This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File:                     mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier:          6inx6Q0dcFCiXjUgiFHK2FjDsy6EDnrWoPjHQz0wC6k=
Subject key identifier:   05:A7:B7:CC:77:AE:D5:2D:F5:0B:A9:BA:F7:A9:58:A1:FB:6E:59:0C
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer:       /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial:       073B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number:          072E
Signing time:             Thu 18 Dec 2025 21:14:24 +0000
Manifest this update:     Thu 18 Dec 2025 21:14:23 +0000
Manifest next update:     Thu 25 Dec 2025 21:14:23 +0000
Files and hashes:         1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: 2cuBSo5XKAJBtPsJlddXpA752Pkx1kbNtjYe7I4iZng=)
                          2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=)
                          3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
        Validity
            Not Before: Dec 18 21:14:23 2025 GMT
            Not After : Dec 25 21:14:23 2025 GMT
        Subject: CN=69446eb0-d5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:d7:31:53:48:c2:96:80:34:5f:c8:8d:03:
                    93:90:27:35:df:f5:3e:ef:d2:81:64:02:1f:b8:cc:
                    01:4a:6e:bd:ae:30:de:5d:4c:64:9f:24:3f:d9:af:
                    a1:e8:3c:c2:32:87:66:67:1c:ec:46:66:be:6c:05:
                    26:90:bb:8b:d5:bd:61:13:c0:35:cb:d0:ef:32:01:
                    5e:3d:a8:5c:00:e1:c5:3b:c0:11:e8:7e:35:43:e6:
                    1d:5c:ba:cc:85:41:ba:b6:21:e0:d9:d5:4c:42:ff:
                    0d:9c:f3:e2:ed:8b:dd:54:2c:57:1c:54:ee:5e:25:
                    99:c3:78:9d:cb:fb:19:5e:29:e2:cf:38:21:6e:40:
                    56:82:34:a1:61:bb:d2:d3:e9:8d:ec:2e:c4:99:1f:
                    b9:35:29:b5:97:c7:d9:de:e8:d6:81:7a:f3:2d:f4:
                    42:40:79:27:9d:e1:11:32:14:72:e2:2c:b7:06:b6:
                    7f:b7:77:16:18:e4:1f:c4:84:8d:e0:87:34:c1:9c:
                    67:40:23:dc:f9:a7:10:38:cd:dd:8d:f5:48:16:d9:
                    c4:4b:d1:d4:94:c7:c9:c2:fa:23:9f:f8:34:67:80:
                    e8:b8:04:c9:ac:7c:47:20:e3:3a:ae:6e:71:b0:f2:
                    2b:a4:19:b1:d8:c7:66:a8:fc:18:ab:ce:ff:01:ad:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A7:B7:CC:77:AE:D5:2D:F5:0B:A9:BA:F7:A9:58:A1:FB:6E:59:0C
            X509v3 Authority Key Identifier:
                keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:d5:ae:20:81:5d:0b:a9:4d:ba:c3:8a:7d:7c:43:cc:b4:
         fa:03:9e:fe:91:1b:fd:b9:99:22:3c:89:69:37:7b:0c:c0:28:
         bd:88:f8:c4:0c:45:c5:54:ef:40:7a:11:3c:14:14:a3:bb:62:
         ad:b1:e5:45:25:e1:16:a4:0e:ad:6f:b2:80:9f:78:47:89:0a:
         66:42:db:4d:32:87:f4:ce:32:c7:40:99:69:d5:8c:f7:f9:b6:
         d8:83:e9:54:91:c3:eb:3e:a8:ba:af:66:bf:38:2c:28:d5:8e:
         a2:ee:15:c6:76:98:97:24:46:ad:1d:3f:eb:f1:a8:68:c4:cd:
         a6:5a:3b:8c:6b:2a:37:e0:4a:8b:94:58:b9:4a:72:25:20:6f:
         fa:77:8e:14:f8:6e:45:cc:b7:86:35:f7:3a:ca:20:c2:5b:89:
         bd:6a:58:2e:43:23:a6:5c:c5:0f:7b:26:8f:3b:7e:3d:2e:f6:
         43:ec:cc:7f:c1:d8:3a:f4:7c:f2:18:ef:06:69:54:4f:d5:47:
         5b:7e:83:b6:90:79:eb:2f:14:48:a4:51:ba:09:44:6a:5f:dc:
         ec:ed:a8:ef:0f:f0:08:59:70:4c:b3:5c:80:1b:79:c7:d2:9e:
         68:3f:74:5a:58:45:19:36:5e:45:ae:66:45:9b:a6:63:07:cb:
         da:d1:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:36 2025 by rpki-client