This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          pZQrHiwabzZo0Xipj3PkxWZPLYCwidX9WE3CbCf4Z0k=
Subject key identifier:   A3:AE:6D:9B:CD:62:7C:EE:49:43:78:F8:CB:8F:5F:36:1F:C8:49:EF
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0C22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0C1B
Signing time:             Sun 28 Dec 2025 18:20:22 +0000
Manifest this update:     Sun 28 Dec 2025 18:20:22 +0000
Manifest next update:     Sun 04 Jan 2026 18:20:22 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: QMOPfYJb56O7wUDQyUjrFJbQDGPW7bpU3bBNtXJIDD0=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: Jvoa2wjsCRH9WrHhsgTUNGCatVDEZjWYoT6a8W58UDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 18:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Dec 28 18:20:22 2025 GMT
            Not After : Jan  4 18:20:22 2026 GMT
        Subject: CN=695174e6-0f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:cb:72:0f:6b:8b:30:5e:91:9a:53:95:77:
                    86:1d:43:bd:56:12:ea:10:45:a1:e7:9d:f9:47:99:
                    60:02:87:95:6d:90:13:ec:43:09:fe:29:99:fe:a2:
                    84:63:ab:76:e6:25:05:9b:e3:ce:46:24:97:fa:05:
                    f6:fe:10:6f:50:21:b5:50:5c:9e:d3:26:08:46:6e:
                    ea:d7:3e:3a:2f:07:5b:57:84:9a:0f:4b:af:32:8f:
                    5e:6d:80:bf:f5:28:01:0e:3d:b4:d9:b0:20:56:35:
                    1a:1b:ff:64:87:b7:9b:4a:bd:9c:44:97:a6:74:8f:
                    69:b4:87:e1:d5:26:d3:26:b3:95:fb:92:4e:d7:d9:
                    f0:da:b4:63:65:10:97:2f:71:cf:e6:12:3c:3a:3c:
                    71:54:52:9d:cd:25:21:1d:69:9f:3d:1c:6d:17:f7:
                    a8:4c:89:15:ea:6f:32:46:3d:4d:3e:7e:48:ca:a2:
                    5d:f9:fa:da:13:72:40:30:5d:78:47:d3:65:f9:c1:
                    c3:14:43:6e:2e:b0:4a:d9:9e:05:57:83:3d:9b:31:
                    91:41:f0:55:b3:90:c5:f1:7d:e4:49:93:01:a2:d2:
                    86:d0:f2:b7:cc:59:80:52:0e:bf:cd:4b:eb:b1:01:
                    58:7f:ed:cc:13:53:4c:5a:a4:a6:c6:00:df:a4:98:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:6D:9B:CD:62:7C:EE:49:43:78:F8:CB:8F:5F:36:1F:C8:49:EF
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:85:ab:d4:3c:be:27:5d:6e:17:af:19:c9:8f:43:22:06:1d:
         44:f4:e2:d9:d6:74:21:4d:55:6c:85:a2:f6:3c:ed:1d:e5:19:
         67:ec:4c:78:40:2c:b9:be:36:69:69:9b:7a:c3:9c:de:4f:35:
         58:6d:5d:ec:50:4c:c3:90:d3:a5:c4:1e:8a:d0:24:bf:11:dc:
         98:8b:36:5f:82:7e:cc:17:af:d5:04:58:b2:fe:8b:44:06:7b:
         65:5f:3e:f1:8d:75:98:a0:5a:3a:ee:2c:20:d6:64:64:c0:4b:
         65:aa:8c:3a:9f:f4:87:45:67:2d:46:92:09:c8:1e:72:0a:18:
         4d:45:4b:73:ca:94:a4:fa:33:dd:14:db:49:be:11:38:52:9a:
         15:73:b2:97:1d:fe:8b:5e:a5:74:e2:03:eb:25:8b:f1:38:ce:
         7b:b6:6e:8d:84:fc:6b:c7:70:17:33:c8:dc:c0:25:8e:ec:ab:
         a7:86:d0:94:a3:2d:e8:27:db:0b:3c:c4:03:dc:c0:4a:c4:16:
         74:aa:45:f1:19:b2:56:d1:c7:40:12:67:d7:9a:d8:1b:33:f4:
         8f:43:fa:de:d3:71:ca:a7:e6:55:18:40:28:91:ac:06:9a:50:
         8a:aa:72:a2:c7:2d:1f:5d:d7:a3:30:3d:f5:8e:eb:5f:62:29:
         52:4b:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:01:02 2025 by rpki-client