This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
File:                     iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json)
Hash identifier:          hsJmD1wjmTiG/9v+ils8DN+fy6diw6Pqfg2dw2yfXAc=
Subject key identifier:   0C:8D:00:C4:8D:57:4E:E3:A3:3D:EC:15:FF:43:E7:BE:48:2A:09:42
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Certificate issuer:       /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
Manifest number:          0231
Signing time:             Mon 29 Dec 2025 01:08:23 +0000
Manifest this update:     Mon 29 Dec 2025 01:08:22 +0000
Manifest next update:     Mon 05 Jan 2026 01:08:22 +0000
Files and hashes:         1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: c0ygBpYD0A98woWeh9bkMRZpScT5J+qaAjLg7ftzcI8=)
                          2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 01:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
        Validity
            Not Before: Dec 29 01:08:22 2025 GMT
            Not After : Jan  5 01:08:22 2026 GMT
        Subject: CN=6951d487-7c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:34:31:a3:b9:a0:df:44:69:3a:7e:ad:3d:
                    6d:dd:ee:25:5d:c8:55:b0:0f:42:fd:a1:7e:0b:41:
                    a8:32:99:1d:6d:3a:d8:24:f9:dc:ea:70:1c:c6:87:
                    af:80:55:aa:2d:c6:b1:c6:65:f1:24:f0:28:d5:4c:
                    76:98:66:a6:14:ea:ea:cd:d9:66:dc:5c:b5:8a:f9:
                    bb:0a:e4:14:be:72:c2:93:d5:09:88:7d:d4:b7:73:
                    33:3e:f2:8f:09:73:4b:2d:a2:4e:0c:84:4c:ab:d1:
                    97:7e:d5:33:83:06:ba:9a:f2:09:f6:f9:49:cd:2e:
                    1c:d0:82:ff:12:15:8a:6a:c5:29:ba:5a:6d:fc:17:
                    7c:0b:79:28:16:92:b1:c0:34:02:3e:fc:85:38:c8:
                    94:90:5c:2c:34:83:bb:b6:69:22:c0:66:05:b8:a8:
                    d6:03:ef:38:d8:01:0f:c2:ea:c6:f6:3b:92:19:7f:
                    e6:39:f0:62:de:43:99:9f:4e:ef:b4:60:e7:5f:d2:
                    7d:19:64:4d:1c:f8:0f:87:46:0a:08:32:0f:c0:1f:
                    94:0c:b1:72:0e:50:d3:e8:29:03:66:6e:20:c4:cf:
                    3c:aa:0f:8c:e9:b2:31:38:c1:33:4a:bc:eb:f2:43:
                    a7:98:f5:a5:7d:b1:08:b6:ec:fc:0f:26:c2:38:ad:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:00:C4:8D:57:4E:E3:A3:3D:EC:15:FF:43:E7:BE:48:2A:09:42
            X509v3 Authority Key Identifier:
                keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:34:85:a0:98:9d:ae:e6:ad:ce:5e:9b:50:8b:71:4d:18:54:
         91:5d:b3:6f:8d:63:d6:05:95:bf:02:fe:12:5d:f3:8e:56:79:
         72:91:bc:1b:69:fd:7d:9e:f1:48:62:9c:49:b8:f2:fe:fc:a7:
         70:cb:f1:eb:ad:53:31:d7:72:51:33:ab:e8:e9:5d:ae:b9:db:
         66:68:3f:e6:ad:f2:e3:4c:4c:bf:d5:d5:2f:73:e9:23:35:9e:
         a6:5c:6b:a1:4f:53:a9:1a:a2:62:5a:85:67:40:73:d8:53:33:
         c8:8a:9f:ef:45:ec:2d:8f:b5:0d:c8:09:db:52:b1:9c:7f:6d:
         67:ab:e4:01:fe:dd:d0:fe:c8:54:26:50:06:52:5b:03:26:45:
         92:9e:e7:fa:59:38:ea:af:3f:18:ec:6b:7c:bc:86:78:0a:63:
         6e:bb:4a:8d:a3:36:5b:f6:d9:0a:6b:b3:b7:7c:dd:26:d4:8f:
         58:23:95:56:15:10:4b:b1:a2:dc:89:11:59:f2:b8:01:b6:e1:
         fb:f3:eb:cb:34:8f:68:f6:55:bf:45:8b:37:c0:8f:af:3d:92:
         dd:71:41:73:3c:9f:54:0d:71:08:0e:0a:d8:6f:89:d0:d2:89:
         d5:19:47:da:76:6d:19:ad:8a:ae:1c:94:f4:51:e5:a1:a9:ec:
         e8:23:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 01:50:14 2025 by rpki-client