This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
File:                     _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json)
Hash identifier:          rwEyoMKM7zdpmqNfy3ref0W7vviApSh6zUQj4Wo2v2M=
Subject key identifier:   5D:87:6E:26:D9:BC:AF:99:E3:F4:75:D7:01:CE:F3:2D:75:06:70:02
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Certificate issuer:       /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
Manifest number:          05CD
Signing time:             Thu 18 Dec 2025 22:32:47 +0000
Manifest this update:     Thu 18 Dec 2025 22:32:47 +0000
Manifest next update:     Thu 25 Dec 2025 22:32:47 +0000
Files and hashes:         1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: IFHYB2Fod8kyHdxBun6hShIiCa7oul2zA+J1zkYXirw=)
                          2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: B5qPcRiAPVySXtIwaHqDbWpuZoMlGmhplKL4rpUX3FY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
                          rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
        Validity
            Not Before: Dec 18 22:32:47 2025 GMT
            Not After : Dec 25 22:32:47 2025 GMT
        Subject: CN=6944810f-ddbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:b2:e1:eb:14:e4:1e:16:3d:8a:3e:63:f0:
                    2c:4a:f3:f3:e1:f8:a4:9e:c9:b3:6b:69:0e:1d:51:
                    9a:8f:11:1c:8b:ee:a8:e4:85:89:92:40:27:08:4a:
                    30:bc:55:96:4a:40:e4:a9:8c:2d:c4:d3:e7:8d:8f:
                    b1:4e:33:51:7f:0c:c3:ca:4e:e8:1b:d5:d1:3b:20:
                    9d:d5:e9:c5:dc:9d:85:78:45:5d:ae:e1:ea:05:33:
                    b1:da:ac:fd:f4:e9:50:90:ce:f3:46:12:cb:de:48:
                    b4:80:a2:29:68:37:bb:93:55:3e:86:17:21:30:f5:
                    9c:e8:f0:2d:71:15:7c:a3:90:65:01:bb:27:8b:d9:
                    bb:e3:31:14:15:1c:15:db:18:dc:af:e7:76:53:74:
                    f0:36:db:c8:fd:4d:7a:38:0d:0b:91:29:b2:af:cb:
                    9e:96:93:b4:b3:48:2c:3a:68:02:ba:43:dc:bd:ff:
                    ad:7d:0a:7f:57:08:e9:66:19:23:cf:49:00:d7:f6:
                    20:76:aa:c6:0c:2f:1b:02:35:f9:64:d3:81:8c:0e:
                    75:39:93:3c:44:88:1b:15:b5:25:d9:fa:5e:47:c3:
                    87:e3:d6:90:8d:dc:a2:69:46:6a:f4:13:1d:73:7a:
                    60:38:2d:86:a1:f8:b0:0c:18:97:75:b6:20:2f:f4:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:87:6E:26:D9:BC:AF:99:E3:F4:75:D7:01:CE:F3:2D:75:06:70:02
            X509v3 Authority Key Identifier:
                keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:a9:61:eb:f7:1b:f0:f9:45:c0:db:75:09:2c:c8:03:36:
         20:05:19:ad:f3:3d:c8:d4:82:82:03:2a:82:1b:54:1d:bc:f0:
         da:d7:8c:14:05:0e:6c:97:44:e8:2b:0f:06:c6:e3:68:92:49:
         df:ae:3d:b1:62:b4:84:50:2c:9f:47:80:cc:73:48:fb:a0:0f:
         ec:71:39:0e:72:95:50:1e:b0:17:8c:9c:bb:92:fc:df:20:68:
         03:fe:c1:72:47:5d:19:c8:46:de:ec:88:ac:74:b5:6c:23:75:
         0a:aa:90:1f:c1:2e:e0:33:ac:94:1b:3c:d9:de:4a:f1:6a:53:
         df:af:11:34:d7:e0:3d:79:c2:d1:1d:87:db:40:76:ea:3f:ea:
         70:9a:1b:f9:1d:3c:04:13:59:86:58:bc:af:3c:a1:5b:da:94:
         2e:cc:16:2d:ee:fa:4d:fb:7a:4d:a8:91:12:06:18:32:17:96:
         62:ec:3f:cf:3c:a3:bf:ed:91:1b:94:c9:67:c6:50:a3:de:c1:
         af:04:ce:b8:e2:39:b9:b3:8e:59:a7:55:3c:5a:f3:97:64:7a:
         66:ff:38:c8:33:8a:ae:56:27:13:f9:86:80:c0:43:ca:84:07:
         dd:59:03:26:54:1d:f4:8f:39:f3:2a:b9:dc:0e:b4:80:22:d4:
         21:01:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:44 2025 by rpki-client