This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
File:                     akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json)
Hash identifier:          pv28npNgfQBO8p9fZVpWrSXGE6qrhZP3szqRcQCkbQs=
Subject key identifier:   69:3F:70:9B:01:8D:4B:60:0F:E6:2B:F0:A1:82:B0:73:CB:06:3C:84
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Certificate issuer:       /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial:       0AA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
Manifest number:          0A93
Signing time:             Thu 18 Dec 2025 19:10:32 +0000
Manifest this update:     Thu 18 Dec 2025 19:10:32 +0000
Manifest next update:     Thu 25 Dec 2025 19:10:32 +0000
Files and hashes:         1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: gvdoONtwSpsKoVfj/JQ8/tFS0yxqhsEmmZwhBtSxLfo=)
                          2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: E9181+VVT+rwNNkc7uINFuNWW6wPgms9gTqr7A850dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
                          rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2728 (0xaa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
        Validity
            Not Before: Dec 18 19:10:32 2025 GMT
            Not After : Dec 25 19:10:32 2025 GMT
        Subject: CN=694451a8-17a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:98:9b:e0:be:a2:2d:63:91:81:d0:21:f2:
                    09:d7:ce:dd:91:04:7a:d1:57:9f:27:2b:4a:2b:8f:
                    10:7f:ae:15:dc:a6:08:03:12:e2:98:46:f7:2a:6d:
                    8d:8a:51:4d:b7:62:b0:54:5a:3b:10:c6:e6:02:d4:
                    2f:34:a4:94:62:b6:4e:79:46:ea:7e:06:27:18:14:
                    3f:63:39:8d:d6:8e:88:88:be:52:73:cb:72:30:82:
                    04:67:b0:b6:a0:14:a8:9d:3b:43:f6:69:82:54:30:
                    c4:23:e9:a3:1e:68:08:9e:f3:da:4a:d0:f0:41:ec:
                    42:11:c6:91:95:ea:cf:23:11:c9:ea:50:09:91:2a:
                    1b:56:96:95:d8:6c:4d:f4:f2:7b:70:1d:c6:eb:0c:
                    60:5e:d0:13:1f:50:83:b2:93:c8:e1:94:39:87:cc:
                    56:02:b8:b4:f9:77:c7:be:be:3e:99:14:13:76:7c:
                    d6:74:e4:42:6b:7b:33:11:6f:50:96:1b:2c:06:b0:
                    af:a4:6f:a1:5e:2c:9e:f0:55:98:1e:eb:34:19:94:
                    49:99:84:e3:67:e0:e5:36:61:0f:a8:28:10:16:17:
                    dc:12:48:9f:b9:dd:90:84:76:e3:c0:5a:32:0a:8a:
                    aa:9e:25:00:a9:ec:12:57:78:8d:f9:65:a1:1c:40:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:70:9B:01:8D:4B:60:0F:E6:2B:F0:A1:82:B0:73:CB:06:3C:84
            X509v3 Authority Key Identifier:
                keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:40:3a:88:73:cd:a2:86:5e:00:22:9c:06:85:da:eb:d1:
         66:c7:f3:be:b7:e5:33:1e:33:50:d6:76:e8:9c:62:42:0e:21:
         39:3a:7b:ea:48:40:c9:c9:7c:fe:cf:97:4d:8a:16:e8:9d:ca:
         26:59:4d:14:f9:58:ca:08:ee:a6:85:84:43:c0:cc:52:c5:9a:
         e6:8e:f3:12:37:e5:f9:b2:64:4e:6d:12:7b:02:98:b5:bb:44:
         c8:91:76:ce:5e:d8:d7:9a:8c:dd:0a:d0:81:4b:c7:46:1d:61:
         f6:d1:39:97:2c:d5:b2:82:86:0e:3d:0e:11:aa:50:0c:19:0f:
         a8:ab:8a:97:e0:29:4d:a9:6d:fa:56:c0:5d:78:55:67:f2:4e:
         5c:15:23:d0:23:b5:f2:f7:2a:e0:dd:50:49:dc:1d:9b:c9:ff:
         56:8e:73:e2:f2:ba:20:61:57:82:29:7d:4d:95:ac:4d:bf:e8:
         5d:2c:39:a3:98:57:8a:81:ad:4f:e4:a4:69:0c:cd:ed:29:46:
         1f:d1:28:32:a0:fa:fe:02:25:18:8d:66:59:cf:36:f5:73:f1:
         44:65:4b:3f:20:47:29:d2:41:72:cd:d7:b9:44:35:29:43:27:
         95:e1:67:6c:0c:f7:1f:52:3c:9c:c8:e7:ea:9a:00:e8:d8:27:
         9f:11:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:36 2025 by rpki-client