This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File:                     42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier:          +GXlzPiFb67MGvi7Nzmd6WmD7zR4vCmrDC+amRO+VnI=
Subject key identifier:   D6:4F:90:81:F0:8E:53:4D:8B:42:6E:1A:44:A4:D8:24:49:00:5F:84
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer:       /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number:          92
Signing time:             Fri 05 Dec 2025 04:28:22 +0000
Manifest this update:     Fri 05 Dec 2025 04:28:22 +0000
Manifest next update:     Fri 12 Dec 2025 04:28:22 +0000
Files and hashes:         1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: 0DUfkh3911QgAi0mUoVV4Dlxb9ViosN8pOvsdKvwsH4=)
                          2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
                          rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
        Validity
            Not Before: Dec  5 04:28:22 2025 GMT
            Not After : Dec 12 04:28:22 2025 GMT
        Subject: CN=69325f66-e8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:f3:5a:30:ec:ff:08:4c:31:29:15:36:39:
                    9f:ac:33:4b:37:62:b7:06:34:56:95:62:63:02:05:
                    7a:8a:94:96:4c:d0:b9:53:5a:99:d6:8f:ac:a5:ee:
                    5c:95:ed:bf:b1:09:7b:cb:43:66:f0:ef:be:f4:74:
                    3f:6f:7b:84:c0:dc:ad:a9:ea:a6:48:c5:0c:34:b9:
                    b7:58:97:28:05:ad:a2:85:ca:cf:ad:25:7b:c4:df:
                    5e:9d:50:81:1d:18:42:3a:a2:15:08:f2:d3:f4:1e:
                    ab:d6:fe:30:d9:02:30:50:8f:a1:3d:8f:d9:f9:34:
                    86:b8:2b:f0:bc:bf:ce:67:dc:9e:4a:09:dc:4a:dd:
                    2a:f0:01:7b:bc:77:29:83:ee:0e:11:de:76:62:3a:
                    90:04:1b:ba:b8:f5:00:19:ef:c5:98:bb:c8:b2:8a:
                    e5:01:18:c8:3e:17:3e:c5:14:7c:4f:aa:ce:27:d2:
                    7c:81:bf:0c:f2:93:89:f0:32:88:58:97:4f:e9:a3:
                    71:34:6f:74:97:9c:b9:a4:71:b8:98:cf:b2:23:18:
                    93:00:7f:32:ef:6b:80:97:50:c2:30:81:55:11:28:
                    11:e4:b6:22:08:a5:5d:26:6d:fb:b9:02:24:21:74:
                    a4:d4:d8:fe:92:54:b3:5e:00:2d:bb:53:cc:e7:d9:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:90:81:F0:8E:53:4D:8B:42:6E:1A:44:A4:D8:24:49:00:5F:84
            X509v3 Authority Key Identifier:
                keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:00:00:20:54:68:6e:9f:f8:75:a3:26:f6:6c:76:cd:1c:
         4a:af:5f:e2:b1:06:af:4d:54:98:56:1c:af:0f:31:4b:ec:d5:
         5a:4b:76:a0:2a:9e:88:e8:82:bf:bc:33:33:39:d0:67:df:e5:
         ff:da:29:fa:ab:ea:6f:fe:a0:6a:84:7a:bd:d0:5c:80:18:e8:
         4d:30:52:33:e2:29:1a:23:59:0e:5b:74:fe:e3:83:6f:e6:ba:
         ca:10:b8:ea:b1:66:21:06:9e:38:c8:c6:73:ca:39:06:33:03:
         dc:97:53:9e:ec:63:c3:48:f8:03:e2:b3:51:93:d8:35:cd:bb:
         b4:10:7d:9c:d7:35:4e:5e:5a:45:fb:61:ca:83:81:70:41:71:
         f6:32:bc:90:fb:a7:99:de:a4:a4:f1:94:8f:8f:8e:b0:d3:d9:
         6f:29:99:c5:9e:e4:e1:be:22:67:bd:22:90:fa:ed:58:1e:e7:
         69:77:f9:8b:e1:cb:0f:ef:21:bf:fe:fe:db:34:32:38:0b:fc:
         18:56:d5:15:2f:a6:31:f0:07:38:fc:ad:22:ef:f5:34:59:c3:
         95:08:67:d2:39:4c:93:13:ad:4a:da:4f:fd:b5:1e:64:dc:8b:
         25:5e:c8:80:4f:ff:d4:a9:65:5f:22:4b:c5:8f:e2:95:1a:bd:
         ab:02:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:10 2025 by rpki-client