This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
File:                     Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json)
Hash identifier:          4+pXsfamJIwIj/uGJF0AnqSR11vMsggDjPmLMOg9vmA=
Subject key identifier:   BA:1B:9C:51:33:32:15:73:74:95:1A:B8:05:34:F0:33:7A:EC:6F:A7
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
Manifest number:          E9
Signing time:             Fri 19 Dec 2025 04:35:54 +0000
Manifest this update:     Fri 19 Dec 2025 04:35:53 +0000
Manifest next update:     Fri 26 Dec 2025 04:35:53 +0000
Files and hashes:         1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: +7D36+LkkBdzBCvyGDTmWvOh48htCEBUAO2oVJgWrDc=)
                          2: B6FC11FCDBC511F0ACB3398151641951.roa (hash: dAtTgu4UzWjdQI8Y1GgI3xoYnY7PuFSF8QTPCw04Yjo=)
                          3: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: vaEXmxxOCfh4t7B3q+8C9by77OCY+clJhF+kP80doZU=)
                          4: B6783AB2DBC511F0ACB3398151641951.roa (hash: ilMU6YpUeSSvj64sWk0DcJ4Llg1hF4XoXqpmsG1kd/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Dec 19 04:35:53 2025 GMT
            Not After : Dec 26 04:35:53 2025 GMT
        Subject: CN=6944d62a-de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:5c:1e:19:b9:66:c1:3b:27:6c:1f:f0:33:
                    24:ce:07:8d:c3:1f:4a:1c:d5:c6:a0:49:04:a9:9f:
                    94:06:38:46:01:5a:93:f9:0c:5e:ab:94:c7:4b:a3:
                    b3:04:63:bb:d9:b2:e1:c1:1f:ca:47:f3:a5:45:d0:
                    0d:08:54:c6:8b:68:d6:8d:b4:d3:5d:10:84:f8:da:
                    fe:b0:09:df:42:26:4f:bb:f5:02:fd:21:a8:83:ab:
                    30:73:48:2a:ca:3e:9a:67:98:b6:9d:34:8e:0d:c5:
                    ed:ef:e8:5b:0b:b0:9d:69:58:5f:53:6c:5e:f1:22:
                    0e:b8:0b:e1:4a:99:2f:0b:7c:d4:a6:52:d3:b8:8e:
                    e0:c3:96:5f:ff:e3:05:49:27:d1:4d:10:78:a5:11:
                    7c:d2:7b:4a:1b:bd:74:04:94:a8:37:d0:c9:d9:fa:
                    f3:7f:6e:f0:96:8b:c6:86:88:b0:ad:15:a1:20:1a:
                    3c:9f:57:2f:4a:44:a3:5b:e9:8d:65:11:e8:63:aa:
                    39:55:3c:a4:18:01:cd:aa:1d:18:74:65:15:96:a1:
                    13:93:d8:c9:b0:ab:6e:36:c0:88:a9:1c:c0:27:aa:
                    51:83:6d:9c:2d:c2:79:b9:0f:84:07:b7:18:dd:0d:
                    99:5b:72:6a:8c:4a:38:86:db:47:bd:cb:ee:48:37:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:9C:51:33:32:15:73:74:95:1A:B8:05:34:F0:33:7A:EC:6F:A7
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c0:04:b7:6e:f7:3a:41:fb:09:71:fb:45:12:11:7a:84:dc:
         02:39:7b:d2:90:ff:49:8d:b2:bb:0a:60:89:8f:41:94:13:5d:
         0c:e9:fe:7e:ea:31:68:75:8e:81:b6:34:bb:78:84:ec:c9:b3:
         cd:e7:f4:c2:ab:26:7b:3b:66:48:53:41:a2:37:7d:69:4b:5d:
         29:3f:2e:51:01:63:82:c2:86:bf:3b:65:17:ba:11:73:99:45:
         8b:bb:14:5d:ea:37:05:0d:29:39:40:a2:ac:78:cc:d2:a8:03:
         b5:3b:70:01:4f:13:59:74:4e:3d:1c:cd:7a:b0:69:19:21:ea:
         20:0c:17:a6:5b:15:7a:fd:e5:fb:cf:d0:94:88:59:18:c3:f2:
         66:d9:35:ec:2e:82:2a:0b:86:93:0e:0c:1d:89:1b:58:c1:b0:
         55:e1:fa:a4:fb:6a:c2:e8:b2:7e:ca:ec:71:2c:c6:b8:a2:6c:
         49:2c:79:7e:ac:78:84:27:b7:4a:d1:e8:f7:6d:5b:56:83:4c:
         9e:f7:80:66:30:4e:21:3c:f8:b1:50:e7:f8:53:97:1d:6c:5d:
         7d:ea:56:c6:81:df:b6:a4:58:ed:fa:82:a5:12:3e:38:e0:dc:
         93:46:3e:fa:53:65:e0:87:1d:a7:75:5e:32:1b:2b:0d:d8:9d:
         3f:5c:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:46 2025 by rpki-client