This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
File:                     mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json)
Hash identifier:          NCz5WTXY0SDQ8VKdjhJGqp0S8vRk98LLlW0AQOtjxeY=
Subject key identifier:   88:7D:9C:D6:F6:20:90:C8:5B:16:B9:C4:64:90:28:24:DA:D8:78:AE
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Certificate issuer:       /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial:       06A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
Manifest number:          069F
Signing time:             Sun 28 Dec 2025 21:38:10 +0000
Manifest this update:     Sun 28 Dec 2025 21:38:10 +0000
Manifest next update:     Sun 04 Jan 2026 21:38:10 +0000
Files and hashes:         1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: Ls6huBFX70UtngM4nLYu25AE/cA2sTLOsDCp2PBNdAo=)
                          2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: EQNnt+47JakLAicAJpey8kMF4fyXy0EyBy2A09Z/nmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
                          rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 21:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
        Validity
            Not Before: Dec 28 21:38:10 2025 GMT
            Not After : Jan  4 21:38:10 2026 GMT
        Subject: CN=6951a342-2d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:98:c5:a5:c0:dd:dd:34:d6:25:ab:13:19:
                    dd:48:00:87:7a:84:e8:74:28:4c:8d:96:68:82:69:
                    a3:46:30:30:ea:e6:ad:91:90:96:ed:8d:1d:34:e6:
                    24:af:e4:b4:19:8f:79:ca:b1:5c:f8:85:3d:99:6c:
                    32:0f:6e:98:3e:b5:4b:3c:37:5d:c4:95:86:1d:3d:
                    e4:07:a8:14:a9:b4:7e:88:f9:9d:8f:96:12:e5:67:
                    de:79:3d:d5:a7:a5:8f:4f:55:9c:ac:ba:0e:e6:3b:
                    59:91:a3:84:2a:99:c7:9e:ef:93:0d:f5:bf:c4:22:
                    de:9b:f0:c5:b2:5b:1a:fd:cd:aa:d1:9f:0b:0a:b6:
                    84:f5:2c:91:ae:98:b4:11:05:5f:a9:6b:03:90:d5:
                    ef:83:ac:14:2c:4a:4d:fb:e4:01:8c:c8:22:4c:27:
                    90:ad:47:92:41:2b:da:65:ac:46:92:e4:65:df:91:
                    36:9b:6f:3d:6a:8d:90:4c:fa:3b:89:22:b0:8b:ff:
                    d2:db:cd:1f:d1:6d:d7:10:6a:64:a5:cf:8c:91:6f:
                    5c:38:b9:15:de:e7:9e:12:e7:33:34:ce:3c:3d:6f:
                    a1:0a:ac:63:87:8c:5e:d5:78:89:aa:b5:c0:95:1e:
                    90:71:4a:e2:3b:03:97:91:f0:1c:a4:6d:0c:05:66:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7D:9C:D6:F6:20:90:C8:5B:16:B9:C4:64:90:28:24:DA:D8:78:AE
            X509v3 Authority Key Identifier:
                keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:50:74:4c:04:f8:ab:4a:d4:51:da:f2:5e:45:89:df:81:a3:
         34:18:52:93:7f:c9:92:21:31:d4:1d:b2:8d:7d:07:06:4a:0b:
         f0:2e:9e:75:41:36:45:26:a3:1f:b2:61:ec:7f:af:7d:6a:25:
         4a:90:4a:2c:dc:a4:27:f1:96:9f:7d:77:cd:f9:18:c3:c8:b6:
         84:84:c4:b8:a7:4a:bc:8a:36:69:5b:1d:ad:51:97:d4:d0:42:
         47:28:f3:02:cf:cf:86:f3:f4:6f:72:9d:7d:78:58:6f:3d:eb:
         b9:45:a7:5e:9d:56:03:c2:2f:5f:67:3c:e8:a9:3a:27:a0:99:
         2d:80:b0:ad:5a:4f:a5:ff:94:16:c9:59:8c:0a:3e:88:c8:9e:
         9a:17:04:34:05:97:0e:5c:b6:5d:6b:ba:a5:ec:fe:fe:92:e9:
         c8:a0:a8:86:94:92:86:99:30:3a:da:3e:74:ff:98:3d:28:65:
         4c:20:99:a2:67:23:ae:92:b0:73:58:96:1d:b0:93:55:25:bd:
         d7:12:23:12:52:7b:52:39:06:a4:05:05:8c:e1:d7:25:39:e4:
         23:ad:bb:e4:fe:59:d7:66:9e:5a:00:51:ab:a0:97:7d:1d:62:
         c2:8b:92:1d:8d:80:7b:67:38:0b:80:0d:0d:14:93:1d:09:d2:
         50:37:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:31:55 2025 by rpki-client