This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
File:                     _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json)
Hash identifier:          OUuDqYoIbMaMvQs+x6hvixRJ3QIY+zJfIkgImySeUBA=
Subject key identifier:   1A:CD:C9:14:0D:58:6C:FD:22:42:74:D8:75:20:48:78:DD:8D:10:FD
Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
Certificate issuer:       /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
Certificate serial:       09D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
Manifest number:          09CF
Signing time:             Sat 06 Dec 2025 19:09:49 +0000
Manifest this update:     Sat 06 Dec 2025 19:09:49 +0000
Manifest next update:     Sat 13 Dec 2025 19:09:49 +0000
Files and hashes:         1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: f/bz63/nFpfBR98v+hVCtpZOyp6hqn/R0+ngb0BK15o=)
                          2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl
                          rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518 (0x9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
        Validity
            Not Before: Dec  6 19:09:49 2025 GMT
            Not After : Dec 13 19:09:49 2025 GMT
        Subject: CN=69347f7d-b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e1:cd:1c:71:de:07:da:ee:23:91:9c:17:05:
                    b4:ea:6d:56:1d:9f:62:0b:e2:86:7f:fe:de:57:e3:
                    b4:b1:52:dd:5f:dc:13:25:ae:7f:74:9b:4f:80:1e:
                    78:2e:63:ec:4e:1d:c8:6f:56:5a:3a:06:5e:c1:b1:
                    4c:7d:f8:4a:93:d6:d3:f7:4c:b0:2a:c7:0f:87:38:
                    66:27:4a:b8:e6:af:0f:4b:da:0f:82:24:5e:e0:9b:
                    e2:d7:b2:7f:e0:20:1d:b3:05:8f:7b:93:c3:83:84:
                    67:22:dc:a3:ae:cd:ea:19:75:f6:4c:7e:1e:eb:4d:
                    54:99:e4:81:33:fd:40:0b:15:b2:a1:f0:fb:1e:1c:
                    a7:b1:13:c6:2b:fc:26:99:95:73:2c:92:d0:a2:9c:
                    5f:0d:42:52:65:02:29:d4:41:22:8b:14:2a:ee:e4:
                    a2:6a:04:db:9f:f2:d9:b9:c0:0c:5f:4f:e7:bf:92:
                    77:7c:94:03:93:5a:55:57:0f:3f:8b:4e:31:9b:5d:
                    5f:48:b3:f3:cd:cf:88:64:ab:73:ea:63:8d:b8:a2:
                    10:c9:e6:22:02:66:54:af:5a:28:1b:d8:c1:fe:c4:
                    29:25:06:cc:52:0f:30:f7:92:b4:83:d7:7e:0c:7e:
                    f4:66:38:d1:d0:ba:5c:72:44:98:f2:7a:9b:6e:93:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CD:C9:14:0D:58:6C:FD:22:42:74:D8:75:20:48:78:DD:8D:10:FD
            X509v3 Authority Key Identifier:
                keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:89:06:7e:4f:9c:1b:bb:e8:5a:a9:56:3b:ee:a6:e4:a6:f9:
         a0:cd:8c:a7:61:0b:d2:49:16:1a:39:35:bf:77:2d:65:c9:ba:
         94:65:8e:63:63:5e:c2:7a:01:9a:3d:f7:f4:54:f9:e6:ac:89:
         14:b6:85:49:5d:d4:8b:3c:ed:fb:69:3a:26:9e:b5:4e:bc:23:
         b7:dd:35:84:07:66:69:aa:7c:aa:76:2b:02:38:a8:46:a2:6e:
         1e:c6:01:6f:7e:a5:d1:df:30:46:c4:22:06:f9:59:ab:a1:4a:
         a4:f2:a6:c0:50:10:38:96:df:d8:6e:dc:d3:9f:7e:bf:85:24:
         c6:41:84:af:09:95:8c:89:75:c4:5a:aa:5e:bb:18:c5:6e:d9:
         7e:a1:44:27:b5:5a:28:7c:66:40:61:6f:3f:98:ab:08:95:34:
         45:5b:c6:22:72:90:07:b6:f9:dd:35:65:58:5c:bc:86:65:83:
         d5:47:3c:d0:43:c0:b2:8d:a2:e1:6d:31:c4:b9:91:1a:02:f8:
         80:db:c8:52:c9:89:91:1b:13:5f:6b:4f:cc:62:8d:17:f9:2f:
         6e:ac:7c:0b:cb:d9:ee:0e:63:a5:06:18:32:af:e1:91:b8:98:
         c6:5c:6c:1d:24:32:ea:4a:4d:2b:4c:e4:23:7e:12:ef:1d:25:
         f4:2d:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:31 2025 by rpki-client