This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File:                     GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier:          KFwBh76TsIBK7+y+KwNxbhH38Zt2jpW4XRHtUJmqxAQ=
Subject key identifier:   6B:9F:77:F8:F5:C1:F4:4F:F1:4A:B1:7F:6C:D6:66:7E:A5:98:05:DA
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer:       /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial:       0AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number:          0A98
Signing time:             Sat 20 Dec 2025 19:16:41 +0000
Manifest this update:     Sat 20 Dec 2025 19:16:40 +0000
Manifest next update:     Sat 27 Dec 2025 19:16:40 +0000
Files and hashes:         1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: 7eMV+9cS7QnJ90LoeU5t7BoESer9plyryHtyP8e23rA=)
                          2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 0KMFzCuGu1v0hK3kHcYTktNw8X2QSZsfmeH/owyGjh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
                          rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
        Validity
            Not Before: Dec 20 19:16:40 2025 GMT
            Not After : Dec 27 19:16:40 2025 GMT
        Subject: CN=6946f619-a498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:a4:7d:5e:20:80:06:ab:b5:d2:49:78:e1:
                    75:68:ca:56:23:f2:7d:e2:8f:55:15:79:a9:50:d4:
                    c3:96:dd:71:93:af:07:97:16:e2:3e:90:e0:de:84:
                    c6:4a:70:32:0e:98:43:d3:be:d9:89:23:df:57:93:
                    7f:35:72:76:7c:56:96:0e:bd:cb:1b:37:8e:aa:ba:
                    41:4e:84:fa:53:65:f0:15:70:b0:9b:2b:ff:20:73:
                    f4:c9:e4:87:2b:ee:40:2f:b7:32:c7:56:65:ab:97:
                    1d:fd:a2:90:65:c3:bd:59:25:04:94:5b:14:6e:fa:
                    2d:c1:94:e9:81:46:70:eb:92:bf:0f:fc:7d:34:7c:
                    ba:25:f3:6e:fe:93:d0:df:10:c7:d8:80:00:6a:06:
                    8c:3b:a0:f9:97:66:55:53:c1:2d:1b:a0:96:4e:76:
                    00:62:af:e7:dc:d5:ca:45:ea:1c:13:c0:c7:3c:c8:
                    1b:28:fb:04:36:ad:61:b3:69:f8:2e:59:1e:bb:3f:
                    9d:f1:d7:5d:1e:1b:da:1b:15:2c:38:7f:d9:07:7f:
                    b5:6d:65:28:b8:ec:ce:a0:05:70:ca:b4:ec:de:98:
                    33:6f:17:0e:ad:ef:c7:7c:fc:4d:18:4a:5f:6e:5c:
                    15:5a:7c:4a:0d:7b:91:12:a2:3c:fe:6a:c9:a0:e6:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9F:77:F8:F5:C1:F4:4F:F1:4A:B1:7F:6C:D6:66:7E:A5:98:05:DA
            X509v3 Authority Key Identifier:
                keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:98:d0:c9:0e:12:67:03:10:3c:ee:1e:db:ec:6d:a0:36:35:
         04:8e:92:80:61:08:13:4b:08:10:c7:0b:0b:db:56:0e:8d:13:
         e0:f2:0a:52:bc:8b:33:61:92:45:5d:5a:8d:8d:57:43:e1:de:
         58:69:cb:9c:71:6e:b4:43:e1:2b:6b:f4:2d:03:9d:92:66:d0:
         be:f7:6f:af:b5:65:db:29:cc:b6:3f:51:ab:bc:b2:c2:97:81:
         24:82:e4:ba:77:23:24:68:a5:79:f0:9a:36:9d:d2:76:e8:93:
         df:de:f0:8b:50:e0:67:ed:ff:1d:7c:49:b7:31:ed:40:26:de:
         5a:2b:f6:f9:36:03:4c:b9:ba:5c:44:19:b3:bd:fd:08:7b:08:
         b3:eb:46:5f:0a:07:d9:c2:5c:a5:cf:d6:38:48:02:80:c5:1a:
         37:de:a4:e8:18:9b:09:82:af:42:b6:50:47:e8:e9:de:a1:7f:
         93:e0:51:51:54:f0:67:60:76:13:97:47:34:08:9a:6f:ac:43:
         d1:6b:f9:86:7a:74:e9:a1:8d:3f:31:fe:e4:0f:a7:06:15:3d:
         69:3c:aa:26:75:13:34:b3:6f:23:ab:21:64:20:57:ba:a2:5d:
         24:f1:73:92:74:af:65:5a:87:5c:c9:64:9b:c0:ca:9a:a4:cc:
         41:62:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:08:19 2025 by rpki-client