This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File:                     aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier:          x6aTD/A618DbpVMnonmsa4lgVKamk1opKoxZwW01ONg=
Subject key identifier:   E5:7E:BC:66:11:D5:CF:46:EF:89:4E:B8:24:21:5F:EC:86:12:40:7F
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number:          023A
Signing time:             Wed 17 Dec 2025 01:31:19 +0000
Manifest this update:     Wed 17 Dec 2025 01:31:18 +0000
Manifest next update:     Wed 24 Dec 2025 01:31:18 +0000
Files and hashes:         1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: bcuDSZiTJwHmQeOFaq6QWgafnjapVkCOhkKP1C/ehK0=)
                          2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: MPJcPtDS4/T3UppAe6encPh5IY9tUXaMAMvIPt7HvEE=)
                          3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: qmc/H0ByapLSZ1bg3nVk+PyVwmov94i2JIkcZK53qgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 01:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Dec 17 01:31:18 2025 GMT
            Not After : Dec 24 01:31:18 2025 GMT
        Subject: CN=694207e7-c23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:b9:c9:86:44:52:7d:cc:db:70:37:ca:6b:
                    36:ac:9c:a1:27:df:62:57:42:27:24:47:23:2a:6c:
                    bb:8b:6c:ff:b5:de:41:1c:0d:8e:0a:37:ef:2a:7b:
                    1e:a6:fd:ee:c2:08:4a:83:fd:9e:a3:41:44:ac:3e:
                    78:f7:da:97:0c:f4:49:40:6a:e4:58:99:36:97:0d:
                    8d:59:75:cc:83:8f:5d:e5:f0:30:5c:cd:c3:74:44:
                    38:c7:8b:08:11:d9:e7:63:b1:1a:31:b0:71:f8:b9:
                    de:c0:c2:31:1e:2c:f6:f9:6a:98:28:a4:f9:d3:58:
                    dc:13:ca:f9:f0:03:c5:46:46:49:e6:45:e7:63:27:
                    1b:f3:75:3e:5e:5d:2a:76:78:1d:2f:34:91:d8:1e:
                    fe:e1:06:91:17:e4:46:a0:3d:c7:75:87:30:0f:87:
                    95:34:42:2a:f5:5f:ec:d6:15:74:bf:6f:e6:b0:c5:
                    20:42:cb:86:be:8d:48:24:7b:51:24:37:29:4e:ea:
                    d3:a6:82:8c:c2:be:b0:43:06:03:df:dc:e9:3b:84:
                    84:57:22:1a:da:4a:f3:c6:f0:7a:90:74:6b:cd:eb:
                    52:db:e0:79:00:fb:5a:48:bc:1e:2b:3c:8c:9d:4b:
                    3f:5b:d9:8f:09:7e:b0:73:19:fa:46:bc:0a:79:d0:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:BC:66:11:D5:CF:46:EF:89:4E:B8:24:21:5F:EC:86:12:40:7F
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:67:82:00:04:2e:53:79:c3:92:f4:25:0e:ff:6f:58:84:1b:
         9f:82:13:49:dc:8b:da:59:75:0d:14:91:32:45:f8:13:c5:0c:
         15:40:c6:07:88:f0:f9:9a:e7:49:bf:0d:ac:28:fe:67:03:79:
         d5:15:71:dc:40:62:72:8c:af:59:5d:48:aa:d5:c1:cd:8c:5c:
         34:41:6f:05:fe:bb:cf:2d:c1:0e:0b:c1:dd:e4:45:04:48:82:
         97:d6:e2:20:45:a9:06:ad:1e:20:82:6b:dc:be:a9:9c:eb:c0:
         ab:83:9e:ec:fe:85:2b:b0:21:16:1d:46:92:ec:70:f2:2d:de:
         bf:69:2f:c1:d9:65:c2:3e:5a:c5:1f:01:7c:a2:17:2d:50:7d:
         11:c7:66:79:58:9b:10:1a:aa:d7:83:bc:95:ee:a2:f7:62:50:
         c2:0b:cb:3b:c3:a5:b2:5c:e4:c5:a7:ba:19:94:25:76:54:73:
         2c:6d:e9:c0:d8:45:46:f6:97:42:c8:18:70:46:2a:fb:be:87:
         e4:1b:b0:db:03:56:8f:e8:ee:79:a9:3c:75:63:00:d8:11:f8:
         34:47:18:24:fa:e1:65:c9:fc:b9:1f:e3:ca:d3:83:e2:19:5d:
         49:cd:dd:ac:63:17:f8:4c:db:99:13:bd:f2:f1:7a:e0:5a:3b:
         6d:e5:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:46:34 2025 by rpki-client