This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File:                     MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier:          gaZtsLSJz/ATao2XrtrLfiVeYMGXlil7J+Usr6sWZyY=
Subject key identifier:   D7:FA:BB:65:97:45:AA:11:AF:89:23:78:72:1A:2A:2A:B0:73:24:06
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer:       /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial:       14B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number:          1494
Signing time:             Fri 26 Dec 2025 16:36:58 +0000
Manifest this update:     Fri 26 Dec 2025 16:36:58 +0000
Manifest next update:     Fri 02 Jan 2026 16:36:58 +0000
Files and hashes:         1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: cdtdkDTQ6tbt5o2GtFMPj9nRI8JTyr9/saiCGg2NiuE=)
                          2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
                          rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 16:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5296 (0x14b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
        Validity
            Not Before: Dec 26 16:36:58 2025 GMT
            Not After : Jan  2 16:36:58 2026 GMT
        Subject: CN=694eb9aa-63c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:ee:4c:a4:f2:fd:1d:56:7a:fa:21:15:7a:
                    79:4a:6e:df:c0:cc:65:a5:31:2c:fa:c9:f0:6f:a9:
                    d7:6c:24:c8:46:38:3f:36:64:5f:65:1f:18:33:da:
                    2c:a7:87:85:41:fe:48:35:e5:a1:b1:5c:c1:21:3b:
                    5d:b0:a4:69:f6:54:d1:d9:e3:1a:06:79:9b:4e:0f:
                    85:f3:4e:0e:34:40:8c:58:df:53:9f:46:a6:31:45:
                    db:bc:eb:7d:95:c2:9a:1e:68:8f:6b:48:83:a6:b1:
                    f8:57:c1:ee:06:79:03:2b:21:17:92:2a:9a:83:b1:
                    97:d2:5f:d2:bb:74:66:ef:df:a7:b4:d7:dd:0d:dd:
                    de:31:45:ad:78:ac:8a:92:63:df:14:51:ac:a5:ae:
                    7b:34:a0:a6:03:f3:a4:13:00:ef:13:44:c4:7d:d9:
                    4d:7f:33:ec:da:db:50:1b:62:57:12:c6:af:96:01:
                    b3:c1:72:e7:e3:8d:92:ed:51:cd:0c:7d:4d:af:aa:
                    6c:09:06:9c:d5:e6:ff:42:95:17:eb:05:14:ca:0c:
                    d2:c1:43:96:3e:1a:af:9f:bd:03:66:92:b9:79:35:
                    db:08:9b:20:b2:d0:a7:18:b5:59:ce:ba:16:36:c8:
                    e7:2c:31:54:6f:9f:df:dc:e1:97:6e:9d:38:ee:40:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:BB:65:97:45:AA:11:AF:89:23:78:72:1A:2A:2A:B0:73:24:06
            X509v3 Authority Key Identifier:
                keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:44:5b:9e:fb:5a:3b:59:05:48:a1:c6:c1:e3:b6:5f:4a:
         50:55:6e:85:89:c2:2a:ef:da:bf:b5:0e:52:de:f4:88:d0:6f:
         76:52:02:99:9c:ac:f8:7e:7c:89:f1:29:a9:eb:ae:97:71:6a:
         d6:a4:49:a5:f7:b9:17:f8:3d:06:0a:39:22:ab:ed:2a:2e:1b:
         27:d8:86:83:e9:bb:db:eb:1a:26:c9:29:08:5b:61:a7:fd:b3:
         a9:e4:73:a8:ea:c8:d3:cf:3b:ba:12:ab:86:61:18:7c:66:97:
         8e:da:9e:a2:1f:12:24:b2:d2:5b:7f:2d:b7:80:f9:fb:de:63:
         4d:d2:51:d0:92:57:b6:26:46:d0:ec:6f:43:34:5b:02:03:a4:
         3f:59:3c:05:d8:4c:77:eb:35:d6:82:3c:4c:ed:ab:e9:7c:74:
         c0:d5:46:b6:ee:5d:8f:9e:3d:23:95:2b:e1:b1:a1:0e:c0:67:
         a8:bd:29:9a:9d:73:4b:f9:13:7c:53:a9:ff:01:ff:39:81:f4:
         4e:2f:ec:50:cb:6f:c4:3c:4b:69:60:14:bb:82:94:d6:b3:51:
         a5:3b:b1:b1:47:34:4d:4b:34:2d:18:b2:e9:fd:17:d4:e3:63:
         e1:ec:ac:26:c8:57:26:cb:8b:8b:6f:32:c3:c6:32:47:62:1b:
         39:1d:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:47:27 2025 by rpki-client