This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File:                     fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier:          G4i6Hb9ovm+rg6CkE2C0bQwT4uxa3MWhYYa5l/nR6I4=
Subject key identifier:   0E:AE:A8:39:B0:B7:C5:99:33:94:33:3C:45:95:B1:F0:E6:92:78:7F
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer:       /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial:       1530
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number:          151F
Signing time:             Sat 06 Dec 2025 15:19:58 +0000
Manifest this update:     Sat 06 Dec 2025 15:19:57 +0000
Manifest next update:     Sat 13 Dec 2025 15:19:57 +0000
Files and hashes:         1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: ncj05eluxrWoy3As6AoPGtGtH2NvTZpuq+cQWsGfqwc=)
                          2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5424 (0x1530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
        Validity
            Not Before: Dec  6 15:19:57 2025 GMT
            Not After : Dec 13 15:19:57 2025 GMT
        Subject: CN=6934499d-ce2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:2d:53:a3:f0:49:73:e5:45:d8:6f:39:86:
                    80:63:32:a3:11:75:4b:6e:15:ca:8f:d6:47:12:e3:
                    62:41:f4:a4:4f:9b:7a:78:81:9f:1b:a6:db:62:a1:
                    03:f7:14:1c:a7:23:be:8e:a2:36:da:52:61:bb:75:
                    6c:08:8d:ca:19:ca:22:75:f1:9d:5a:35:00:c5:58:
                    d1:b5:51:55:44:3d:f8:8c:6d:b5:da:ea:e2:db:b2:
                    99:62:26:49:4f:e5:90:b2:1e:f6:2d:f2:95:94:7c:
                    3f:9e:04:43:e6:fe:cd:3a:37:b3:99:6f:8c:ec:f3:
                    70:05:4f:39:3f:99:f1:27:b5:a8:47:6c:1a:60:39:
                    25:2d:be:e4:f7:ba:08:f0:30:a2:82:11:4c:ec:9a:
                    8d:87:f7:53:57:e5:04:bf:67:4b:16:58:b4:d1:b9:
                    7f:37:3b:cf:f1:72:9a:02:c9:3b:1e:7f:a7:0e:f9:
                    0c:d3:ab:25:ee:2e:4a:31:64:25:2e:26:c6:b6:94:
                    7e:50:fb:6d:d0:d7:23:fc:14:58:16:11:da:60:4c:
                    0e:d3:d8:38:bf:a6:61:09:8d:fa:32:78:2c:5c:a5:
                    90:3a:4c:d4:de:a2:4d:44:3d:7c:aa:ad:05:d4:89:
                    4c:69:48:94:9e:69:98:33:0f:58:3e:e2:d3:c8:26:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:A8:39:B0:B7:C5:99:33:94:33:3C:45:95:B1:F0:E6:92:78:7F
            X509v3 Authority Key Identifier:
                keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:bf:38:36:47:71:39:71:d6:32:2f:74:a3:d3:50:dd:46:
         1e:b4:c4:ff:b3:da:96:68:35:42:54:1d:3b:d5:9e:c3:f6:6d:
         97:05:0d:ed:18:f2:f6:4e:9b:d0:04:ff:13:8e:7d:0b:d8:7f:
         79:cb:62:c6:e1:b1:c5:d2:56:f5:64:b4:33:4b:1a:23:c7:68:
         7d:fe:24:95:56:81:89:e4:32:12:7b:bf:57:cd:1d:0a:be:57:
         f5:dc:18:97:99:97:0f:91:1b:06:2a:25:f6:45:4e:7a:c6:ea:
         ac:98:24:a6:72:62:0d:8a:71:72:be:3b:a4:02:65:28:55:7b:
         af:04:9b:54:ad:6f:b6:e0:0c:46:41:86:6d:cb:cd:49:18:e0:
         d9:b0:1d:fd:52:a4:ba:81:4f:96:e5:6e:8c:a3:46:cf:62:3c:
         b4:2e:44:00:2b:fd:cb:5e:18:ff:06:82:9a:58:6f:81:e2:2c:
         ae:40:ee:1a:aa:52:f4:f8:0a:66:16:6a:b9:bd:38:54:79:f3:
         c4:1f:4f:b1:8f:fa:c1:f9:49:c0:70:24:22:47:5c:72:e2:1b:
         38:83:22:47:bd:de:02:91:c4:be:9e:8a:90:51:e5:1e:5d:94:
         a3:85:26:87:3e:52:d8:e7:97:3f:24:a2:42:e7:ba:1b:54:6f:
         ba:27:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:25 2025 by rpki-client