This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
File:                     -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json)
Hash identifier:          WIRqJJoPznp8urqFq7So58k4mAKalNP79DCXX3EFlFg=
Subject key identifier:   63:88:41:71:82:BE:8F:21:0C:BB:B5:20:CB:B6:CE:29:B6:5F:D4:56
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Certificate issuer:       /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial:       1F81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
Manifest number:          1F7C
Signing time:             Thu 18 Dec 2025 15:54:42 +0000
Manifest this update:     Thu 18 Dec 2025 15:54:41 +0000
Manifest next update:     Thu 25 Dec 2025 15:54:41 +0000
Files and hashes:         1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: udSHrk4tmMV/OKw/iyP9M3P8TKAjOKc8DKFEoPeENyg=)
                          2: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: ibBODN1+4t8yWfSYY+KvUP9ZEG2mJoJSb+sBmfr0WGQ=)
                          3: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: Q+uFycE7+V0oo3Wg+zV0C0ahPstb+VAATgmaTbfe6Ok=)
                          4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: BJs0/jRPcsGJBvrYHUb3ul04BseX67DNX5XwfN1Yugw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8065 (0x1f81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
        Validity
            Not Before: Dec 18 15:54:41 2025 GMT
            Not After : Dec 25 15:54:41 2025 GMT
        Subject: CN=694423c2-4a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:05:39:c1:ea:24:1e:d4:53:f1:05:53:16:
                    c4:1e:50:65:58:ab:49:86:4b:0c:43:be:05:43:26:
                    ff:c6:5c:ef:db:f2:5e:3e:a0:c1:bf:11:eb:3d:d5:
                    ee:45:ea:60:95:e0:56:14:eb:a3:c9:ac:9f:47:cd:
                    e0:51:a3:5f:54:09:de:4d:57:37:16:46:74:e3:d1:
                    37:57:d1:27:e1:82:e8:a5:c5:25:46:b3:14:62:d2:
                    19:8b:4c:23:13:a2:4e:87:50:91:3c:6d:bc:31:1e:
                    9a:99:58:2e:be:7b:54:25:1f:1e:c4:60:eb:3e:17:
                    64:bc:ef:10:69:b9:b9:8e:fb:fd:53:2b:62:bd:e3:
                    c7:46:f9:b8:86:7b:da:f9:42:14:0c:9d:c5:02:67:
                    b7:9a:1a:51:31:61:8c:26:5b:49:2f:9e:d9:c7:de:
                    fe:f4:41:1d:dc:3d:bf:eb:3a:72:45:8e:04:fe:7c:
                    17:a8:3d:5f:86:ae:65:bd:3a:71:6a:e1:e5:c2:ea:
                    72:e4:fc:e6:cb:f0:2d:32:14:dc:dd:08:56:a5:fb:
                    f1:e1:16:fb:19:60:41:7e:1e:76:bb:11:6c:e3:dd:
                    a4:d9:c1:c5:94:94:0f:f3:3f:80:85:79:ee:a4:30:
                    a2:73:fa:eb:41:14:b6:2f:ba:e7:46:96:00:de:fe:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:88:41:71:82:BE:8F:21:0C:BB:B5:20:CB:B6:CE:29:B6:5F:D4:56
            X509v3 Authority Key Identifier:
                keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:fd:5f:aa:19:86:59:47:f2:87:a4:98:d2:da:58:7b:3f:
         33:8a:3d:c4:63:14:1f:fb:57:03:65:17:54:52:cc:d2:0a:1f:
         45:35:b4:60:7f:67:96:ab:a4:3e:29:0f:98:d1:6a:40:6b:64:
         40:62:75:24:0e:52:e3:1d:ad:d8:1c:17:52:92:39:ea:e2:57:
         8f:73:c2:7b:a6:1e:72:64:b5:cf:aa:e2:21:3b:7a:da:e4:e6:
         25:21:db:c4:36:14:41:42:c5:70:d8:fe:c6:07:ca:d9:ab:7a:
         60:c4:99:54:79:6f:e6:60:dc:22:02:ba:84:f2:12:b8:7e:52:
         e1:a4:1a:5e:1c:77:55:15:b4:3f:c5:61:90:9f:a6:a0:ce:b1:
         be:79:5b:e1:6b:7b:77:f4:75:5c:72:77:ac:61:8d:44:fc:55:
         6a:bf:df:63:19:10:fe:9e:df:a0:46:ae:dd:0e:99:2e:5c:82:
         6e:c7:a4:d5:53:72:ca:80:8a:77:37:dd:c8:da:aa:0c:02:f1:
         f2:2d:6d:00:d3:c1:72:5b:93:7d:84:93:14:69:e7:c7:8c:b0:
         b6:ba:4b:21:1a:7d:7c:8f:0c:da:40:8d:0b:cc:2d:61:0e:1d:
         fb:67:b5:8a:6f:7d:bf:d9:6d:57:da:36:de:18:5b:c3:d0:74:
         57:73:65:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:57 2025 by rpki-client