This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File:                     MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier:          7xN5dps+TJk0wBU/Fvtyz+z8698Pz9WBMV1GILVMqns=
Subject key identifier:   85:00:7D:9F:EF:E2:45:B8:3B:C0:F1:34:ED:9C:A8:55:F1:F8:41:D9
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       1501
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number:          14ED
Signing time:             Wed 31 Dec 2025 16:37:59 +0000
Manifest this update:     Wed 31 Dec 2025 16:37:59 +0000
Manifest next update:     Wed 07 Jan 2026 16:37:59 +0000
Files and hashes:         1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: lFKHs4cCN3E+tOAFgFj6P34f4It1d9+IpN0nadRD100=)
                          2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: fzmHVxiTK7D8PG5yindwGef8+csbEOVTRn9jS+V30ac=)
                          3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: iYa29kjN+8nhwT/98WnKo7Pi7A7FL3PggbbxiD2rxqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 16:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5377 (0x1501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: Dec 31 16:37:59 2025 GMT
            Not After : Jan  7 16:37:59 2026 GMT
        Subject: CN=69555167-849c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:8a:4b:43:99:41:46:a6:38:82:0b:b4:84:
                    97:51:a4:61:49:57:4b:c3:0d:09:d8:22:6c:c3:48:
                    0a:ad:7a:35:47:99:4a:92:ef:b0:c9:42:14:70:a0:
                    0e:bf:79:18:aa:5c:50:43:7c:9b:e9:ab:3e:97:9c:
                    a2:59:90:42:f7:59:14:79:78:da:12:64:eb:07:aa:
                    1e:73:ac:34:59:8b:44:c2:51:fc:eb:c0:18:77:49:
                    0f:09:ef:36:42:dc:2d:c7:c6:6c:ec:58:a4:97:ed:
                    6b:46:00:e9:4d:43:9f:e2:14:76:b6:47:28:f6:f3:
                    da:4c:15:41:02:e6:27:71:87:2d:83:07:bf:41:be:
                    ba:0c:40:ba:3b:1b:11:92:5b:13:96:ce:94:67:af:
                    47:0e:df:c3:3e:eb:e8:93:9e:dc:b1:2c:e1:a7:53:
                    27:ee:fa:c7:da:98:d8:7f:40:9a:49:1d:43:05:dd:
                    77:dd:dc:c3:86:bd:fe:2f:bb:9e:54:30:2b:39:21:
                    1e:86:a5:41:cc:8b:a2:0c:12:41:54:3e:13:1f:fe:
                    f4:0c:0e:55:5e:51:13:1f:48:6e:24:0c:2e:90:c9:
                    52:2e:10:c5:89:39:16:3b:2c:f6:c3:13:76:cb:da:
                    ec:ca:c6:4e:3f:32:b3:5b:e8:9d:ff:51:5f:88:86:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:7D:9F:EF:E2:45:B8:3B:C0:F1:34:ED:9C:A8:55:F1:F8:41:D9
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:04:62:21:5d:48:2e:74:57:fd:f2:e8:20:12:67:6a:42:76:
         0b:3d:77:f6:90:99:5a:58:3d:b9:4e:f3:b7:3d:57:bf:8a:29:
         31:b5:0b:08:6a:cc:6b:0f:28:28:2c:d1:de:3e:91:ad:ee:1e:
         15:38:46:32:9c:34:03:74:bd:88:d4:07:a5:0f:f6:c7:fb:5b:
         69:2f:11:d1:4a:1f:09:96:41:3c:7a:be:eb:eb:14:a5:1e:c9:
         57:97:18:be:6e:12:62:90:92:24:c9:0a:92:db:d7:3a:0b:ec:
         e4:be:53:66:a3:6a:ac:a1:0a:72:d1:89:a7:d3:39:92:b0:0b:
         48:4d:40:c0:de:ec:07:a2:a8:5b:67:46:55:1e:f8:4b:3d:d2:
         a3:24:38:27:32:c5:f3:bd:96:78:50:5f:34:cf:0d:a2:d4:9b:
         74:1e:71:f2:c3:db:74:1a:1f:84:3c:29:db:f7:20:ad:42:b6:
         9e:6a:c7:79:38:64:26:3e:d1:4d:e3:fa:5f:eb:e5:03:25:99:
         b8:2e:82:93:70:0b:25:77:f6:94:e8:ce:52:80:26:e7:6a:98:
         0e:f6:7a:10:51:cb:b6:29:56:06:69:2f:c8:0e:b5:75:17:70:
         8e:b0:8c:05:ad:80:ee:ab:90:ec:c2:56:43:2e:10:3a:c6:b8:
         61:12:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:53:23 2026 by rpki-client