This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
File:                     jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json)
Hash identifier:          sJ+n2c0IcdqrziNiYjd3Z9dq1sMgEgY6fut2Xak/sh8=
Subject key identifier:   FD:4C:51:2B:E6:8C:9F:18:2A:CB:5D:FB:6D:F2:1C:91:E5:8E:88:C8
Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
Certificate issuer:       /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Certificate serial:       0B73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
Manifest number:          0B6C
Signing time:             Sat 06 Dec 2025 18:23:59 +0000
Manifest this update:     Sat 06 Dec 2025 18:23:58 +0000
Manifest next update:     Sat 13 Dec 2025 18:23:58 +0000
Files and hashes:         1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: D4sl1lyWGlwi5R64Vra4ch6sMiYnvEAdhYCDcnATY84=)
                          2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: 05ZIlQVIzyMk+/ne8BYyETi6MhBaRQY1pt1J6YgldLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
        Validity
            Not Before: Dec  6 18:23:58 2025 GMT
            Not After : Dec 13 18:23:58 2025 GMT
        Subject: CN=693474bf-15a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:ef:54:5d:80:2e:70:c6:8a:f1:78:45:60:
                    35:59:b7:6c:cb:fc:7b:33:ad:89:c4:fa:78:cf:b4:
                    9f:00:01:42:ff:6a:5a:5e:3c:5b:5f:c4:8f:1c:00:
                    1d:10:e8:9e:1e:41:70:68:2a:32:ed:f5:61:7a:cc:
                    b6:44:3a:5e:2b:98:54:29:b3:70:bc:3e:a9:c0:28:
                    48:e4:b9:52:84:d7:be:56:d6:66:3f:6f:79:c0:7c:
                    a1:47:86:49:03:2a:6a:6d:f0:5f:2f:c5:90:18:70:
                    e1:53:12:a1:ef:f8:e6:25:2d:7d:87:b1:8f:46:14:
                    0c:78:4b:1a:63:a3:e2:ae:a6:4a:09:93:74:2e:4f:
                    94:7a:a9:6b:23:80:64:58:5d:ed:9c:6a:8d:74:2b:
                    e4:5b:b2:e1:94:2e:d6:35:96:16:31:6e:c6:41:d5:
                    de:6c:57:fc:20:90:fe:7a:fa:8c:5c:b9:e6:dd:aa:
                    d9:6b:b5:4a:4c:44:f2:91:68:f3:25:e6:9b:15:0d:
                    cc:4a:45:57:e5:5f:7b:29:3a:2d:e3:d2:9a:49:37:
                    57:e1:f7:8c:16:cc:89:4c:04:f0:1e:50:5c:aa:c8:
                    ec:ca:a9:11:98:48:60:1c:cf:38:0d:4b:7b:3e:74:
                    e8:c1:54:db:92:ab:04:1b:2d:fd:02:88:05:59:5f:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4C:51:2B:E6:8C:9F:18:2A:CB:5D:FB:6D:F2:1C:91:E5:8E:88:C8
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:42:15:c4:ce:7b:24:a2:2b:49:4b:1d:83:69:bc:f6:57:b1:
         4e:19:b3:b7:f5:72:97:d9:db:b7:c4:2d:9d:74:7e:4b:3b:32:
         45:f6:28:65:12:ac:32:ec:51:eb:c8:a6:91:96:0b:25:c1:48:
         ea:db:d7:a8:b5:40:5c:c2:9b:03:b5:55:b6:d5:54:a3:bb:4a:
         a6:8f:10:27:af:2e:03:30:89:6c:a6:6b:f3:87:20:8c:73:1e:
         60:35:f4:72:70:62:04:5f:dd:06:b6:37:08:8d:1c:42:b1:ce:
         fc:02:e4:d4:37:46:c0:ae:87:74:c7:30:43:6f:2d:8c:44:70:
         c4:a0:2a:bb:95:02:03:41:c3:66:a5:b0:45:45:7c:3a:ce:2f:
         61:2f:6a:f7:4b:fa:e0:69:59:4a:2d:6a:a1:8f:de:ce:5f:14:
         69:34:c9:c3:81:52:eb:cf:d7:68:d8:17:49:8a:c9:a9:e3:83:
         69:02:f2:62:27:d9:b4:2b:1c:d5:c5:5a:80:e1:d8:d8:4d:57:
         2a:1b:bb:36:df:ea:e8:fe:d2:15:7a:36:02:9b:b8:07:14:86:
         61:a2:96:15:4a:c5:74:6e:e5:b8:2f:5a:80:b3:f1:91:2c:80:
         cd:27:0a:f2:39:15:61:76:60:10:91:37:b2:97:3d:73:81:74:
         26:4f:13:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:49 2025 by rpki-client