This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File:                     0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier:          dqiTl2uhrZhEtDfOdBGdKe6AAoawDQl9ie4b/cpcxU8=
Subject key identifier:   94:B4:7A:67:9D:2E:83:E9:95:54:4B:73:53:60:9F:DB:19:21:E1:9E
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number:          019B
Signing time:             Sun 07 Dec 2025 01:53:26 +0000
Manifest this update:     Sun 07 Dec 2025 01:53:25 +0000
Manifest next update:     Sun 14 Dec 2025 01:53:25 +0000
Files and hashes:         1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: GatHTRkGjzZeUxbcPSipahRCZNq7SFP1XPhgWhK5Gb8=)
                          2: E50B556868D011EE8509F75CC4F9AE02.roa (hash: kHoy6v0ysySUqljIfyBeCRCH8CX8TIjWiaPyOL658Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
        Validity
            Not Before: Dec  7 01:53:25 2025 GMT
            Not After : Dec 14 01:53:25 2025 GMT
        Subject: CN=6934de15-b085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:f5:f9:79:2c:9b:21:87:15:c0:83:f5:75:
                    f8:83:c5:09:b7:45:f3:12:cc:f2:3a:73:33:8b:f2:
                    97:cf:ac:23:3f:6e:c2:1b:69:fe:49:fd:c6:92:ae:
                    91:d8:fb:24:0d:76:1e:47:4e:d3:2d:ab:4d:32:b1:
                    f0:ab:f9:18:bc:0e:e0:9e:70:e6:43:c3:08:0a:1f:
                    54:8c:e7:ff:99:47:30:a1:1a:f9:da:74:25:a6:b4:
                    ee:35:cd:4e:03:a6:fd:60:5a:9e:56:6b:45:be:de:
                    c6:d1:2e:e1:4b:ac:78:3f:2d:12:d9:3c:4e:7b:71:
                    b7:1b:b5:0f:56:4a:5f:66:ca:ef:eb:3e:e1:34:3a:
                    80:f9:1a:c3:8e:0c:11:37:27:01:cf:77:a5:e0:b8:
                    be:87:c3:23:58:d3:d3:09:80:7d:22:14:84:3f:70:
                    22:e9:3d:03:5e:76:73:ba:32:ff:90:ce:67:5d:b2:
                    4d:65:bd:70:42:73:5f:df:4d:4c:ce:3a:f5:93:61:
                    b2:13:97:d5:51:8e:4e:a2:3e:57:61:be:cc:5b:eb:
                    da:42:cd:02:61:98:7a:da:02:8c:3e:ec:00:9f:86:
                    78:30:dc:f4:92:36:27:84:03:bb:89:28:45:31:44:
                    92:15:de:62:f7:01:49:28:37:b5:4b:fe:d3:62:c0:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:7A:67:9D:2E:83:E9:95:54:4B:73:53:60:9F:DB:19:21:E1:9E
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:47:d1:b8:6a:44:3f:ce:3e:c5:96:fb:db:a7:36:6a:f3:
         e2:9e:e8:bd:8e:9c:d6:65:fa:39:33:b3:fd:73:b7:db:d2:b6:
         e0:a2:8b:dc:4a:8c:63:df:39:49:bf:2c:eb:57:3c:6d:68:e4:
         b7:0d:72:e4:d6:32:d7:d5:12:40:23:47:24:69:a5:89:91:e2:
         a0:7b:4d:8c:2f:82:7a:01:d4:98:b2:c5:cb:1e:96:f7:bb:4e:
         a2:12:cf:bc:91:3e:b3:80:7a:e2:c6:3a:25:0d:36:60:ba:08:
         db:c3:a3:0f:5f:e8:24:15:4c:2a:4b:d4:54:06:72:05:19:55:
         3d:40:a2:23:35:ab:1e:19:75:d0:1c:92:63:f4:30:a8:3d:d1:
         45:9b:e5:4c:37:c7:12:d5:0e:66:8e:b3:d3:a3:76:6a:1a:4e:
         e5:d4:20:3e:0d:47:49:0b:64:2e:99:39:88:e9:97:91:0a:59:
         b0:28:49:f9:fc:c1:96:25:75:ca:0d:2e:21:fa:7b:e9:5d:ca:
         25:76:37:ac:91:36:1b:6e:9b:83:cd:13:66:c8:9e:f3:03:b3:
         aa:da:11:8f:ae:bd:44:7f:41:46:43:21:b3:45:ba:84:03:bf:
         ae:e8:4d:03:38:75:b0:39:63:85:4f:90:0e:bf:3a:39:57:8e:
         8a:6d:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:20:01 2025 by rpki-client