This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File:                     ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier:          CFdSbSLYwL6rjvTNo3TH1PCM22SeGBD9xK2YannpBEc=
Subject key identifier:   1D:56:74:61:4A:B1:6F:87:4F:F6:E1:1D:8E:CD:DF:04:6F:82:B1:1F
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer:       /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number:          0259
Signing time:             Wed 17 Dec 2025 01:08:37 +0000
Manifest this update:     Wed 17 Dec 2025 01:08:36 +0000
Manifest next update:     Wed 24 Dec 2025 01:08:36 +0000
Files and hashes:         1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: SgWAgW0ZHvi32vzaFQXtIX7k3UxpgFx+DQ8yTiKzr64=)
                          2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: OLpGMJGM/bGhMSkrOQuT1Tz0zvH6CE/Oi3SzPJmSsH0=)
                          3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: Qq8up52YZscG3hdRn7nfMsmIkNPk2EUKMJmC4t4Qun4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 01:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
        Validity
            Not Before: Dec 17 01:08:36 2025 GMT
            Not After : Dec 24 01:08:36 2025 GMT
        Subject: CN=69420294-33e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:e6:11:4c:99:27:7f:f1:ba:f1:46:d6:e4:
                    4b:ec:69:1e:ea:2d:78:f1:3d:6e:0c:6c:d4:8e:96:
                    bd:3c:3c:27:1d:1e:51:89:87:47:32:60:c4:f2:1f:
                    99:52:d9:ce:9d:75:c5:0f:55:84:78:41:8a:c1:a3:
                    c0:0c:f4:a2:fc:5d:6f:49:87:b7:a0:20:0c:23:a1:
                    6e:0a:a3:d1:a4:4e:40:98:00:7f:6c:7d:38:4e:13:
                    53:3b:ad:70:8c:67:56:3c:29:35:b8:84:c3:87:8e:
                    ae:8d:7d:2c:bd:8d:e5:b7:81:ee:65:fd:b4:91:ed:
                    4c:81:22:38:39:0c:26:a5:7e:26:cd:10:29:6f:3d:
                    f0:09:20:66:fa:06:29:f7:89:b4:63:f0:24:70:ec:
                    09:ee:ea:fa:ee:0a:c1:3d:b8:78:41:bd:32:4f:08:
                    c3:f4:f4:ac:85:9f:27:7c:f4:97:d4:40:a8:34:17:
                    6b:14:55:b0:cb:7b:1e:da:c6:27:45:17:7f:6e:b4:
                    dd:b9:95:d1:c7:38:e3:5d:56:c3:f0:72:1a:93:dd:
                    9e:7f:aa:05:27:25:ff:63:ac:a7:5d:af:05:57:98:
                    40:01:aa:b3:3a:64:b8:25:48:fb:02:50:00:96:10:
                    d9:dc:24:e7:5c:b5:5c:53:e1:67:17:25:ad:3f:d2:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:74:61:4A:B1:6F:87:4F:F6:E1:1D:8E:CD:DF:04:6F:82:B1:1F
            X509v3 Authority Key Identifier:
                keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:14:d6:8c:dd:d8:01:7b:33:db:7d:08:2a:b2:b5:d4:c8:
         bd:82:54:89:9a:1c:5b:a5:2e:24:8d:13:a7:d8:40:40:cd:73:
         53:4d:89:67:27:46:e0:7e:d0:8d:4b:48:e7:d8:2c:ca:b7:69:
         89:68:99:fe:26:ce:31:1a:44:b5:c9:92:c9:90:06:c1:cd:ee:
         6c:38:ee:b2:6c:5c:7d:e5:3d:eb:b9:e7:75:5e:a9:4a:32:f4:
         f7:4e:cc:f1:38:fc:56:37:62:2b:b3:06:2e:68:70:19:b6:4e:
         84:3f:92:cb:6d:d1:7b:97:83:bf:14:ae:ef:fe:c3:78:fa:52:
         5b:c1:2d:49:d2:09:ca:cf:2e:37:64:be:0d:d2:93:9b:77:9d:
         4b:76:15:cb:b5:8b:b4:eb:df:10:f1:bb:f3:16:53:3a:71:18:
         b5:95:7b:44:d5:28:08:53:75:2d:a3:95:ab:ab:46:00:91:30:
         97:21:79:79:4f:3c:72:de:88:1b:fe:81:68:25:5f:e2:44:23:
         0a:07:89:05:b5:c2:4d:da:66:32:39:3d:39:2f:7e:55:5a:02:
         5c:09:cb:84:96:83:1b:1f:75:68:46:d5:01:24:f6:88:ff:9c:
         79:d3:ac:fc:89:a5:21:00:ca:a6:fd:5a:81:3c:bb:e7:8a:ff:
         4f:02:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:38:30 2025 by rpki-client