This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          vFoYLJjoBw9HsbVYx/OFiL9xPpNSWQqNNwT7oHtNO/k=
Subject key identifier:   7B:19:E5:BA:A3:E4:DF:6A:C3:B4:97:8F:06:72:95:CA:8B:8C:6C:FA
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       0847
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          083E
Signing time:             Sat 20 Dec 2025 20:10:16 +0000
Manifest this update:     Sat 20 Dec 2025 20:10:16 +0000
Manifest next update:     Sat 27 Dec 2025 20:10:16 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: O9GcrStN7RVKwCq/vfWNihV4xKDF+iZ4TGxu6yKH97c=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Dec 20 20:10:16 2025 GMT
            Not After : Dec 27 20:10:16 2025 GMT
        Subject: CN=694702a8-82a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bd:c9:1c:19:55:32:c1:d2:37:b0:04:70:b6:
                    41:be:18:b1:9a:6f:2d:57:fa:e4:de:df:b2:02:cc:
                    0d:08:83:49:1f:56:c1:8d:e6:fa:bc:c5:fe:15:8a:
                    e3:31:52:56:c8:9d:c6:00:a3:c9:34:49:c5:23:80:
                    c4:a3:30:10:1e:67:ef:7b:f1:50:3e:41:83:86:af:
                    9d:ac:9e:44:7b:16:4a:44:9b:74:6b:c1:f1:73:9a:
                    b3:a2:46:73:5c:42:bb:47:1d:81:2f:8c:55:d9:fa:
                    93:d4:d9:74:0f:84:5d:aa:a1:62:d9:ca:9e:95:e7:
                    09:df:52:ff:08:91:38:60:67:fb:64:7f:a2:02:ec:
                    6b:ff:81:2c:a9:bd:ee:cf:85:4a:f5:0d:77:a9:a0:
                    e0:87:d9:88:0e:84:54:23:6f:4d:8b:ab:da:83:7c:
                    be:7c:b3:0b:62:9b:a3:30:dc:56:65:57:72:8a:a9:
                    96:38:ad:77:a5:9d:14:02:4b:73:a7:d3:8f:56:c8:
                    70:3e:eb:0f:5d:0e:33:4c:6f:44:64:0c:28:33:6d:
                    e2:27:df:9a:35:be:4b:91:e3:e5:f8:22:3a:a2:a6:
                    4b:9a:80:c6:3f:46:77:89:72:64:7c:d4:b7:ba:32:
                    1e:67:75:d5:48:80:25:bd:b4:65:d8:7c:e4:6c:83:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:E5:BA:A3:E4:DF:6A:C3:B4:97:8F:06:72:95:CA:8B:8C:6C:FA
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:44:72:b2:af:51:ab:d0:78:1a:8b:fe:1a:33:8d:e7:0a:
         bc:38:07:85:66:c6:bf:3a:13:8f:57:5f:ba:91:51:b8:0f:59:
         80:06:af:3b:03:6a:11:aa:b4:8c:5d:74:83:4d:ee:42:d9:fc:
         90:b0:b9:f2:54:54:1f:ba:ea:80:77:00:37:d7:f1:e1:4a:cf:
         18:f4:37:9c:6f:e8:06:51:e2:b3:d9:3e:a8:e2:6d:3e:4c:a1:
         ef:eb:16:8f:9d:a4:c3:74:9e:20:e7:95:e7:9c:2c:b4:81:25:
         db:5e:48:5f:87:57:e9:4b:db:cf:69:ed:a8:a1:63:c8:a5:ce:
         cb:5b:9b:b2:be:0b:e0:96:57:51:b6:29:27:84:69:1f:0c:34:
         86:bb:9b:01:42:b2:9f:55:d5:c2:bf:3b:5b:6c:c2:58:a0:4c:
         ad:98:3f:85:65:e8:75:d2:88:5b:83:1c:5a:85:6e:7d:c3:b5:
         53:a6:09:5c:5b:8c:fc:f2:5f:ee:4d:3d:63:11:3d:e8:99:29:
         82:45:f4:c9:28:69:71:9a:bc:c0:c4:20:65:b5:35:9e:fb:2c:
         93:75:d4:90:32:f0:3f:1f:6e:81:3c:88:29:a7:45:da:e9:f5:
         17:53:e6:95:33:37:0e:58:1b:ac:f8:76:76:a4:98:cc:55:0a:
         2d:c0:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:59:59 2025 by rpki-client