This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
File:                     sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json)
Hash identifier:          jflZoRlRg9OeE4G6678AvENaGH7ZK98q/b9hEnA/cnU=
Subject key identifier:   BC:76:8F:85:58:4B:F1:21:FA:E2:72:10:53:DC:77:A4:40:66:55:CE
Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
Certificate issuer:       /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Certificate serial:       0B97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
Manifest number:          0B91
Signing time:             Thu 04 Dec 2025 18:22:40 +0000
Manifest this update:     Thu 04 Dec 2025 18:22:40 +0000
Manifest next update:     Thu 11 Dec 2025 18:22:40 +0000
Files and hashes:         1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: GxpEZJevR5sdcsr7atL6BZgFQs8XLpHbvQyAfTGQP4Y=)
                          2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
                          rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2967 (0xb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
        Validity
            Not Before: Dec  4 18:22:40 2025 GMT
            Not After : Dec 11 18:22:40 2025 GMT
        Subject: CN=6931d170-ab78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:d1:cd:99:3f:9a:6c:09:2a:e2:e7:05:b3:
                    1e:ac:36:c4:cc:6b:7b:9f:c1:04:5e:fa:a1:10:9f:
                    0a:aa:bc:c1:13:b5:d6:6c:b3:a4:64:85:0c:fc:e9:
                    db:a1:11:e6:e2:73:8b:ce:94:ad:d6:47:16:c6:4c:
                    6b:da:5c:2a:3d:86:3c:73:0e:2c:fe:da:04:9c:5d:
                    69:7a:e5:53:17:ce:85:91:4d:a2:81:a3:e1:8f:a3:
                    5e:eb:52:a7:20:6f:e1:ef:44:8c:17:1b:5a:2e:86:
                    ae:13:bf:0e:fc:a8:5f:23:21:e6:1b:f0:9a:67:ed:
                    67:45:e6:39:5c:2b:11:ac:bd:7b:f8:53:de:06:fd:
                    72:76:78:c6:38:97:13:7c:a2:02:f8:21:02:9d:cb:
                    f5:cb:37:86:93:b8:07:f5:80:25:b8:53:dd:8e:81:
                    17:86:8f:78:cf:89:32:de:43:b1:ff:46:23:84:cb:
                    75:a3:90:2c:f6:8c:e0:97:88:79:84:a0:17:4e:97:
                    5d:5d:1a:22:fd:cf:75:44:34:5e:7f:6f:cd:2f:a3:
                    d6:4a:e6:34:e2:6a:00:6e:5b:10:33:4e:ec:1c:9b:
                    f2:c3:ae:cd:87:b7:51:c4:18:cf:67:b9:22:b2:f5:
                    c2:dd:4b:a7:7b:63:d1:cb:fb:82:2b:7d:66:c5:30:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:8F:85:58:4B:F1:21:FA:E2:72:10:53:DC:77:A4:40:66:55:CE
            X509v3 Authority Key Identifier:
                keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b2:44:fe:5b:22:e6:7b:eb:09:a3:18:5a:5f:ad:13:63:08:
         14:ed:3b:77:60:e0:47:4e:76:aa:01:46:6c:59:09:d9:98:88:
         42:d6:45:30:b8:99:2d:33:65:6d:62:e8:6f:fa:99:a4:5e:02:
         b0:8b:4e:39:b3:11:87:0a:1b:30:19:7e:dc:69:57:95:38:22:
         b7:4a:16:da:27:b6:ef:2b:a9:cb:08:e2:7b:cf:c6:0a:32:08:
         78:45:63:07:79:1f:0c:f5:15:f6:a7:eb:09:79:3e:7a:39:26:
         0b:40:2a:96:0a:92:43:bf:80:e3:85:a4:63:1c:2f:d3:3e:27:
         2d:6b:ce:cd:19:95:29:09:ba:d0:6c:0e:62:42:37:af:8b:54:
         3a:c2:73:6f:e5:49:90:2e:2e:47:00:c7:cc:52:70:42:6f:66:
         13:9f:83:95:5d:e8:36:68:55:81:d4:9a:fd:d3:96:5c:06:c7:
         85:3e:25:d7:84:f7:93:82:66:0b:06:b3:9a:29:11:88:64:2d:
         92:0a:c3:16:1d:8f:db:23:4b:da:17:06:b7:6c:2e:49:a2:74:
         30:c3:37:a3:ca:44:2d:8e:72:dc:6d:09:bf:cb:09:bd:3c:57:
         59:3d:e5:22:a2:af:96:b5:82:de:ee:55:74:02:99:56:dc:ce:
         28:51:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:37:55 2025 by rpki-client