This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
File:                     71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json)
Hash identifier:          ogmDdyPEf72nPj0SttI2jdwBjG39b7oFJGcUS1pRLZY=
Subject key identifier:   5C:26:5E:20:0B:EF:0B:43:6B:A4:19:FC:94:1C:BB:43:48:FB:70:3E
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Certificate issuer:       /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial:       05D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
Manifest number:          05C8
Signing time:             Tue 30 Dec 2025 22:18:07 +0000
Manifest this update:     Tue 30 Dec 2025 22:18:07 +0000
Manifest next update:     Tue 06 Jan 2026 22:18:07 +0000
Files and hashes:         1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: E2JaCOwCyKY9sCy6bcpxaT9sZfpWyNU7uMwFDYssiiQ=)
                          2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: MnGT95K1KMZ27Vz9GV0/eAka386Vq2ptFRht280ijWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
                          rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
        Validity
            Not Before: Dec 30 22:18:07 2025 GMT
            Not After : Jan  6 22:18:07 2026 GMT
        Subject: CN=69544f9f-52bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:06:65:f4:17:0a:69:f4:50:39:89:4b:f3:
                    de:21:ba:3d:dd:b3:2c:b6:10:83:01:e9:36:63:bc:
                    ba:92:07:fd:e8:9f:01:0d:9b:07:23:01:f6:6c:bc:
                    23:25:32:4f:cb:c3:35:e1:6f:11:70:67:69:9c:28:
                    d7:b6:0c:07:fb:ba:11:22:c7:a3:47:cb:29:78:3a:
                    f4:f5:67:4d:99:0b:37:14:af:07:b8:a7:59:5d:22:
                    c2:f6:78:88:5b:93:ce:d5:8c:34:4a:93:35:d7:4b:
                    6b:66:f6:a7:cd:6d:e3:dc:d2:85:07:79:12:1a:10:
                    59:21:3f:ee:39:e0:b9:d1:36:81:1a:34:04:13:ac:
                    67:73:c7:e4:cd:e1:bc:c9:96:71:dc:33:58:d7:07:
                    2d:f5:48:94:4a:07:1e:63:a2:16:84:bf:a8:36:e3:
                    89:0e:50:8b:af:30:cc:a6:2c:6e:93:48:b2:73:77:
                    5b:89:c6:cf:32:70:f7:26:0a:73:86:60:73:e4:63:
                    d3:a0:fa:7e:6e:5b:3f:97:d1:63:c3:1d:dc:2c:f5:
                    99:33:d6:af:bf:91:3d:42:77:ed:bd:5a:30:06:87:
                    cf:9a:ba:82:fe:6e:11:ce:fb:51:96:d2:22:74:8b:
                    bb:29:07:e8:32:c1:33:83:5a:2d:cc:ec:ef:77:b1:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:26:5E:20:0B:EF:0B:43:6B:A4:19:FC:94:1C:BB:43:48:FB:70:3E
            X509v3 Authority Key Identifier:
                keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:8f:e1:86:97:c0:ac:3b:09:cc:12:00:f2:06:75:17:a8:
         de:41:e9:96:ed:7a:ba:b7:ee:a0:12:8d:df:da:fe:27:94:72:
         66:89:02:37:21:7a:57:c1:45:bb:83:1e:a5:de:b3:02:8b:98:
         8e:36:88:5c:a5:9e:e2:79:8b:91:9b:ca:43:42:cd:09:10:09:
         df:d3:28:37:e1:6b:58:0c:34:9e:13:15:eb:b3:c7:b2:a9:04:
         bb:17:0e:bb:7a:63:1c:f2:6b:fb:81:9e:e4:95:19:dd:06:b6:
         84:e5:ba:90:85:3f:a8:ad:37:46:20:cf:f5:14:67:94:f9:db:
         a2:24:dd:3c:af:d3:0b:b0:ee:5d:c3:d8:b7:bf:17:4c:cc:2d:
         ae:75:40:3f:0b:2b:64:ce:29:27:b7:d5:56:53:23:14:03:e1:
         61:00:82:ca:ba:b9:35:82:7e:e8:5c:eb:55:e5:1c:d5:c2:f6:
         a7:4b:da:1c:5e:dd:2e:e3:02:37:e7:69:b6:7c:4c:5e:03:54:
         7f:31:27:17:ca:a3:de:3f:0b:2c:f4:97:d5:7f:b6:5c:a0:29:
         ef:19:d3:b4:e9:a9:9d:0a:22:89:31:86:d5:44:8a:17:e4:72:
         ad:1e:d9:8a:b7:94:27:28:ca:d9:41:1f:b7:08:7e:25:d3:03:
         c8:91:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:05:32 2025 by rpki-client