This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
File:                     dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft (raw, json)
Hash identifier:          HNwXSvDPojF9KaEFBGnxjopmAk2CStkvbzipQ5yqhFI=
Subject key identifier:   9D:B8:12:9E:BF:44:11:AA:6C:92:C8:C7:BB:DC:B1:D4:7E:D2:9F:69
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Certificate issuer:       /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
Manifest number:          D2
Signing time:             Fri 05 Dec 2025 03:49:21 +0000
Manifest this update:     Fri 05 Dec 2025 03:49:21 +0000
Manifest next update:     Fri 12 Dec 2025 03:49:21 +0000
Files and hashes:         1: dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl (hash: kMbKeb32sjmOR3NY6nszkeKMunsCcalZyOGzmarKyGo=)
                          2: F0D45092BD4D11F0B4019718C4F9AE02.roa (hash: GoDf96PuuTPUTdX7+eQ3AZm/Vi7rYBlUPSS5tYHMKkw=)
                          3: ED46632AC75311EFAA7A9E0BC4F9AE02.roa (hash: BSkyIsVjsqkIP2UcdowW92UsoE0+ROg3QmqK9i77vAQ=)
                          4: 5A844AC639D511F0AE239C5CC4F9AE02.roa (hash: sn6Hj5PK8tuNbIiWw17hS3Q3BDP+yAs1sYIOGHh0Wfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Validity
            Not Before: Dec  5 03:49:21 2025 GMT
            Not After : Dec 12 03:49:21 2025 GMT
        Subject: CN=69325641-4f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:18:b7:63:34:c3:9e:38:af:64:e6:20:ce:
                    0e:a0:df:e8:8d:97:c3:c3:00:be:c7:5b:fe:a7:56:
                    a7:e3:74:99:61:50:e9:e3:db:e2:60:b0:1e:aa:ff:
                    21:9e:86:c2:47:fe:51:46:15:e2:3a:45:5e:33:61:
                    8d:b5:7c:dd:4d:46:a5:d3:bb:aa:00:de:a9:d7:51:
                    99:9c:70:aa:1e:af:76:1b:f2:ff:49:8e:17:f5:ee:
                    5f:25:6b:fe:3a:de:45:32:09:1f:19:ce:53:80:69:
                    68:75:93:ef:b9:b8:43:23:83:c4:fa:8a:43:f2:53:
                    c1:53:f2:18:05:33:e0:e1:b5:56:06:5a:e9:8e:a7:
                    bb:77:1d:1c:76:25:35:b9:bc:4b:87:a0:63:41:fd:
                    1b:f2:d6:f8:f0:44:ea:f4:48:69:44:73:47:0a:d4:
                    cf:9c:81:a0:12:92:91:7f:1b:d4:1d:12:56:93:96:
                    ea:c5:99:22:cd:ae:e4:19:ac:8b:51:a2:21:d0:ec:
                    9e:95:bf:cb:36:01:c4:7d:0a:bb:3a:a8:9a:72:ea:
                    33:91:cf:c9:0d:a6:6b:52:df:10:ab:13:a0:5f:9b:
                    de:71:06:d8:3f:e1:8b:9b:65:1f:7a:2f:6a:8e:6d:
                    e8:d0:d4:34:74:2e:f3:f8:77:10:ea:81:d5:e9:64:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B8:12:9E:BF:44:11:AA:6C:92:C8:C7:BB:DC:B1:D4:7E:D2:9F:69
            X509v3 Authority Key Identifier:
                keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:a2:63:04:a2:e3:aa:ed:a0:0e:e2:2b:cc:68:b1:a0:c2:
         e0:9f:49:ea:2f:f2:14:a4:36:f1:33:71:d6:f6:b9:b8:db:1e:
         44:3e:95:a7:02:c3:5c:58:7d:e6:90:eb:40:9a:20:db:a0:9f:
         fc:84:85:5d:c2:82:93:11:7f:56:f1:cb:71:f0:ae:4d:44:22:
         24:63:56:d9:94:26:6a:31:94:8b:3f:58:4b:71:1a:d2:61:cb:
         69:58:55:89:06:3f:6a:eb:fa:43:15:a0:01:f9:63:85:83:1a:
         9f:2d:ec:97:be:6c:e0:48:a5:c3:9f:e7:6a:6e:53:34:7e:0b:
         5d:bc:74:f9:4a:a8:bf:49:62:d1:ee:8f:37:e5:15:a7:2b:0a:
         be:77:da:91:e9:16:89:47:ac:03:c4:b2:92:42:c9:70:d3:73:
         1b:c4:fc:f2:da:58:0c:33:6c:a2:64:dd:08:95:27:3a:0b:2c:
         2f:d7:36:58:5f:6c:7c:88:ec:bf:df:3d:a7:b7:86:fd:f3:38:
         c6:fd:3a:89:4d:1f:a2:da:f7:12:0f:72:f8:ff:ee:bb:6f:69:
         15:71:4a:df:e3:fa:49:7b:e2:25:eb:54:18:88:89:b4:61:34:
         32:d5:ef:f6:24:0a:42:6c:81:29:ca:23:9a:6e:c1:bb:5b:d3:
         c9:5e:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:30:00 2025 by rpki-client