This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
File:                     TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json)
Hash identifier:          Mg9vcJHKX4hirNpf6i6aZF3TfS52di7//7MB4bh30Yc=
Subject key identifier:   DD:72:9C:92:30:B5:EB:9A:6F:B7:BA:B8:08:B9:11:02:76:4E:41:CF
Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
Certificate issuer:       /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
Manifest number:          01B0
Signing time:             Wed 31 Dec 2025 02:18:44 +0000
Manifest this update:     Wed 31 Dec 2025 02:18:43 +0000
Manifest next update:     Wed 07 Jan 2026 02:18:43 +0000
Files and hashes:         1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: lhBxCGemS+nELmH2DN8tybiN3R+BNeRyRdu32CCieWc=)
                          2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: qatvyS4SyJTNURVM2FsClClDPfP+4FEBMIeJZ8wIqMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
                          rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 02:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
        Validity
            Not Before: Dec 31 02:18:43 2025 GMT
            Not After : Jan  7 02:18:43 2026 GMT
        Subject: CN=69548804-f953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:64:62:7c:4e:7d:0c:be:cf:32:03:31:b7:
                    91:6f:09:ec:eb:7a:a6:fc:57:31:f1:15:85:d6:4b:
                    5d:c0:35:55:b6:66:06:de:82:90:c8:32:63:6e:48:
                    ae:b3:67:1f:2d:03:0c:10:5e:a4:0c:7e:61:c5:99:
                    77:5a:ca:3f:b5:d9:cb:04:26:97:b3:f5:34:23:47:
                    dc:72:ad:5e:1a:fb:60:fe:58:a4:8d:54:a9:0e:4d:
                    37:1b:e8:36:51:67:8e:51:a6:3b:13:bb:f0:f0:fe:
                    8b:0a:f3:f5:1e:6e:c8:7c:cc:d1:d3:d6:34:b2:0b:
                    52:9d:a7:98:66:2e:32:39:d2:6d:ba:6b:5e:59:ab:
                    02:b7:cc:0e:21:44:69:cf:70:eb:62:68:25:69:9d:
                    9e:83:a8:c0:cb:c1:ec:03:22:18:35:7d:11:31:4c:
                    1e:ce:90:a1:ae:19:fd:4b:cd:a5:d0:cf:06:bb:9d:
                    51:66:b9:77:be:69:f5:dd:d2:0d:b8:55:4a:01:79:
                    92:76:52:9f:61:7a:3e:4e:36:b1:51:c6:5b:20:26:
                    24:12:e2:fa:8f:f8:67:c1:6e:e3:2b:49:61:0b:2b:
                    2b:aa:35:df:b2:f8:10:d5:80:b7:14:bd:32:b1:8c:
                    9c:5e:73:25:e1:86:08:14:e5:cb:eb:4c:6b:3f:1a:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:9C:92:30:B5:EB:9A:6F:B7:BA:B8:08:B9:11:02:76:4E:41:CF
            X509v3 Authority Key Identifier:
                keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b2:4b:99:ab:9f:dd:a0:19:cd:da:18:4d:f9:be:95:5a:ba:
         9a:a9:1a:d2:a5:e5:f5:15:41:58:9b:c0:bd:7c:8f:03:5e:95:
         77:16:25:05:f2:c1:76:b6:fc:e9:9f:e4:66:ee:92:b3:be:36:
         08:96:7f:45:6f:78:60:68:0b:33:8d:ba:4c:8a:36:48:8f:51:
         ef:33:09:96:49:be:6e:11:ef:f3:c7:55:46:49:8c:d9:b0:72:
         68:a0:d2:28:45:94:fd:c2:a6:c5:61:dc:d7:ba:71:c9:9d:90:
         7b:42:a6:2f:e0:1e:66:c4:f4:e6:0a:eb:6c:54:14:76:d4:ed:
         01:7e:5a:f6:cc:96:46:aa:cd:73:fa:63:79:37:a5:f9:d4:61:
         0f:a2:05:49:41:6b:2b:3e:5f:f7:1e:f9:03:09:07:e3:75:f2:
         67:f8:1a:86:a1:2a:9b:11:d0:19:48:c3:88:7c:97:20:4e:f8:
         55:2a:9e:e2:1b:be:51:9b:b8:73:04:df:4a:4c:da:6a:da:9a:
         e5:9b:96:52:b3:b9:ec:a6:e6:09:91:80:53:41:43:d1:0b:cc:
         2e:e1:92:b8:ab:c0:74:c4:89:bd:fd:a4:d7:a7:27:99:02:ea:
         b1:21:ed:95:ca:fe:ec:64:00:db:3a:f6:56:f5:f1:98:3c:68:
         f7:eb:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:07:03 2026 by rpki-client