This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier:          r5I8yxm7rBznW7aPzAdikTnOrGOIs8oG3b1soH9Jn2w=
Subject key identifier:   F8:D4:36:0B:BE:85:01:24:11:07:08:B3:FE:57:45:CE:D2:9E:DC:4C
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer:       /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial:       3507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number:          34FE
Signing time:             Tue 30 Dec 2025 14:46:48 +0000
Manifest this update:     Tue 30 Dec 2025 14:46:48 +0000
Manifest next update:     Tue 06 Jan 2026 14:46:48 +0000
Files and hashes:         1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: wT49aME79yKjlURNl54Qoa16Sw4teDpjhSHeFqHfkCQ=)
                          2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: EDqMjKpQ8JJE9YEiS61qJ0Zv7RsV2OUGzCzEdCEHKog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 14:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13575 (0x3507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
        Validity
            Not Before: Dec 30 14:46:48 2025 GMT
            Not After : Jan  6 14:46:48 2026 GMT
        Subject: CN=6953e5d8-e948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:14:c4:dd:c9:4e:df:51:d4:5e:f0:8b:15:
                    87:f8:8f:c6:55:ad:2b:a9:83:30:d9:32:bf:0a:e2:
                    fc:a6:73:47:9b:52:0e:ea:9e:33:f3:2f:c3:13:f8:
                    d5:3b:68:71:1a:68:0c:30:2c:29:38:8b:53:8e:26:
                    5f:22:81:e7:97:74:37:22:7d:08:63:ab:18:91:b8:
                    c4:1c:21:31:12:37:7c:7d:47:2e:76:3e:40:2d:83:
                    cf:5f:1b:9e:74:fd:ea:0d:91:aa:9d:f8:93:a0:3c:
                    36:a5:c8:d4:fc:74:2c:12:04:e2:57:53:9e:65:4f:
                    51:e2:77:1c:e6:ea:7f:00:71:bf:21:c2:81:19:3e:
                    ff:ef:47:88:76:f0:3d:50:83:18:53:1c:2b:12:99:
                    ef:38:eb:e5:34:d0:ec:e0:90:fd:9c:a4:6d:e8:e0:
                    29:06:92:2c:53:79:b4:ef:0e:ab:51:cb:83:f4:fb:
                    ab:45:55:c0:7c:d8:a9:fd:38:94:ea:28:ff:37:5f:
                    70:26:17:db:10:f0:31:9d:89:de:2c:db:8b:21:2f:
                    1c:d6:cc:15:05:b2:b0:4f:20:bc:95:86:d4:25:fd:
                    31:48:83:55:97:75:e9:fe:b6:ff:8d:13:33:0e:ff:
                    78:b3:18:5e:bd:e7:c0:df:d1:9c:f5:73:70:fe:46:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D4:36:0B:BE:85:01:24:11:07:08:B3:FE:57:45:CE:D2:9E:DC:4C
            X509v3 Authority Key Identifier:
                keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8d:d7:97:47:53:d1:1e:5d:dc:e0:94:88:c7:0d:31:16:c5:
         2d:b8:2e:37:e0:ac:89:1a:7c:74:0e:71:04:27:fb:f4:60:ed:
         08:12:19:fe:ae:4a:79:72:ea:ff:ef:2e:14:95:9d:f2:c5:f8:
         37:b3:f0:97:d7:a8:31:58:f1:b7:fe:4f:07:63:37:7b:5d:91:
         d5:e1:21:0c:40:83:70:fe:dd:9b:ec:14:c5:c1:63:d5:72:b1:
         4b:8d:ea:61:4e:33:9f:50:14:b3:44:f8:3b:cb:ab:20:de:a9:
         d9:b4:c7:f2:c2:3e:25:24:0e:f9:c6:d7:e1:40:be:16:00:89:
         63:53:c0:fa:e9:d8:bb:20:db:71:aa:8b:89:2c:4c:e8:94:24:
         8e:cf:77:5e:fc:ac:5e:64:ff:7a:a1:de:ed:fc:60:8e:3f:18:
         b1:c5:ae:9d:89:ce:74:06:ff:c1:9e:ce:40:41:a9:34:1a:01:
         bc:b6:85:a6:db:9e:de:d7:35:8e:aa:f0:ac:6d:e7:cd:2e:3b:
         64:e1:df:6f:82:39:ab:36:e0:e2:10:ef:0c:eb:1a:c2:7e:d6:
         24:f3:8b:90:3d:69:19:fc:b1:f3:09:51:b2:4c:d8:fc:f0:0d:
         67:6b:c8:31:43:e4:85:d6:0a:06:fa:27:40:a4:82:6d:cf:c5:
         03:d4:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:03:14 2025 by rpki-client