This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File:                     sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier:          +3VA7YmOVKhebSN7Ay5H4PwdWueKEPDfg4U5Nr6Fdkk=
Subject key identifier:   5E:7C:70:B7:14:EF:2D:65:1D:72:CA:EF:E2:D0:10:8F:B0:5A:72:C5
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       07E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number:          07E0
Signing time:             Thu 18 Dec 2025 20:41:25 +0000
Manifest this update:     Thu 18 Dec 2025 20:41:25 +0000
Manifest next update:     Thu 25 Dec 2025 20:41:25 +0000
Files and hashes:         1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: lee+AoNEmoBeqlZdcee2Nu8+96CyoH6y3f0XCCBWOO0=)
                          2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Dec 18 20:41:25 2025 GMT
            Not After : Dec 25 20:41:25 2025 GMT
        Subject: CN=694466f5-1dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:de:c3:5b:74:44:b3:05:e0:75:53:d0:22:b5:
                    2f:6e:3c:0e:ad:d7:d5:10:7d:1a:ad:c3:a3:64:23:
                    f0:e9:d4:0b:ec:95:d4:d7:6e:f8:13:ce:54:b2:c6:
                    8b:f1:d9:17:eb:07:2d:ec:89:6d:de:4b:3b:10:a0:
                    b1:68:8a:c6:43:47:f0:25:89:92:71:8d:d2:7e:c5:
                    ff:6b:34:3c:f7:50:3d:80:d6:88:dc:a6:5f:70:0d:
                    22:a4:83:b9:f3:74:e8:82:c1:3c:af:87:df:23:15:
                    bd:a4:26:5c:69:61:85:b0:a7:2c:db:1d:a8:3b:c5:
                    d7:6d:dd:5f:08:1a:5b:e5:f2:91:46:1b:58:60:64:
                    f5:f6:9b:e4:6e:fb:b0:eb:cb:90:8a:cb:3a:79:8d:
                    af:c2:d5:64:e1:9e:2a:de:95:da:0e:7f:b0:06:bf:
                    ef:51:03:17:45:e1:a2:59:1f:5b:68:7c:aa:63:a0:
                    79:97:6f:d4:45:7a:dc:92:20:2b:b0:78:2b:0b:aa:
                    f7:1a:4c:d6:0b:bf:e0:ec:39:69:c3:8a:0e:c8:14:
                    32:97:37:46:d4:08:ff:12:0f:44:d0:39:b4:2e:45:
                    60:17:3a:3f:b3:37:2b:b8:48:06:f4:53:28:1b:6b:
                    82:8c:8b:c4:63:68:b3:8d:ae:88:9a:da:e7:50:93:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7C:70:B7:14:EF:2D:65:1D:72:CA:EF:E2:D0:10:8F:B0:5A:72:C5
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:11:ae:3c:10:db:eb:87:f4:36:b3:4b:e0:7b:3e:67:72:
         b0:75:b1:ef:07:12:ac:82:c9:16:62:f3:c1:2d:3e:f9:6f:de:
         da:1a:e2:ad:f1:2c:a2:f4:f4:19:fc:2b:ed:a2:e1:3e:47:b7:
         ed:73:ce:a8:64:60:cc:25:19:a4:79:6a:d1:6f:d7:48:e4:52:
         d0:96:54:b5:05:fd:b1:26:22:38:57:19:f9:45:e9:ec:32:d3:
         69:01:39:d6:96:12:4f:7e:8c:c6:3a:d5:3e:1c:16:67:11:29:
         74:4a:13:f0:f0:b2:e4:37:da:5a:35:2c:82:8e:e2:5c:3f:73:
         2c:bd:1d:33:6c:c7:e2:4c:ae:0c:ba:ef:42:69:fd:a4:65:b5:
         69:1f:84:bb:47:1b:75:a0:86:ca:11:b6:d2:4a:4c:0b:6b:97:
         eb:29:01:2d:d5:f7:10:7d:d0:18:0f:d0:13:88:6b:6e:f7:db:
         80:5b:85:9e:e0:98:39:e2:e4:11:20:64:0a:73:95:6a:b5:dc:
         83:5b:66:d4:87:27:a1:bb:d8:8e:89:dc:81:65:98:20:83:15:
         15:9a:77:49:2f:bd:62:d4:e0:15:a3:22:67:00:9b:81:cc:8a:
         90:8e:65:48:2c:d8:71:be:a2:ed:f9:bb:03:4f:43:55:a3:3b:
         c6:ab:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:04 2025 by rpki-client