This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
File:                     RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json)
Hash identifier:          0pdkHwpFHNXhkas3nhWbeu+mk9ZbxAgZluz0K+XGJmc=
Subject key identifier:   01:12:C7:11:8A:30:C1:DD:06:F7:E3:38:22:FE:7D:22:CB:E9:D0:C0
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       06CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
Manifest number:          06B9
Signing time:             Thu 18 Dec 2025 21:41:10 +0000
Manifest this update:     Thu 18 Dec 2025 21:41:10 +0000
Manifest next update:     Thu 25 Dec 2025 21:41:10 +0000
Files and hashes:         1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: npk+bPDSJgXaHxbugWVuEfXsh/a0Ak+0CLxaNAUma98=)
                          2: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=)
                          3: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
                          rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Dec 18 21:41:10 2025 GMT
            Not After : Dec 25 21:41:10 2025 GMT
        Subject: CN=694474f6-462f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:55:4b:96:52:88:1e:cd:f7:33:2e:84:2b:
                    12:07:55:ad:a1:11:48:85:fd:dd:49:92:5d:3c:b1:
                    9f:12:33:0f:91:30:e4:4f:a6:97:27:92:5f:80:47:
                    9e:a1:cf:bc:b4:dd:b2:8c:20:62:1e:7d:53:cd:99:
                    c6:c8:1c:01:68:47:bc:32:24:7f:00:f0:be:29:d0:
                    2f:eb:46:42:c4:52:9d:f1:71:ab:01:bc:57:99:04:
                    07:c1:12:48:1c:ae:8b:df:51:b9:72:f1:cc:0f:61:
                    61:0f:49:55:ba:83:2d:6f:02:66:fe:24:47:18:c3:
                    a3:bb:48:c1:cc:69:36:50:72:f0:9e:7d:5e:a1:9c:
                    2e:22:3f:b8:71:71:1c:41:a4:ef:b7:ff:ad:07:b9:
                    1e:f0:ad:16:54:6b:a6:f5:78:f5:a0:59:d9:32:61:
                    fb:5b:04:12:94:0e:b0:ea:63:d8:b6:4f:c8:54:ad:
                    36:ae:04:db:c9:dc:1a:3e:85:9b:8e:57:f2:c9:42:
                    b0:bf:6a:81:2a:fc:5b:83:52:a6:b6:e5:49:29:46:
                    38:9b:d7:a7:0c:c4:c2:67:54:13:b6:0e:f0:f4:6c:
                    d0:d8:d1:75:19:1b:43:86:72:4e:6c:d8:00:9c:29:
                    42:06:97:d8:5e:75:49:5e:6f:be:76:63:43:67:80:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:12:C7:11:8A:30:C1:DD:06:F7:E3:38:22:FE:7D:22:CB:E9:D0:C0
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:4f:f9:1b:95:9d:6a:c1:a6:9c:85:b8:98:10:76:4e:75:
         b7:68:51:15:97:3e:c4:cd:70:aa:77:b3:73:06:3b:8a:b2:6e:
         a9:ab:7b:19:ee:d2:7c:a7:e1:71:c5:b5:95:95:2f:15:ba:61:
         31:73:1b:03:1b:b8:bc:22:43:38:73:d7:e9:73:c2:1e:4f:43:
         8c:70:d8:8a:06:54:2d:f2:2a:35:54:d6:2f:ed:4a:eb:b8:45:
         1c:dc:22:31:6f:cc:cf:25:5f:32:d9:d6:b1:11:77:9b:3e:9d:
         ee:c3:79:53:09:11:ac:4d:c8:c0:02:c5:36:b4:58:ff:1c:04:
         46:8b:4e:3e:3e:d0:97:e7:d4:c4:1e:79:9c:63:e8:e9:ca:59:
         3d:04:5a:e9:14:2b:2e:ef:64:3a:3d:df:4a:60:29:c8:f7:a2:
         39:a0:04:09:17:da:4c:4f:5c:51:6b:51:00:fd:da:b1:b1:e7:
         c2:63:53:ab:4a:b9:06:8a:71:0d:01:6f:52:01:44:fe:68:32:
         ad:87:eb:70:9f:5d:89:3a:ce:53:a9:b8:97:c2:70:96:53:e2:
         24:52:16:ea:02:2d:da:e7:65:a8:22:09:5c:74:23:8e:3a:f1:
         c5:e3:cf:cf:29:25:3b:f3:22:c9:0c:71:e0:bc:e3:a2:fd:30:
         61:ec:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:23 2025 by rpki-client