This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File:                     MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier:          Qpboyef+R84ST02LfbHnO4B6b0e1my1ZbBK1oJl6Z2g=
Subject key identifier:   01:6B:BA:25:B8:D6:CE:E1:6E:86:DF:60:4C:5D:78:DD:E8:B1:19:1F
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer:       /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial:       1274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number:          126C
Signing time:             Sat 06 Dec 2025 16:37:57 +0000
Manifest this update:     Sat 06 Dec 2025 16:37:57 +0000
Manifest next update:     Sat 13 Dec 2025 16:37:57 +0000
Files and hashes:         1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: VmdrPLEBQmWsBC9eftOSW1Bpw7rnSBUOzBzv+uoOJZA=)
                          2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
                          rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4724 (0x1274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
        Validity
            Not Before: Dec  6 16:37:57 2025 GMT
            Not After : Dec 13 16:37:57 2025 GMT
        Subject: CN=69345be5-d244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:0a:e4:e7:93:7f:87:0b:c3:b0:fc:83:f7:
                    37:5d:7f:d0:73:d0:22:66:3a:82:6f:dd:92:fb:a4:
                    25:0e:91:89:53:a2:3c:8f:12:b1:13:11:3e:4a:d0:
                    6a:ca:9b:3a:ce:2a:6a:5b:d3:af:94:9b:64:0e:92:
                    cb:94:fd:26:4e:d5:54:78:bb:f1:7c:bd:d9:ad:16:
                    4c:79:9a:b2:b4:09:8c:93:bc:e8:eb:4e:fd:fc:2b:
                    a7:07:56:5e:30:43:28:a6:74:81:ae:38:cf:4c:d0:
                    22:76:10:5b:dd:09:48:8a:ff:8a:f7:3b:a0:43:af:
                    8a:9a:87:2e:b2:42:9c:9f:96:37:f9:cb:0d:22:46:
                    af:7b:82:83:2a:1b:a4:80:1d:70:a5:48:ce:24:25:
                    38:36:a4:69:b9:59:dc:a5:b1:16:09:25:3b:f2:dd:
                    21:18:8e:69:9c:9e:50:08:79:02:d9:c7:a0:18:fa:
                    43:5c:b6:3a:03:a4:68:db:e7:af:ed:76:b4:b2:25:
                    88:58:77:f9:27:dc:18:30:fe:89:bf:65:c6:c0:57:
                    3d:74:3f:e4:d7:51:7a:18:83:11:20:75:7e:de:95:
                    ee:51:85:82:2e:f5:16:d0:f8:c3:b9:65:ae:e2:85:
                    26:fb:72:c5:59:f3:2d:7c:c2:cd:6f:c5:80:81:dd:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6B:BA:25:B8:D6:CE:E1:6E:86:DF:60:4C:5D:78:DD:E8:B1:19:1F
            X509v3 Authority Key Identifier:
                keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:68:55:20:8b:19:5f:f6:de:02:6e:a7:7e:a6:21:81:be:a0:
         80:cd:3e:02:ff:d5:92:2f:e1:00:be:bc:83:aa:bf:d0:21:fa:
         ac:66:85:3c:10:fc:ed:05:dc:af:b0:fd:6a:8d:18:61:0c:d3:
         b9:31:50:52:42:2a:41:6b:58:7a:ec:19:1c:ee:60:08:95:80:
         cc:0c:2e:6b:d7:06:ca:7c:68:50:29:0e:a4:67:b6:14:3a:e1:
         33:b7:61:46:9b:90:4c:dc:6b:a8:8f:ea:97:61:1d:1f:b0:c8:
         4c:e3:d1:82:cc:bb:8f:3a:56:eb:44:6b:4b:62:89:72:cd:b5:
         79:7a:b1:5a:e2:11:42:6f:d9:28:91:91:7b:84:e1:bd:30:f2:
         1a:56:48:f1:c3:07:fe:4d:fb:38:c6:8c:a3:6b:9a:9b:49:e5:
         1f:bd:fc:57:3b:11:c9:53:e4:38:a6:99:1c:44:84:ef:ea:22:
         29:fe:a1:5a:4d:c7:1c:b1:85:a3:95:8a:04:65:36:7b:9a:10:
         2a:80:fb:fc:11:c6:2c:7b:d2:a4:42:98:d8:8f:6a:c8:b3:1f:
         82:08:c6:2f:a4:44:a4:fd:56:67:1d:8a:75:e4:98:a0:ee:fa:
         28:29:ad:10:b2:37:77:4d:88:dc:5e:53:13:9a:ea:c5:88:fa:
         e5:16:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:16 2025 by rpki-client