This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File:                     E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier:          idUEiWfZCkObMVQv6g7GB4997AzV3qp8XqehNHsuvXE=
Subject key identifier:   88:5A:F6:48:36:57:D6:6A:C7:9A:D1:1B:AF:8B:D7:FE:DD:DC:4C:2B
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer:       /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial:       0A75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number:          0A5D
Signing time:             Wed 24 Dec 2025 19:10:15 +0000
Manifest this update:     Wed 24 Dec 2025 19:10:14 +0000
Manifest next update:     Wed 31 Dec 2025 19:10:14 +0000
Files and hashes:         1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: FT/LF34QqquY3goNHoqV/2oqh3boNJZpmjmvrR+iSPw=)
                          2: 02BA60CCDADF11F08398647877D3641D.roa (hash: hf/xfhsCkjRD1riGUd+zheh13EXWwTkwTc7MH2aa3Mo=)
                          3: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=)
                          4: 0166B48CDADF11F08398647877D3641D.roa (hash: XqtMKJ9wpqh8beswcRrtHh97SHniSpHNu3xBgpCCoIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 19:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2677 (0xa75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
        Validity
            Not Before: Dec 24 19:10:14 2025 GMT
            Not After : Dec 31 19:10:14 2025 GMT
        Subject: CN=694c3a96-9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:15:23:b9:50:7f:d4:87:cc:6e:86:50:04:
                    a6:b4:e5:31:5d:d7:f1:09:fd:ed:36:a6:73:83:86:
                    2e:65:14:f2:cd:82:b6:0a:27:0f:08:4b:c9:d2:c1:
                    1e:48:c3:ad:16:0b:0b:fa:00:89:cd:fc:87:30:53:
                    c1:3c:4b:2f:19:c0:49:a0:24:5c:bd:ea:d8:f2:82:
                    78:ff:12:54:8a:7e:9d:19:7b:63:11:98:95:9c:89:
                    9e:59:ec:f6:c6:12:aa:20:95:0a:e0:98:78:0a:2a:
                    c4:82:7b:2b:4d:ae:9e:af:f7:b0:9d:75:e7:94:0f:
                    c4:d3:1b:cc:2f:dc:f1:c7:14:4f:81:10:4c:7b:3c:
                    cd:13:09:1a:aa:d2:d6:d0:93:1d:4f:34:a4:8f:e3:
                    e3:91:6e:81:71:d6:67:5a:cd:f8:2c:f9:c5:60:d5:
                    39:c3:0b:32:09:d9:09:76:9b:9b:37:23:41:13:1e:
                    99:fd:d1:bf:b3:4a:a4:6d:23:13:4b:f8:a5:4b:7e:
                    3c:95:2a:3b:b5:56:66:ff:0f:c5:36:e8:2d:c2:12:
                    c2:4f:b2:8b:49:0e:1f:66:01:17:fc:f4:30:f7:67:
                    53:62:4c:27:3b:34:ad:53:67:cc:d5:4a:84:79:3c:
                    5b:3e:29:e7:4c:ff:e8:35:96:8a:24:da:6f:bb:25:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5A:F6:48:36:57:D6:6A:C7:9A:D1:1B:AF:8B:D7:FE:DD:DC:4C:2B
            X509v3 Authority Key Identifier:
                keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0a:b5:95:33:20:0e:c5:89:8b:14:ac:d0:6f:9e:ec:38:1e:
         1f:9e:9a:80:94:43:e4:03:c6:e0:a1:da:65:4f:86:c8:6b:90:
         7b:e7:8f:1e:00:0d:c2:6a:59:98:61:2c:24:c1:b6:4e:00:e3:
         e9:09:62:28:2a:a6:23:13:17:2d:41:a8:72:d8:7c:13:a1:4e:
         d8:ef:b9:28:35:a1:fb:eb:13:38:06:f2:01:bd:1a:21:96:fe:
         b4:83:b5:30:14:bf:d7:d4:fc:d0:3e:30:f8:f6:ca:66:50:f6:
         d0:76:86:48:30:d5:fe:70:be:0c:ee:20:0f:99:6d:a1:e6:c1:
         d4:31:d3:43:a1:d6:9f:cc:e5:7e:cd:e5:f2:54:f4:4b:5b:67:
         e4:4a:6d:ff:ad:3b:66:2c:1c:51:3c:af:36:6a:72:5c:64:50:
         2c:c5:fe:bd:0b:4a:1f:e7:5f:4e:91:11:bd:94:97:6f:6b:f7:
         31:94:3f:e3:26:73:2d:23:8c:45:95:80:6a:93:c7:74:67:77:
         65:96:05:46:b7:39:63:cc:da:5f:82:00:c0:c1:53:82:59:52:
         b9:28:c3:63:48:c1:19:bb:97:6b:6d:c5:ac:ff:2b:1f:c8:13:
         09:bd:31:6c:13:93:f4:da:85:59:8d:37:93:d4:45:d5:66:50:
         ed:05:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 02:46:02 2025 by rpki-client