This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File:                     8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier:          XcZ5UZ5pCTyQOXYY4bhN1FwGYwZfrkmO/s5P8m4Xzjg=
Subject key identifier:   CC:EE:88:FD:66:55:79:C9:81:FA:67:51:82:BA:2B:B1:09:05:EE:B3
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer:       /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial:       0E4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number:          0E46
Signing time:             Fri 26 Dec 2025 17:26:30 +0000
Manifest this update:     Fri 26 Dec 2025 17:26:29 +0000
Manifest next update:     Fri 02 Jan 2026 17:26:29 +0000
Files and hashes:         1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: F4N1JcKm+5zxW0NkEEXV0iVeoT97SMGY0TL1YSebtjg=)
                          2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
                          rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 17:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
        Validity
            Not Before: Dec 26 17:26:29 2025 GMT
            Not After : Jan  2 17:26:29 2026 GMT
        Subject: CN=694ec546-2bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:d6:b5:e2:78:b9:1e:6c:38:ce:b2:d1:1f:
                    e2:fe:04:97:94:99:7a:20:1b:4a:48:95:2a:99:90:
                    13:46:be:45:45:0f:93:d4:0e:fc:66:63:08:9e:99:
                    27:61:4c:86:37:97:54:aa:d5:e5:98:cf:0a:d7:17:
                    06:1f:d9:bb:6a:78:2e:fd:40:7b:cd:12:d5:0a:b8:
                    ed:20:20:f9:4b:bc:88:ba:79:78:c8:11:81:d3:d8:
                    3d:8e:ce:8a:fa:ee:1c:64:01:a2:02:f8:9b:b3:a3:
                    2a:f6:61:49:9f:95:05:ad:08:f6:eb:a8:ef:a8:17:
                    1d:e7:7b:22:17:0b:a8:c6:c3:2c:f2:cb:6c:28:32:
                    ce:6f:9c:30:ac:4e:f7:26:78:ca:5c:a2:4a:4b:30:
                    f8:80:88:e6:ca:24:bb:d7:17:df:45:89:80:24:d7:
                    79:d9:f6:5c:3f:7c:a7:df:0e:1b:4b:81:b2:fd:83:
                    25:9c:78:51:27:bd:f7:56:2e:6c:11:87:ae:ba:e8:
                    e7:82:03:8a:1e:c0:d4:17:13:61:a7:f7:33:91:36:
                    dd:f3:d4:f3:2d:4d:df:4d:f7:60:5b:5b:06:b7:af:
                    40:ab:a9:c2:9d:b2:a4:06:15:9b:70:42:6d:2a:53:
                    d2:51:17:b1:22:97:a4:0d:bd:20:86:68:d9:0d:d2:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:88:FD:66:55:79:C9:81:FA:67:51:82:BA:2B:B1:09:05:EE:B3
            X509v3 Authority Key Identifier:
                keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:90:c2:0d:48:a5:29:e0:4f:32:80:40:f2:37:20:fd:72:82:
         22:e9:c1:51:7b:a2:77:37:24:81:68:df:13:44:3e:27:60:4d:
         bb:50:34:7f:8d:53:03:b7:c1:56:37:e7:19:67:ef:71:fc:28:
         b8:eb:05:81:27:3f:02:a8:6c:c6:21:91:55:17:ad:1e:89:f6:
         6b:e0:9d:fb:45:b8:d2:53:73:2a:19:10:01:12:83:8b:2f:b0:
         c5:db:f7:d1:a7:12:ca:e6:d3:7a:53:80:9f:02:a6:9c:5c:62:
         83:dc:cb:dc:82:cf:80:ca:05:d8:0f:d4:c5:f5:70:b5:96:3b:
         7f:bc:e8:cb:2b:13:e2:2d:43:93:ac:68:68:22:53:e2:94:60:
         6b:f2:4c:e0:29:2e:f1:b4:45:83:82:54:93:e7:06:6a:36:16:
         4c:9d:6c:ac:e6:4a:e2:2c:f1:b7:b4:1e:e5:1a:3d:61:69:94:
         3f:bc:0b:8d:0a:96:f5:66:ad:38:d8:7d:9f:45:d9:05:6e:69:
         4a:bf:c6:83:fa:34:98:31:43:70:9e:61:13:7a:ac:2b:0a:9d:
         ac:7f:e4:12:6b:f4:3a:1e:ba:9c:a9:4b:d0:6f:89:43:b3:da:
         d5:9d:24:44:5f:9a:23:6e:ca:2c:cc:4e:fb:72:c8:40:29:e6:
         52:5c:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:48:03 2025 by rpki-client