This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          4d2EmmLrquUexzN1aBd+m3gP4Q5I7nPgZ/LBmmKmyKw=
Subject key identifier:   FB:17:B4:EF:C9:4F:F7:D7:53:0A:80:37:43:05:82:35:06:02:ED:A1
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       17C1E81605F94D6E7D0F09F63A54953F482E7E7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          06C3
Signing time:             Sun 28 Dec 2025 23:23:28 +0000
Manifest this update:     Sun 28 Dec 2025 23:18:28 +0000
Manifest next update:     Tue 30 Dec 2025 03:08:28 +0000
Files and hashes:         1: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=)
                          2: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=)
                          3: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=)
                          4: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: iPlz2Fx/p6UvLAUGPl/9EPItezBCUbPHPM3yrtMN6hw=)
                          5: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=)
                          6: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=)
                          7: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=)
                          8: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c1:e8:16:05:f9:4d:6e:7d:0f:09:f6:3a:54:95:3f:48:2e:7e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Dec 28 23:18:28 2025 GMT
            Not After : Dec 30 03:08:28 2025 GMT
        Subject: CN=FB17B4EFC94FF7D7530A8037430582350602EDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:1a:f3:61:a8:82:f1:9e:ba:f4:9d:e4:60:
                    51:02:97:c7:f9:2e:ab:3c:a7:34:36:2c:07:de:ad:
                    ae:f9:be:5b:86:0c:20:9f:e8:ec:41:5a:4b:84:85:
                    3a:b2:4c:2f:c2:23:2d:10:79:6e:43:48:25:aa:6a:
                    b5:e9:70:a0:c1:d2:60:da:3a:75:cc:12:4f:4b:82:
                    bc:f8:bd:b5:cb:91:64:30:35:e6:33:aa:b0:ab:7d:
                    56:ec:ae:f9:03:9c:36:0d:40:a5:6c:f2:e6:f3:b0:
                    af:99:31:68:a1:de:49:9f:43:3f:23:a3:54:b4:2d:
                    13:98:15:e6:7f:bf:ef:93:af:2d:95:a4:49:0f:97:
                    10:1d:42:8c:07:5f:6b:8f:36:80:91:0a:18:f4:f0:
                    2e:e9:33:c5:87:1b:1d:5d:3c:4e:48:94:6f:64:8b:
                    70:f1:e7:db:7c:01:a1:8e:6c:88:76:75:74:4a:54:
                    3a:d0:39:53:70:73:34:70:7d:c8:0f:c6:90:cb:6f:
                    94:b4:66:17:1c:8b:b2:9c:d0:23:75:f2:28:2a:57:
                    06:24:c4:a1:92:1c:ff:58:48:be:ce:71:a3:f1:b0:
                    4a:34:b7:20:bf:4a:5e:b6:b1:18:3a:a8:8e:77:c9:
                    50:f8:7f:bf:19:3f:f3:a6:28:7d:03:d2:a5:2d:ba:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:B4:EF:C9:4F:F7:D7:53:0A:80:37:43:05:82:35:06:02:ED:A1
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:89:45:02:69:24:4e:59:95:7c:3a:44:54:13:be:cd:f7:ed:
         0e:1a:6e:e5:a6:67:a0:09:1a:84:ee:6a:b0:77:83:8d:4b:6e:
         3d:6c:29:a6:34:d7:c5:54:2b:52:1f:a2:4a:2a:8c:3d:e1:d0:
         c5:ba:55:9c:98:42:c7:cf:f4:9b:ca:66:e4:f4:a0:d1:1b:3f:
         5e:78:d2:c5:3f:63:32:45:bb:03:cb:7e:70:5b:46:e3:18:ba:
         fe:37:88:9f:9f:92:32:7d:cb:89:57:ae:f6:93:4d:64:6a:04:
         22:48:23:10:cc:21:3d:ac:e8:5c:b6:fd:e5:69:af:55:41:f0:
         c3:dd:34:8f:96:82:5b:be:dd:48:1c:fe:4b:bd:e0:76:89:8f:
         d9:15:09:b0:0d:12:50:b8:e3:d2:26:cb:77:e6:46:74:01:ff:
         a8:4b:18:7d:95:e1:7c:be:02:6b:e0:2c:77:fe:19:23:0d:ba:
         e9:dc:c9:6a:4e:bf:c6:1f:4a:d9:0e:93:d1:ed:c5:5b:87:8b:
         29:49:23:f1:8f:85:4c:2b:06:90:32:aa:97:2d:3e:ef:81:fd:
         ef:51:cf:eb:50:c0:32:c7:71:fa:2e:91:04:6c:30:fd:c5:b8:
         e3:36:32:a4:2d:bc:5c:b8:af:6c:3a:d4:26:c9:35:6d:ad:db:
         df:e3:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 08:28:18 2025 by rpki-client