This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File:                     1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier:          OkIUQH5e2HVcyZPBMLr6U7f0Mtrrzzu66Bi0Y6e3R54=
Subject key identifier:   48:58:2D:8E:F2:55:FE:6D:90:08:E7:A3:26:C0:A8:4D:2A:39:F3:83
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer:       /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number:          1459
Signing time:             Sat 06 Dec 2025 18:24:10 +0000
Manifest this update:     Sat 06 Dec 2025 18:24:10 +0000
Manifest next update:     Sat 13 Dec 2025 18:24:10 +0000
Files and hashes:         1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: ch9D4wpp8SGsGeyxVxmjzeTsPGhElxT7lEBl7QB8zfg=)
                          2: 48BC2840B0CC11F08FB0892CC4F9AE02.roa (hash: XHcO89/MPgzwW4rGQ9ytEtMm5vtuH3reQ/AQuvNxnSo=)
                          3: 5A0EECF4B0CC11F08F8E932CC4F9AE02.roa (hash: TR2sbaJKnc/SEaXKQ1o7lEeyXHgsYm5mtCELfAe/UxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
                          rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
        Validity
            Not Before: Dec  6 18:24:10 2025 GMT
            Not After : Dec 13 18:24:10 2025 GMT
        Subject: CN=693474ca-9cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:46:2f:8a:6c:09:24:ab:9d:6a:5e:14:6c:
                    69:8d:72:28:57:f2:ed:dd:6e:50:e9:4f:4e:87:c6:
                    fa:ae:27:ad:0d:81:23:46:5c:70:02:57:de:e1:2e:
                    99:a4:30:2b:d1:5f:ed:73:2d:e8:ab:86:7f:a4:d2:
                    1a:57:19:6c:6e:c0:8c:80:1b:7b:1b:99:53:03:46:
                    21:12:9c:a0:11:57:6d:f8:2d:cc:60:13:94:7c:a0:
                    f7:d4:bd:d1:69:64:8e:e5:d3:a8:ba:88:cd:52:76:
                    d7:37:5d:fb:93:a1:84:78:a5:f4:f3:99:64:65:b1:
                    06:79:a3:25:20:89:67:13:28:db:ae:24:80:88:07:
                    3f:f7:5a:17:11:26:50:22:94:84:df:41:b7:13:dd:
                    71:23:16:a6:76:08:ae:7d:d7:07:c1:2c:40:d3:26:
                    51:70:12:52:90:46:a0:aa:dd:c8:f1:e1:95:f3:51:
                    14:6a:42:1b:c8:ad:e6:97:2f:46:bc:04:39:be:32:
                    8a:58:3b:94:ac:9b:ae:bb:a4:b8:57:8c:18:c3:14:
                    1c:3b:74:3d:3c:1f:c6:75:1f:6c:54:88:c1:7b:43:
                    9a:4b:cc:4a:18:1a:f5:25:f7:dc:0d:62:2d:8c:bb:
                    c0:62:0d:0c:0b:41:67:a2:9d:50:53:7a:9c:14:2c:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:2D:8E:F2:55:FE:6D:90:08:E7:A3:26:C0:A8:4D:2A:39:F3:83
            X509v3 Authority Key Identifier:
                keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:63:c3:97:e0:04:de:fd:33:ac:5e:f4:03:de:b2:41:81:33:
         e5:ca:81:fd:f9:be:47:0a:19:8f:47:9a:17:92:ee:05:f4:c3:
         a6:d4:77:07:ca:ee:74:91:91:5a:17:40:95:ff:cf:08:6b:27:
         af:eb:20:ba:ed:56:cc:ec:cb:b9:0a:f0:f2:8b:57:46:6e:49:
         9e:c2:d1:d9:bb:ec:f0:84:af:30:e9:95:28:7d:fc:1c:22:6d:
         19:4a:74:1a:4e:90:e0:66:3e:a4:15:63:38:03:97:7e:f4:83:
         c9:cd:0b:f5:bb:c0:db:9c:7f:49:2e:35:68:6a:b6:36:78:20:
         5d:e4:10:4a:57:40:8f:7c:25:fc:e0:c5:f4:ec:82:4f:72:53:
         91:25:eb:58:27:aa:65:a1:f4:f7:c4:25:a7:46:fe:7f:10:21:
         66:6f:27:a4:90:7a:cd:fb:18:2d:88:fe:6b:62:6f:36:b3:0d:
         fc:8e:e0:83:89:49:8c:e3:68:8e:63:e7:c8:cc:5c:25:d2:91:
         37:d9:55:78:53:32:cf:34:75:52:29:8e:e4:24:14:02:ff:ce:
         4f:9f:2e:3e:28:41:53:59:81:d3:2a:ec:9f:09:9b:64:ae:f8:
         ca:01:40:21:48:d6:16:ac:eb:c0:37:9d:8a:36:2d:72:de:2e:
         92:52:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:59 2025 by rpki-client