This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
File:                     rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json)
Hash identifier:          arxLzZQURrAUsloZuS8OKuOy6GNAvQHWJFQ9YJuLW+g=
Subject key identifier:   B5:AF:59:FC:AB:B1:79:D0:EF:F0:B7:B8:03:62:78:0F:A4:A0:21:DE
Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38
Certificate issuer:       /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038
Certificate serial:       0BA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
Manifest number:          13FF
Signing time:             Sat 06 Dec 2025 18:16:45 +0000
Manifest this update:     Sat 06 Dec 2025 18:16:45 +0000
Manifest next update:     Sat 13 Dec 2025 18:16:45 +0000
Files and hashes:         1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: pWMXw6wQ+qIwlmH3e7xaFlVd/RB2KQqd3XUO+/FaNvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl
                          rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038
        Validity
            Not Before: Dec  6 18:16:45 2025 GMT
            Not After : Dec 13 18:16:45 2025 GMT
        Subject: CN=6934730d-2464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:4b:6c:36:c9:2f:ce:ad:48:b3:de:e3:17:
                    09:03:ab:a5:a2:c3:48:c3:08:5a:47:28:ec:a4:c7:
                    8f:01:88:92:8b:86:28:11:0b:90:0c:68:bf:b4:93:
                    bc:cc:6c:96:f5:24:54:0a:25:d8:65:c7:28:4a:57:
                    d2:15:35:3f:3c:9a:d2:99:e3:a1:30:bd:19:53:ae:
                    48:e9:63:26:15:5d:e9:6e:b7:24:cc:de:de:5f:4f:
                    d3:bb:11:d1:98:74:5d:14:1f:b0:74:df:01:7b:b1:
                    bf:49:e2:6f:9f:f1:2e:6f:ea:d4:c4:ff:f7:7c:c3:
                    f2:6e:3d:7b:85:93:5c:90:04:78:05:a4:bb:bb:c1:
                    c9:7d:32:bc:01:03:44:04:7a:db:30:62:fa:ff:77:
                    f4:a3:8d:b4:66:1a:98:0a:8a:33:bc:0c:99:8c:26:
                    13:9d:d7:97:dc:b9:b0:be:2f:12:85:e0:c0:e1:a8:
                    26:0a:01:e9:b6:d4:a1:03:47:bb:91:d6:84:c8:09:
                    6e:39:8b:de:bf:df:e7:83:b8:84:e7:6e:d3:43:30:
                    bd:d6:5f:d0:ab:5e:59:19:8b:c9:7f:a9:35:f3:f5:
                    4b:9e:1e:fe:d4:a8:a3:40:88:6b:da:85:87:74:1b:
                    51:91:23:46:0b:21:17:09:a8:52:11:00:27:a7:8f:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:59:FC:AB:B1:79:D0:EF:F0:B7:B8:03:62:78:0F:A4:A0:21:DE
            X509v3 Authority Key Identifier:
                keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:46:e9:2c:9e:b1:c1:5b:a0:25:c5:aa:49:0f:01:a4:65:
         5c:eb:66:f7:43:0e:95:c6:ab:89:0e:9c:e0:47:37:3b:10:59:
         18:62:aa:af:87:57:f5:25:49:7d:30:0c:9a:81:81:06:c1:ff:
         a7:21:11:db:9f:45:e1:db:24:53:d0:4c:5b:81:b3:e1:5c:f5:
         aa:44:23:9d:21:1f:a5:05:7a:b9:56:fa:70:54:fe:37:da:ed:
         2d:01:cd:20:a1:ce:64:d0:5e:24:6a:2c:60:41:df:89:ec:25:
         36:36:81:bb:14:cd:33:be:bd:55:55:e4:9b:2f:7b:0c:4a:d5:
         b8:36:ce:5a:10:53:eb:a4:80:04:dc:79:0e:6b:0f:f2:9a:9d:
         7f:8e:ba:a6:4e:17:75:00:db:77:02:6e:c8:57:14:e2:6e:96:
         48:df:6e:36:a1:2b:24:e2:b4:65:be:7b:34:a2:30:9c:aa:ef:
         98:23:39:51:f4:38:22:90:9a:a3:a6:60:6a:0d:8e:3e:80:00:
         63:1e:76:d5:c9:41:b9:ed:64:93:b4:10:98:53:65:de:09:f3:
         61:db:0f:ed:03:b1:7c:23:83:00:4a:4d:4f:92:dc:e8:47:95:
         70:e5:a5:c8:cc:45:50:20:08:9c:c5:73:49:35:19:fc:06:93:
         fd:51:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:50:39 2025 by rpki-client