This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          gg4hcwVovf+IYwvbDSDJCNJrT9Up02p7Jv3o4+x9cxA=
Subject key identifier:   A3:31:A5:DD:57:88:E7:98:FB:CA:B8:F9:08:37:53:89:74:2B:F1:88
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          8E
Signing time:             Fri 05 Dec 2025 04:38:20 +0000
Manifest this update:     Fri 05 Dec 2025 04:38:19 +0000
Manifest next update:     Fri 12 Dec 2025 04:38:19 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: DlRB0KZg0AH+gCawdptmM2WIJwvcuy4sNDm1Hb9oY78=)
                          2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=)
                          3: 850942E4325311F081E87832C4F9AE02.roa (hash: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Dec  5 04:38:19 2025 GMT
            Not After : Dec 12 04:38:19 2025 GMT
        Subject: CN=693261bc-1962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:50:36:2e:82:19:44:6f:ed:38:e3:62:eb:
                    b7:85:39:3b:c1:18:ec:ad:84:6a:cd:b5:1b:10:45:
                    44:71:b3:83:d9:c6:f2:cb:4b:ed:18:5b:60:18:14:
                    79:73:bc:4e:4f:38:2e:87:fa:45:08:7c:8a:d0:c7:
                    4a:c2:94:4a:d9:7a:3e:81:b9:83:aa:f2:73:36:e6:
                    35:a1:56:46:2c:0a:e0:6e:14:dd:ee:6b:a6:b3:cb:
                    37:6c:e7:a8:55:54:89:bf:0c:fc:27:29:bf:32:c4:
                    fe:f9:4a:cb:9f:08:7d:61:97:ea:a9:84:aa:49:20:
                    b5:fb:c2:1f:1e:cf:cf:b7:d3:1d:c9:36:f9:c1:92:
                    78:2a:e2:2d:bd:b5:5e:24:bb:47:3a:b0:71:12:87:
                    08:8e:01:a9:a2:05:29:36:54:27:12:a0:5d:3a:f9:
                    f2:41:11:6f:bd:94:e2:d9:31:0e:ca:76:bc:ea:8c:
                    98:5a:1c:9c:84:0e:4a:f1:9e:e0:44:9c:6f:43:86:
                    a9:c4:5e:f2:b5:b5:d7:e8:88:25:20:16:ae:64:18:
                    e3:19:21:56:a5:be:6a:4a:54:57:2d:28:e2:cf:a3:
                    39:cd:70:12:68:78:46:ba:e4:b9:a2:d7:e3:03:e5:
                    de:4e:a7:21:6f:a2:04:94:92:c7:4e:f3:04:39:85:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:31:A5:DD:57:88:E7:98:FB:CA:B8:F9:08:37:53:89:74:2B:F1:88
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1a:91:16:03:9b:a0:ec:c0:a1:48:52:95:ed:d7:09:8e:8b:
         95:dc:a1:4b:3c:ed:ac:31:8b:be:33:8d:06:7d:01:36:b6:3e:
         f6:cf:32:13:51:b5:f2:7f:b3:3b:65:5e:20:ec:20:65:3d:b3:
         ce:c3:2a:84:b5:5c:e3:d4:b5:16:69:d9:10:e7:0c:fc:79:87:
         c8:34:d9:cb:01:bd:3c:23:ea:6e:b0:c7:14:5a:51:48:20:c9:
         04:b2:5f:40:d6:cb:92:d9:45:4d:a6:b9:01:71:43:ac:7e:58:
         88:6d:1e:c5:a7:2e:34:0e:25:0d:e7:0e:44:52:bd:dc:02:3a:
         23:3c:7a:d2:ad:f4:4a:55:a0:21:0d:65:c0:21:01:55:75:a0:
         6e:7c:1c:a3:5f:8d:c5:a5:16:eb:71:d7:a6:24:d2:2a:f8:02:
         0b:67:91:7d:b9:b2:37:e6:11:ea:17:e8:c2:62:be:fb:f4:ea:
         64:86:73:cf:bc:23:aa:be:23:3a:c9:00:20:79:d2:3f:7f:07:
         ab:f0:92:74:dd:02:49:22:74:0a:03:16:d4:c4:b2:b6:8a:17:
         50:24:ae:0f:69:1e:08:6b:ad:aa:65:1c:99:49:a0:8f:75:a4:
         55:51:04:b6:f0:46:e2:4f:87:e3:eb:f1:46:f9:9b:06:e2:b9:
         3e:d3:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:26:15 2025 by rpki-client