This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
File:                     l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json)
Hash identifier:          aNWSwlWh3as59Y/jWVAIJVN3kJF/7fBy/8FyIw69BNQ=
Subject key identifier:   4E:9D:6A:DC:73:CE:9F:5D:BB:6C:56:3B:7C:96:75:B4:F6:40:C7:66
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Certificate issuer:       /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
Manifest number:          0457
Signing time:             Fri 26 Dec 2025 23:14:51 +0000
Manifest this update:     Fri 26 Dec 2025 23:14:50 +0000
Manifest next update:     Fri 02 Jan 2026 23:14:50 +0000
Files and hashes:         1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: ZY/WGUZRSXmIhd+WZfoMXVla33cNNnnp+fk0lI/NSBM=)
                          2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: WLAogmk7UdDCu2qfIRAjMHBGGGVKtmrGTFfNV0VSRp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 23:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
        Validity
            Not Before: Dec 26 23:14:50 2025 GMT
            Not After : Jan  2 23:14:50 2026 GMT
        Subject: CN=694f16ea-3ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:02:a8:5b:6e:6b:da:76:8b:19:22:1f:62:
                    3c:b6:9d:9a:d2:05:43:b5:bc:c9:22:63:fd:36:f9:
                    97:ef:2b:3f:8e:2f:a4:83:62:3c:b3:03:6b:b7:68:
                    3c:60:ce:a9:be:d0:5d:da:9b:ee:80:26:36:33:f4:
                    f7:2f:76:0b:78:1e:ae:4b:1d:90:67:2a:17:fc:40:
                    6f:ba:1e:cf:94:57:1f:4e:09:05:99:40:7d:d7:88:
                    96:72:49:9f:08:66:ed:fb:6a:f2:e0:a8:24:31:07:
                    2f:10:1c:4f:33:7a:0e:7e:a4:07:ef:f4:3f:86:23:
                    92:a1:3b:28:9a:72:0e:c5:e8:b9:11:7a:ca:f4:a4:
                    f8:79:f4:78:c9:c8:da:ca:49:7c:e5:e1:33:52:fd:
                    a5:56:50:15:82:01:8f:e5:64:5f:45:ea:a8:87:64:
                    ac:b5:8d:27:bb:78:30:e4:d3:c6:39:51:5b:ad:3d:
                    4b:8c:e3:ab:8b:c3:d3:f5:db:dd:77:ad:7a:fd:98:
                    ee:da:8b:18:58:ff:79:12:54:a5:8b:76:ed:db:4c:
                    83:5b:5b:df:dc:b7:95:74:1c:2e:a8:72:ac:53:76:
                    bc:7e:22:0d:84:69:5d:ac:5f:77:26:cc:82:fe:23:
                    46:6b:36:79:95:c0:1f:31:2d:83:cd:81:1f:af:62:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9D:6A:DC:73:CE:9F:5D:BB:6C:56:3B:7C:96:75:B4:F6:40:C7:66
            X509v3 Authority Key Identifier:
                keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:12:e4:15:55:3c:ca:03:f8:f0:9a:7f:cf:e4:16:97:6b:1d:
         42:fe:24:dd:d8:96:91:43:c4:58:7b:6a:21:2d:72:69:d9:86:
         8b:60:cd:7b:b9:90:af:28:80:4e:d4:dd:5f:69:f1:1f:4a:33:
         4f:e7:48:ee:2d:ab:aa:0e:3e:4b:a1:5a:52:72:a9:08:d7:49:
         cd:45:79:87:fc:01:22:18:10:e8:4d:29:65:c1:ed:c5:52:d0:
         47:e5:3c:8e:aa:2d:14:c3:82:b4:39:85:9e:2b:03:b6:cb:e2:
         95:4e:a3:31:92:63:eb:ab:af:db:eb:fe:1f:dc:cf:15:e2:c4:
         fc:79:8e:86:74:18:61:fa:99:94:50:0f:b5:79:8e:fe:df:8f:
         4c:f0:20:c7:ae:5d:06:d1:88:cb:54:28:55:92:0b:49:1d:da:
         0a:69:dc:5a:70:fb:ef:ce:06:46:4f:60:cd:30:3c:16:8b:81:
         a1:e3:df:59:5d:47:e6:f5:9a:e3:f1:99:e9:a8:d0:dd:2c:77:
         cd:bf:20:0a:a9:a6:89:c4:f0:db:d1:29:ad:67:f6:4e:16:a2:
         92:72:ef:9c:f7:c0:2c:bf:fc:54:51:24:d3:ed:d7:f3:d1:76:
         57:ca:2b:af:b3:5e:d8:12:df:ec:52:a7:b0:a7:a0:1d:60:d7:
         07:c9:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 08:01:54 2025 by rpki-client