:1b:e8:fc:ca:2c:e5:
         b0:9c:4a:00:6a:f0:78:45:a1:50:2f:b2:78:52:60:39:40:40:
         62:cd:99:e6:3b:cc:81:73:ed:b9:8f:29:04:61:2f:15:27:f4:
         bf:3b:c9:62:38:5b:6b:b0:34:89:a9:10:51:41:f5:70:60:3b:
         55:56:2e:0a:c0:d8:af:73:da:66:fe:bb:ff:40:c5:8e:06:46:
         db:9a:8b:8f:79:a7:c8:47:df:8a:92:c3:ee:25:aa:d2:93:56:
         70:a1:b6:2e:19:04:d9:a2:d1:24:f0:2f:dc:b4:a0:44:d3:91:
         0c:0c:a3:4b:90:5d:38:b2:9c:4c:c5:0d:e7:a2:0c:56:9f:17:
         a9:d0:fc:5f:3c:ab:0a:de:42:c3:bc:38:82:d6:94:79:71:72:
         1b:90:76:01:10:62:8a:78:c8:52:7c:f0:10:7c:98:50:16:cd:
         1b:df:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:13 2025 by rpki-client