This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File:                     iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier:          hM38jQm7bbPIgHDxjxnrc6jLj2X1P1UT+fg+YwC6q2U=
Subject key identifier:   7D:98:50:B9:E0:DD:F5:A8:8D:36:F7:B9:13:DA:97:6D:ED:6C:1B:4B
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer:       /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number:          06EA
Signing time:             Thu 18 Dec 2025 21:25:58 +0000
Manifest this update:     Thu 18 Dec 2025 21:25:58 +0000
Manifest next update:     Thu 25 Dec 2025 21:25:58 +0000
Files and hashes:         1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: 5uwziXM2NMySCyyyFabQYYrBtk3JktesXDm+tJ2tHQI=)
                          2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: wKKFIbG6rZYzWOquPQsQVLcMaVWXvSfOn3rpMeiquU4=)
                          3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: 0UszszQSlIl4E2WZV6BiPk26HX6TF60w5QFwSAW1SPk=)
                          4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: IAiqZ7+h+k8237T4xv3w1ZM4/F+z2G79r7OGY4bCxVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
        Validity
            Not Before: Dec 18 21:25:58 2025 GMT
            Not After : Dec 25 21:25:58 2025 GMT
        Subject: CN=69447166-2ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:bc:3f:ab:08:19:bb:06:5e:e8:3e:d4:60:
                    1c:bc:89:ce:c4:21:0d:ee:b7:2d:f0:c5:31:0a:88:
                    f9:44:97:79:c3:19:a7:d1:9a:1e:6b:93:db:c1:90:
                    ed:cc:e6:14:e8:f0:2d:80:ec:f9:36:b6:9e:db:56:
                    3a:7c:91:c3:d0:6f:9c:3d:5d:35:ae:57:7c:eb:ea:
                    8d:2d:68:d5:12:0c:c2:3f:74:67:67:b3:70:b5:0b:
                    df:4d:b1:10:18:39:73:7a:4d:94:4c:da:73:97:f1:
                    50:ad:75:57:5a:32:9f:3e:9b:b7:a6:79:73:12:c7:
                    28:49:3b:ef:aa:51:70:a0:1c:dc:d1:ca:ed:80:62:
                    cf:82:74:83:fb:eb:d6:4c:f9:31:15:bd:4e:65:81:
                    62:13:1f:15:db:b2:4c:f5:f1:67:a7:f5:be:e8:59:
                    3a:3f:b6:78:d0:20:71:b3:c8:a3:d6:4f:47:f4:16:
                    08:b2:49:bc:f3:2d:78:8c:16:b9:a4:bc:f5:5c:96:
                    f9:6e:5c:d7:f4:f1:2e:d9:a1:ed:23:eb:90:56:04:
                    f5:1e:25:31:a0:4a:bb:85:51:70:eb:d1:f1:a5:d3:
                    c3:ba:97:e4:96:13:9a:52:79:bd:e5:ad:ab:4a:bf:
                    9d:07:2d:6c:d9:72:2c:60:84:a0:85:f3:bb:68:e2:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:50:B9:E0:DD:F5:A8:8D:36:F7:B9:13:DA:97:6D:ED:6C:1B:4B
            X509v3 Authority Key Identifier:
                keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:83:58:43:f1:7f:bc:97:d5:70:da:40:27:ae:7b:ed:75:
         d3:99:d7:c9:19:ce:31:88:ab:38:e6:0b:d7:a5:04:42:87:a1:
         80:ed:76:7f:e3:c3:10:cf:79:6e:25:e3:7f:75:f8:6c:0a:c5:
         03:86:f4:93:72:91:ea:b5:17:a8:22:3e:eb:b0:dd:8c:09:52:
         d0:2d:eb:1e:3d:0e:a0:bb:aa:d6:56:92:cf:48:42:f6:e9:dc:
         fa:e8:46:5a:a1:a5:78:61:dc:72:51:44:9e:b3:19:13:20:25:
         09:d2:15:8f:cc:65:91:8e:cc:21:c2:c3:84:fa:08:99:fc:73:
         3d:53:e2:fd:a8:4d:bb:6e:29:e0:37:06:29:58:77:5c:1e:d2:
         01:19:6c:49:3f:ac:57:35:84:12:24:85:9b:0e:87:e9:4b:62:
         ce:f1:6c:a8:84:92:8e:b1:f5:71:71:b9:3b:a7:13:b6:87:c7:
         37:29:27:ae:a1:d6:d1:29:50:47:0e:5e:0b:ab:b2:2a:dd:62:
         90:52:0f:3f:b9:22:53:1e:ea:76:25:b2:46:a4:78:00:56:bb:
         c6:00:e4:56:86:00:54:1b:0d:ba:36:a1:f0:ca:be:64:5b:28:
         65:92:33:66:61:e3:dd:0c:5c:e8:32:4e:5a:07:1d:99:23:66:
         b1:d8:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:34:29 2025 by rpki-client