This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
File:                     1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json)
Hash identifier:          KqgUC3uLQPSQ5fX4GPxDo32wkXAe1Wx+50Qjkjisxis=
Subject key identifier:   F3:6E:0E:E3:09:0A:04:30:42:22:01:41:FF:5D:B6:70:1D:6D:48:50
Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8
Certificate issuer:       /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
Manifest number:          0107
Signing time:             Fri 19 Dec 2025 04:09:21 +0000
Manifest this update:     Fri 19 Dec 2025 04:09:21 +0000
Manifest next update:     Fri 26 Dec 2025 04:09:21 +0000
Files and hashes:         1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: 1AjWqIU8HyCjfwJE5SQvrt6p1RfEYGRTWpDdNmm2oYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
        Validity
            Not Before: Dec 19 04:09:21 2025 GMT
            Not After : Dec 26 04:09:21 2025 GMT
        Subject: CN=6944cff1-cd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:c3:58:c1:37:66:76:0e:a2:59:35:af:ea:
                    a8:a5:cb:fa:a0:9d:42:76:70:9c:8c:b0:0f:48:fa:
                    fd:38:07:a3:50:de:00:9e:69:a8:de:d1:51:c9:c5:
                    82:e6:db:ad:d9:9a:d5:5d:67:79:65:73:fe:a8:b1:
                    bf:18:2d:18:22:36:24:9b:ce:86:35:8c:4e:a8:b5:
                    a2:08:e8:63:14:34:78:41:30:52:b6:c4:c6:4c:b7:
                    6d:7b:53:0a:f7:8d:f7:1e:3e:a1:2f:c9:fa:18:76:
                    50:6a:36:d0:f8:27:49:2d:da:83:b6:38:11:23:b6:
                    3a:a6:6a:32:b5:80:7b:f0:56:82:9c:65:90:fc:1c:
                    39:f0:39:cf:ff:7b:7e:ae:38:a5:67:af:e6:10:f9:
                    f8:d0:0a:fa:38:90:33:34:ed:d7:63:98:3b:a1:24:
                    c5:b6:6d:00:83:0b:40:ee:09:f8:ab:24:44:ed:12:
                    eb:db:5a:74:a7:eb:12:e1:58:d7:12:5d:59:9c:93:
                    7d:44:d2:bf:9b:5b:a8:c2:eb:61:1b:0f:7e:1a:9d:
                    6d:49:89:08:40:45:73:9e:50:71:12:e0:b0:87:cd:
                    a0:4f:6e:41:cc:b0:31:e0:d3:a3:38:22:30:12:3f:
                    9e:68:b2:dd:17:3c:a9:8e:8a:f0:da:7d:35:7b:09:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6E:0E:E3:09:0A:04:30:42:22:01:41:FF:5D:B6:70:1D:6D:48:50
            X509v3 Authority Key Identifier:
                keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:68:bd:d3:80:21:d6:82:4b:d2:f0:15:de:67:35:31:3d:b8:
         98:13:d6:07:d9:66:88:de:41:3d:a7:ca:f0:30:e4:d0:4b:d9:
         73:3f:af:d7:92:39:31:87:46:71:2e:e8:47:43:d7:6e:95:e1:
         7c:1f:04:78:52:f8:32:e5:30:c2:2e:82:ed:0c:78:04:3c:51:
         28:8d:fa:02:3e:00:64:74:31:8f:60:7c:c6:2e:1c:12:c1:8f:
         bb:0b:a7:26:a4:ae:22:a3:ad:6c:5d:e7:26:b5:75:f3:a9:3f:
         60:5b:5b:3e:cd:64:fe:23:bd:38:8b:bf:3a:dd:d4:23:30:58:
         2a:00:65:c4:97:0f:20:14:01:8c:ed:bb:d5:e2:a1:a8:8d:90:
         0b:18:df:9b:35:99:75:30:1d:b9:79:47:62:85:b3:c2:a8:73:
         1d:4d:ba:cf:e3:fe:08:27:f2:b0:4d:f1:da:bc:6d:9d:31:99:
         6d:af:4c:77:2c:b2:b1:ad:ed:c1:13:ad:01:57:a3:8c:66:0d:
         49:4e:2b:0d:15:89:01:10:d0:d6:72:02:94:74:0b:9a:58:73:
         ac:6e:f8:e7:e0:52:36:6e:9c:fa:76:ea:d3:1a:af:6a:d4:2c:
         b2:06:57:85:31:3b:70:ae:17:0f:51:b3:27:e4:59:be:20:c2:
         bf:b4:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:18 2025 by rpki-client