This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
File:                     _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json)
Hash identifier:          TJYRvkG0ERAPyWAfeuVdsaI88iicSCdRCsBKPtHo6Do=
Subject key identifier:   AC:30:FB:7F:49:57:1A:BE:1A:70:31:92:3F:90:53:75:84:A5:F4:DF
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Certificate issuer:       /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
Manifest number:          015A
Signing time:             Sun 07 Dec 2025 02:29:54 +0000
Manifest this update:     Sun 07 Dec 2025 02:29:53 +0000
Manifest next update:     Sun 14 Dec 2025 02:29:53 +0000
Files and hashes:         1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: 4wCAFGVbvYaiOW7Vj+pTtzNNalhyiCYZkjuvYxJo/8E=)
                          2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: Dm164N8IoyQt1jp0TcwYgwG4HOUHThII1pGgU4Frf9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
                          rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
        Validity
            Not Before: Dec  7 02:29:53 2025 GMT
            Not After : Dec 14 02:29:53 2025 GMT
        Subject: CN=6934e6a2-739a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:59:60:88:28:e6:5f:12:43:61:6c:e7:bd:
                    4f:62:72:8d:04:7e:5e:b5:22:1f:9f:04:9d:34:c7:
                    74:79:33:24:44:c0:5c:4d:e0:b9:85:a1:09:ef:05:
                    ea:3b:72:06:91:7c:b9:26:a3:9d:ca:ee:eb:5f:61:
                    67:61:3a:4e:b9:e7:49:4b:64:e5:b9:e8:5a:54:55:
                    a2:b7:9f:fc:5a:96:f2:10:1c:2e:02:2c:96:39:57:
                    f3:0f:53:f1:14:10:2b:7a:0d:7d:8c:cd:92:18:e0:
                    96:d9:84:11:c2:b4:5b:25:b8:fd:70:cf:0f:09:b8:
                    41:87:da:de:a9:7a:9c:8e:09:46:2f:1e:7e:df:16:
                    40:26:d0:b1:1c:89:a6:e9:40:62:76:1d:6a:91:72:
                    92:0d:33:fe:21:1f:8b:79:cb:0e:d2:c3:bf:be:3f:
                    53:49:91:66:03:02:a1:b5:12:1a:4a:1b:a5:f4:d5:
                    34:a8:1c:c4:14:93:28:22:9a:37:4a:53:7f:e2:33:
                    d0:9a:b5:89:1b:9b:6c:58:b9:2e:51:41:ca:17:30:
                    bc:29:71:ae:fe:ce:c2:07:f8:18:70:74:c6:75:a6:
                    b0:9b:15:d5:6d:2b:7f:d6:02:94:84:6c:1d:c6:81:
                    ea:30:ba:43:10:95:92:61:3c:cc:af:03:bb:ca:83:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:FB:7F:49:57:1A:BE:1A:70:31:92:3F:90:53:75:84:A5:F4:DF
            X509v3 Authority Key Identifier:
                keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:6f:ca:7e:b8:66:cb:d8:88:af:f7:9d:6b:cd:52:c7:a7:
         73:a9:4c:3f:db:07:7b:a2:ab:8e:f0:65:67:63:03:94:d5:18:
         8b:e7:0d:99:5a:e5:b9:a6:b1:cb:28:56:a3:9b:74:3f:96:6d:
         a9:03:4a:e9:25:d2:cd:fc:83:bb:db:d3:8f:af:82:66:b5:7a:
         ec:0a:7e:18:b4:30:bd:fe:1b:8e:55:63:68:b8:00:97:e6:30:
         15:98:4c:43:11:dd:41:5a:ee:7b:d7:f9:fb:ae:85:07:19:ab:
         46:59:80:76:89:41:0e:2d:70:51:0b:3f:31:8a:23:0a:6e:60:
         8b:06:79:33:39:34:41:46:18:1c:7f:c9:3a:b0:81:a7:49:4e:
         fd:59:62:42:c2:c4:e9:60:85:67:cc:9e:36:c8:ba:4c:2b:30:
         c8:0a:48:28:d4:55:b8:b7:88:fd:37:30:2f:a7:c5:7e:bf:74:
         8a:e6:ca:36:9c:12:4c:46:4f:2a:bd:64:70:aa:e5:67:d4:20:
         bf:88:f0:e1:23:9e:26:7a:27:e5:f0:f5:c3:4a:48:15:5c:74:
         c4:03:40:3d:90:e0:1a:0f:88:4d:ac:8f:0a:d2:41:05:eb:17:
         7d:c1:67:63:15:dd:2d:d9:8d:37:96:2d:e1:9f:12:1a:7f:03:
         55:58:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:34:33 2025 by rpki-client