This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
File:                     40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json)
Hash identifier:          5u8HIXlbA7xqhPbQy9doe7MOJun4/MxfPT3XKrjCmPc=
Subject key identifier:   A4:C9:EC:C5:18:4E:C4:A0:69:B1:96:F5:5A:8E:39:10:1A:FC:25:D8
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Certificate issuer:       /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial:       02CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
Manifest number:          02C6
Signing time:             Fri 19 Dec 2025 00:38:12 +0000
Manifest this update:     Fri 19 Dec 2025 00:38:12 +0000
Manifest next update:     Fri 26 Dec 2025 00:38:12 +0000
Files and hashes:         1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: bIW2wxgaaiFMFN5HrqYlil807mM4hQB86eTIIs5aX7k=)
                          2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: NyO/WjiaEa7cdOFl5O0R3ch16GCk/x68oKBSzQpBSAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
        Validity
            Not Before: Dec 19 00:38:12 2025 GMT
            Not After : Dec 26 00:38:12 2025 GMT
        Subject: CN=69449e74-6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:6e:30:a6:07:d0:e3:42:00:e6:39:46:af:
                    a2:68:32:27:2d:4d:23:84:90:bd:12:8b:2e:d2:0e:
                    eb:e1:e1:f2:c0:6e:aa:52:82:ab:39:4b:72:f8:f6:
                    f1:dc:f3:98:40:0f:f3:26:7e:4a:1c:62:1f:5d:c3:
                    76:77:89:29:98:51:c5:0b:8e:36:6e:6d:c6:68:2a:
                    0a:c0:af:c4:24:f2:4a:54:69:8e:4e:b9:40:45:e6:
                    28:c0:39:c7:a1:7b:06:58:e5:aa:79:30:64:52:09:
                    96:3c:d8:ff:fe:94:54:13:a4:dd:51:6c:bd:25:68:
                    5d:06:88:5a:c8:e1:77:36:ca:3c:04:93:45:9b:af:
                    09:b7:51:3e:91:89:f5:83:00:d8:22:00:0f:15:e8:
                    8c:a9:0b:ba:d9:55:02:f5:4b:24:15:ed:20:c0:69:
                    be:03:67:52:70:40:85:2a:54:fb:d6:c1:44:19:98:
                    42:4b:ab:a3:40:84:93:bb:db:f6:ec:1b:92:7a:cb:
                    02:44:b8:93:c5:9c:72:66:99:dc:b2:0c:38:1c:d9:
                    eb:3c:da:70:cb:b5:f3:65:b7:ea:4a:c9:5c:6c:4d:
                    35:d2:6c:d3:ac:6a:1c:47:0d:af:54:f0:03:1a:0c:
                    9d:77:34:3e:8b:fe:c5:22:19:a2:e6:f6:50:91:40:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:EC:C5:18:4E:C4:A0:69:B1:96:F5:5A:8E:39:10:1A:FC:25:D8
            X509v3 Authority Key Identifier:
                keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:09:05:21:7a:c3:55:fe:50:b2:89:38:f5:15:a5:b5:48:
         95:30:60:8f:37:1c:c2:da:16:b3:3b:b1:22:ae:39:f5:92:71:
         e6:dc:8c:a9:4a:52:c2:3d:5b:26:52:3b:d9:f8:93:cd:5a:2a:
         cf:f5:d5:8a:43:54:4b:a3:df:11:c9:58:ee:70:b5:d5:fa:5d:
         1b:2e:3d:62:d4:4e:43:53:ac:26:7c:38:cc:37:91:e8:37:86:
         1e:52:5a:c6:05:35:0d:f9:e4:f0:ab:49:a6:68:ac:c6:1d:0b:
         0d:16:51:39:46:5f:ae:21:5a:5d:39:9f:3e:ee:cf:e3:52:80:
         f0:f8:4c:df:91:ca:df:f8:cf:ec:31:ec:2f:42:1f:4a:b8:0c:
         44:f3:7c:16:97:0c:5c:d4:de:ed:c1:f3:ad:61:df:01:9d:b1:
         ef:40:ec:3b:99:64:1e:be:01:0c:94:90:e8:35:47:1b:e4:a5:
         37:93:8f:38:17:4f:aa:83:77:7b:dc:c9:34:86:56:8e:b7:ab:
         4f:bf:bb:d9:f7:a5:64:cd:86:62:49:e2:16:92:e8:92:87:83:
         d5:a7:c3:6a:85:dd:ba:00:c6:1e:d9:56:1f:b1:75:4c:c5:3c:
         71:b4:4a:66:5d:f5:31:3b:98:e5:c5:ff:ca:56:ce:c6:1f:68:
         38:1a:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:09 2025 by rpki-client