This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
File:                     MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json)
Hash identifier:          Ml5mCh366obYN8TZksPrO0gSnt0Zc6cLK0jzOzie4Nk=
Subject key identifier:   06:10:4A:D2:97:61:DC:00:1A:57:70:22:FC:F9:14:87:28:86:18:2B
Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
Certificate issuer:       /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
Manifest number:          0154
Signing time:             Fri 19 Dec 2025 03:18:33 +0000
Manifest this update:     Fri 19 Dec 2025 03:18:33 +0000
Manifest next update:     Fri 26 Dec 2025 03:18:33 +0000
Files and hashes:         1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: dmpTTkI5OUKodekgeXy2EVVz1SqqbpXPj+j9/e+oS6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
        Validity
            Not Before: Dec 19 03:18:33 2025 GMT
            Not After : Dec 26 03:18:33 2025 GMT
        Subject: CN=6944c409-481a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:0a:4d:3f:87:aa:2d:92:4b:cf:70:7e:21:
                    7e:a5:04:df:77:e1:17:06:db:d7:af:ee:ab:f9:a2:
                    ad:2c:ad:a3:6e:ec:64:e9:29:7d:54:f1:5b:00:c9:
                    d3:07:ac:32:07:a2:47:12:dc:90:2e:26:ae:92:c5:
                    e4:8a:0b:64:5e:fb:0e:38:1e:29:4f:38:8a:48:6d:
                    e6:76:7b:41:3a:a5:8e:54:f0:7d:80:f2:d7:b5:f4:
                    61:8a:53:93:3b:9a:f5:0f:d5:e6:f1:c1:82:75:6a:
                    4a:a5:c1:18:1b:2d:b8:e9:6e:6e:03:52:2a:d7:f3:
                    6f:9a:a5:7b:7c:33:8b:bc:a6:36:0f:cd:2e:c1:54:
                    e9:56:43:5f:8c:57:94:d3:a8:cb:10:0f:31:56:52:
                    51:a1:f2:0d:a1:4f:ee:47:b6:55:a0:4a:cf:be:0b:
                    c4:ba:d7:74:41:be:b8:38:7f:a8:09:21:85:90:97:
                    28:8f:6f:90:49:08:11:b1:95:e7:98:50:35:34:3a:
                    90:a0:f1:a6:bc:04:43:c5:1a:7b:10:d7:11:87:ef:
                    0f:25:9f:94:7c:42:ab:e1:a1:c2:aa:d0:18:f2:2b:
                    2f:22:b5:a0:07:0b:1a:f0:12:25:04:78:86:ac:d1:
                    b1:b4:66:ce:68:d1:51:fd:bf:c7:92:6d:e6:0e:7c:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:10:4A:D2:97:61:DC:00:1A:57:70:22:FC:F9:14:87:28:86:18:2B
            X509v3 Authority Key Identifier:
                keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:3b:88:bc:a3:1b:68:2c:94:77:da:f2:43:ff:04:be:09:
         3c:40:c6:de:f9:ae:5c:76:bb:d2:06:c4:b6:51:11:dc:1b:f3:
         dd:b2:12:5f:40:0c:b7:63:5a:30:68:15:9e:12:8a:53:68:98:
         3c:97:a2:b1:40:8d:aa:6a:04:fc:d8:a3:a8:f7:df:c0:5c:65:
         93:02:a9:6c:7e:11:8f:c4:60:eb:78:83:c1:50:04:9c:2e:af:
         f3:ed:b9:85:e3:8f:f0:00:f5:04:f2:e0:98:0c:32:7b:e7:5c:
         0a:22:59:10:e0:7f:16:37:a3:eb:1d:c8:8a:57:2c:1e:9a:70:
         b2:13:8c:3a:08:b8:5c:87:17:10:93:57:f7:5e:d0:15:c4:ee:
         aa:2a:1a:4b:0f:6b:7a:db:44:80:28:88:0c:f7:b1:54:e9:a3:
         e2:31:45:de:4f:1f:4b:c5:ca:cc:4c:35:a1:dc:75:43:4b:ab:
         98:a5:c0:21:7e:01:f8:f7:92:14:77:ce:a2:2f:1a:ed:c7:18:
         42:70:e4:66:22:9c:5a:dc:a3:d4:06:ea:4c:63:d0:57:d6:76:
         84:9b:b4:97:24:cb:3f:88:ce:c8:4b:f5:65:33:8d:90:82:fe:
         68:b6:e0:b9:35:c1:9e:a7:b6:25:20:c0:24:5a:c1:d1:eb:cc:
         c2:ca:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:38 2025 by rpki-client