This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File:                     9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier:          HUjbb2JvMRwXHusoVL8ByJ4bEgP2RBC6MMk6SvlJ97A=
Subject key identifier:   BB:87:84:1F:48:0D:8B:E5:E0:05:45:6F:42:7D:AA:DC:63:02:33:9D
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer:       /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number:          A4
Signing time:             Fri 19 Dec 2025 05:43:44 +0000
Manifest this update:     Fri 19 Dec 2025 05:43:44 +0000
Manifest next update:     Fri 26 Dec 2025 05:43:44 +0000
Files and hashes:         1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: fTbV8FqTuVPxWfIMjHhfInXIIxmZ2Va18iqZIzzmd1A=)
                          2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 61Maf4HdTVjL1p15SmMO0sDKtCDOS9JEKlRjMIwn4Cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
        Validity
            Not Before: Dec 19 05:43:44 2025 GMT
            Not After : Dec 26 05:43:44 2025 GMT
        Subject: CN=6944e610-5604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:d9:c2:78:a4:1e:cb:66:bb:a2:71:61:23:
                    bc:da:f1:d9:69:b1:a3:a9:23:c3:43:50:34:df:d7:
                    dd:93:1a:fb:1c:90:e1:05:3b:a2:75:b4:c9:5e:3a:
                    b1:e7:2e:d2:29:94:8b:5c:22:0b:d0:8c:b5:93:9e:
                    0e:9c:fe:4a:54:73:82:77:60:93:38:0d:57:ef:c4:
                    b4:e7:66:f0:b8:a0:bd:36:d6:81:02:a5:e0:ef:fa:
                    f1:c1:e5:6d:7e:40:8e:05:5a:d1:64:41:a8:d0:57:
                    77:58:a9:05:63:7d:e9:91:29:46:b7:1f:92:2a:8e:
                    a0:41:fb:6e:bd:ed:ed:e3:40:f7:ed:67:a9:82:06:
                    68:24:6d:a9:88:37:0a:c2:21:48:51:5d:19:59:ed:
                    7b:52:29:ce:58:8c:0c:a1:cb:79:55:24:81:89:d5:
                    ec:dc:49:9e:64:98:1f:e7:83:fc:26:1c:ba:62:14:
                    bf:7b:53:ec:a1:12:26:64:8a:38:f6:ff:db:84:6f:
                    19:92:0c:f7:45:bf:89:31:08:4c:d8:c6:77:aa:83:
                    17:a4:d9:45:1a:68:97:86:9a:3a:f6:09:f0:6b:14:
                    0e:e2:a3:66:04:90:57:e3:31:b3:7a:fe:23:04:54:
                    2f:50:12:22:0b:09:fa:8d:6c:ff:2c:fd:9f:80:44:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:87:84:1F:48:0D:8B:E5:E0:05:45:6F:42:7D:AA:DC:63:02:33:9D
            X509v3 Authority Key Identifier:
                keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:a9:84:73:1b:dd:2d:af:da:84:60:0f:8d:df:e4:52:b4:
         db:dd:95:20:d0:5c:fe:4b:c0:81:ff:a2:5b:e1:93:52:f9:49:
         65:9a:82:0d:44:f2:35:24:41:16:37:b7:20:ab:f2:05:dc:57:
         77:ed:93:5b:95:1f:92:a3:0a:78:b9:a5:1a:02:4d:a7:0d:6a:
         53:3c:30:d3:a8:5d:c3:52:46:55:ff:38:19:d6:f6:c7:40:cb:
         4e:01:21:90:e4:32:0c:a2:23:f7:12:a9:ca:5d:66:e6:ca:d6:
         e1:06:6a:25:f4:c8:9e:4a:98:0f:34:a7:24:fc:e7:f0:47:35:
         55:5d:0d:67:c8:14:93:e7:89:68:1b:bb:11:df:a1:06:70:e9:
         a9:38:67:e2:53:a5:12:08:cd:1b:24:c8:6a:11:65:4c:3e:03:
         3e:6f:09:80:df:77:e6:b4:93:fc:6b:79:38:ac:f3:7a:52:d7:
         ef:4f:fe:d0:3d:21:de:8e:59:67:2f:ab:a6:f4:29:94:d8:c5:
         c0:e6:c7:bf:80:c3:ed:f3:34:f5:0e:5e:c1:63:e8:72:8a:bf:
         57:27:05:c9:08:ec:2d:24:79:89:dc:b5:56:f6:9a:14:59:e0:
         f0:4f:96:0d:d1:22:22:e7:70:df:3b:8e:0c:52:df:1d:93:e2:
         81:e8:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:36:35 2025 by rpki-client