This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File:                     9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier:          25rnZQVWhGMlo6DChyTw1GNwsBOx/R7ccGLSYzB1CeE=
Subject key identifier:   40:11:34:B7:EA:B9:93:3D:17:73:BA:09:DD:85:3E:8D:4B:81:E4:FF
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer:       /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number:          74
Signing time:             Fri 19 Dec 2025 05:51:04 +0000
Manifest this update:     Fri 19 Dec 2025 05:51:04 +0000
Manifest next update:     Fri 26 Dec 2025 05:51:04 +0000
Files and hashes:         1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: ifEYPoZZ8nR5FN7y8lc8yVEbkWOZ8WuBXpWZequvKtk=)
                          2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: h8My7kHHxTir1n7YjOpu1k0UspYcJlhUdG9c241e5p0=)
                          3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: xPUr73eaPxAllhq8tmQserAPhMGn1YX9uZTViIiEYlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
        Validity
            Not Before: Dec 19 05:51:04 2025 GMT
            Not After : Dec 26 05:51:04 2025 GMT
        Subject: CN=6944e7c8-5126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:70:af:d8:49:49:29:84:58:1c:13:a7:46:
                    c7:8b:00:25:f5:f0:2e:85:fe:29:52:15:e3:7d:71:
                    ca:c1:97:b6:0c:64:ed:2f:62:03:b1:72:2b:32:90:
                    9c:e7:9b:ad:c9:1f:c5:ce:2a:69:d4:b5:ba:69:e0:
                    6d:a5:10:d1:7a:2a:72:43:dc:df:d2:cb:ed:60:8a:
                    b1:d2:52:c8:e9:3b:17:18:cc:b6:b8:21:d2:03:f7:
                    10:04:57:31:1c:9b:33:23:3d:3f:40:7d:34:db:4e:
                    e6:19:a2:c0:51:a4:60:40:b6:ca:6b:55:87:d6:39:
                    72:68:ff:8b:a0:da:6f:17:eb:49:f3:61:e8:bd:b5:
                    5a:7e:fa:f3:0e:45:9c:4e:83:49:23:b6:8a:04:c2:
                    88:d5:5a:ed:43:74:2f:9d:6f:63:11:25:e0:b3:1c:
                    9d:81:70:67:e9:7b:4d:48:00:0e:23:67:12:8a:87:
                    e9:66:0a:1c:c4:69:6b:b6:37:7b:5d:da:e7:b0:a3:
                    b4:e5:01:53:68:c2:b4:4f:bf:ff:1f:78:55:f5:c1:
                    ee:2c:b1:b9:e9:52:5f:1c:62:d8:7e:7f:16:d7:a5:
                    97:92:86:47:3c:48:22:89:93:21:03:01:5c:2a:62:
                    f7:1d:aa:85:df:73:1d:a7:25:34:be:79:fe:54:b8:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:11:34:B7:EA:B9:93:3D:17:73:BA:09:DD:85:3E:8D:4B:81:E4:FF
            X509v3 Authority Key Identifier:
                keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e6:ed:eb:0c:24:4e:ff:54:37:23:b8:36:7d:85:55:59:b6:
         c9:35:1d:e4:81:58:9c:3e:2f:fa:33:4a:23:9f:ee:c3:4d:3b:
         07:2b:6b:0f:5e:f6:4a:a7:b8:ef:60:44:24:ed:25:db:3e:58:
         5c:06:cf:fd:60:fd:31:39:00:a5:38:42:01:51:b1:26:38:7a:
         ba:c7:07:b9:ac:6f:48:75:3e:11:05:ed:70:5b:5e:61:0e:f1:
         1d:44:67:30:e2:6d:5a:1c:a2:79:8c:db:66:e9:35:de:92:85:
         61:70:d5:e4:a1:10:bf:cb:ed:84:10:13:7f:17:4f:89:00:f2:
         5d:34:67:8a:e1:51:36:b8:fb:3b:10:46:11:de:11:48:c0:e2:
         f4:2b:5f:ae:b3:9b:c6:6c:0c:9b:6d:4e:2d:5c:66:9b:1e:53:
         63:9d:c4:df:36:e0:77:74:36:20:db:84:61:dd:d2:bb:ee:59:
         93:d2:08:60:68:15:44:9d:66:0a:0b:d0:e6:50:be:e3:8e:7e:
         10:cd:43:af:68:19:d4:5b:02:8c:c4:b8:de:c6:ab:5b:62:a0:
         08:59:34:a8:c3:b0:70:f0:f1:26:c1:46:27:c3:c6:5d:5a:be:
         1d:74:c6:d6:76:6f:61:50:78:da:f9:e5:d7:7a:45:4a:b5:2c:
         6e:d7:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:58 2025 by rpki-client