This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File:                     mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier:          +VJ53Vqz+I9SoeMDQ6/JNgEiSIw6d5JswYNOxUc/R7M=
Subject key identifier:   50:1C:65:C8:B1:41:30:DA:D7:69:1C:E5:A1:3A:72:34:E0:F4:8F:43
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer:       /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number:          56
Signing time:             Fri 19 Dec 2025 06:10:29 +0000
Manifest this update:     Fri 19 Dec 2025 06:10:28 +0000
Manifest next update:     Fri 26 Dec 2025 06:10:28 +0000
Files and hashes:         1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: M4Xr2kVPchan1A1GmBmQNiaRNkThHICDJELAPPpPqIg=)
                          2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
        Validity
            Not Before: Dec 19 06:10:28 2025 GMT
            Not After : Dec 26 06:10:28 2025 GMT
        Subject: CN=6944ec55-e525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:64:4b:a3:f4:78:94:53:11:22:43:c9:89:
                    cc:78:62:38:21:f1:ef:3e:ed:98:2a:dd:3b:b7:d7:
                    ad:58:c7:18:bd:33:09:3f:53:c9:e0:fc:25:1a:eb:
                    ab:47:94:b6:b0:63:6e:5c:bc:67:6a:61:14:9c:dd:
                    e8:12:b5:2e:a9:8a:7f:b3:7d:0d:14:9a:50:ab:d7:
                    5b:23:02:ff:1f:be:3d:28:1a:bc:43:67:b6:d2:fe:
                    0f:a6:8d:c8:50:06:31:ba:9e:21:62:09:f8:1e:bb:
                    1a:c1:c5:2c:6e:8a:0a:33:10:e9:5d:0a:f3:bd:ce:
                    3f:ba:bf:6c:61:47:64:26:8a:8d:ed:8c:31:44:7b:
                    37:58:54:0f:82:8f:52:8d:8b:2e:24:1b:f3:ca:f1:
                    e1:af:d2:bf:11:83:67:c6:27:ac:0e:19:8f:9f:f3:
                    87:af:c1:84:c2:b0:65:17:c6:7e:68:da:7c:08:95:
                    be:56:d3:69:70:ae:9f:07:31:a9:28:54:92:05:79:
                    02:35:ff:8d:5e:6c:ea:39:34:e8:d5:55:86:f7:a3:
                    f9:dd:11:e6:b9:be:45:08:01:5f:aa:eb:a6:a8:a3:
                    b5:1c:ec:c7:61:d8:02:c0:34:c0:d5:37:07:0a:6b:
                    91:c3:85:fa:47:dd:3e:4a:8e:9a:2d:1e:70:24:1d:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1C:65:C8:B1:41:30:DA:D7:69:1C:E5:A1:3A:72:34:E0:F4:8F:43
            X509v3 Authority Key Identifier:
                keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:88:03:cc:85:3d:cf:c4:6d:5d:63:a6:2c:89:42:09:bc:c2:
         5a:fa:9c:cb:6a:45:d0:c4:37:c4:69:31:6f:0f:cc:09:0b:43:
         97:83:19:9e:cc:9f:40:02:ac:1e:f0:48:d1:3e:6a:7f:e5:c9:
         87:76:f7:d5:50:da:05:9c:28:76:dc:38:d7:b2:d3:9e:7a:91:
         6f:40:91:d9:6a:9f:9b:73:98:e5:83:45:b7:18:38:d0:fa:ca:
         2e:07:5d:a9:d1:49:b1:5c:bb:11:dc:67:72:f1:d2:7c:ad:40:
         46:5b:5a:6c:e0:ab:90:12:e5:04:f0:da:a2:25:bc:24:ac:3e:
         b2:c2:33:23:6c:3e:42:ae:d3:f0:c0:8e:cc:36:2f:d2:90:d5:
         af:64:18:b9:a6:c0:d1:fa:29:02:93:65:94:d3:3e:fd:01:65:
         8b:6a:82:aa:85:85:d7:6b:52:48:52:84:2b:ab:0d:2b:ee:c7:
         76:4e:7f:e3:11:fb:0a:9a:49:2d:c3:ab:ad:65:47:aa:88:a3:
         db:b7:f1:4c:f9:5f:d9:07:95:53:92:6f:b8:1c:f6:88:55:fc:
         c3:45:a5:2e:a4:06:90:a8:14:b9:43:38:ca:79:54:e6:a3:61:
         92:8b:b0:04:2c:9b:3c:99:9e:08:af:39:31:dd:62:c1:a0:cd:
         03:86:06:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:01 2025 by rpki-client