This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File:                     1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier:          dbZ7wGg1rwUn7rZG9kdBVT9+YFR20YQIkGtD6Ght4GM=
Subject key identifier:   17:A1:06:E5:85:F3:D5:42:BF:4A:15:49:2E:95:BD:85:73:31:71:C1
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number:          06
Signing time:             Fri 05 Dec 2025 05:54:50 +0000
Manifest this update:     Fri 05 Dec 2025 05:54:50 +0000
Manifest next update:     Fri 12 Dec 2025 05:54:49 +0000
Files and hashes:         1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: GRBq+IyZpTm3t9e7axuebxytHXXV0LnYWeAoE913ejU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Dec  5 05:54:50 2025 GMT
            Not After : Dec 12 05:54:49 2025 GMT
        Subject: CN=693273aa-4a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:5e:ae:7a:98:58:97:8e:2b:53:38:83:2f:
                    af:86:c9:66:fc:f0:2f:fc:81:ae:7b:99:30:1f:ee:
                    7b:8c:9f:60:73:46:ad:f6:85:87:b7:9e:a4:c9:d1:
                    c4:6f:65:b3:6e:3f:b9:f3:96:34:15:97:e5:19:3c:
                    28:1e:0e:ba:e8:e5:db:e8:21:7a:ce:0b:74:e7:d9:
                    dc:49:b5:6b:52:00:0d:bf:af:93:ad:a9:33:42:f6:
                    80:b0:bb:20:34:7c:79:c8:83:52:f5:93:79:80:a9:
                    8d:0d:89:cd:99:a8:e8:58:d9:4e:44:cb:b5:10:63:
                    d8:13:2b:6a:99:40:f9:56:87:7f:2f:92:2d:03:61:
                    bc:88:a6:d1:00:9e:b0:d6:01:de:65:c9:cc:e7:9b:
                    73:ef:0e:2e:f9:24:f4:b1:60:64:b7:05:f1:d6:19:
                    19:a2:e3:a6:cb:d2:da:ee:ce:75:d4:9b:c4:e2:ec:
                    89:48:31:47:4b:78:4a:0e:a2:7e:4b:52:ca:67:a2:
                    43:3b:33:9b:2b:bb:a4:75:de:76:2d:59:18:9e:1e:
                    16:36:83:06:02:87:0e:5d:8e:2b:71:a4:8f:ec:62:
                    d8:f9:cd:de:40:27:5b:9c:ba:61:2f:e4:81:1d:ff:
                    e8:05:c2:c0:7e:4e:ea:99:00:b0:f8:de:cc:99:80:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:06:E5:85:F3:D5:42:BF:4A:15:49:2E:95:BD:85:73:31:71:C1
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a4:1d:ec:18:3f:3d:62:d0:a6:a6:7c:50:a4:ce:b1:fb:6b:
         d7:2c:ca:30:c9:9c:26:4b:45:53:1d:d0:e9:76:f8:71:e8:62:
         7c:cf:ab:c5:38:26:8c:08:bd:b9:47:b2:a0:35:18:87:76:58:
         19:70:db:d5:30:a1:46:55:5e:39:49:bc:ce:39:35:b9:8f:fd:
         50:ca:c8:7b:7f:c9:9d:5e:7c:a0:15:84:12:be:bd:37:75:62:
         8d:36:48:f8:2a:c0:46:74:4a:49:3d:f6:ad:a4:79:87:da:d2:
         45:81:0c:bf:83:6c:ee:fb:4d:99:50:dd:47:3a:7d:94:98:3d:
         68:81:c5:b7:68:95:b6:39:12:7a:ca:86:d6:70:ac:e9:9c:83:
         b2:c4:ad:99:90:b7:ab:a8:3b:1b:8b:c1:a1:42:ef:22:85:ee:
         e6:43:25:3b:84:40:27:74:7a:1d:99:a8:e4:f8:41:08:98:f5:
         9b:ff:fd:6a:3a:a2:e0:69:ff:8f:9b:10:0f:13:2f:37:5e:f6:
         6e:ec:76:a8:c1:63:0b:f6:a3:b9:e5:ea:0e:72:89:54:e4:5f:
         65:ce:b6:d6:22:f9:08:13:f8:c3:d3:97:5c:9c:ca:07:09:bc:
         21:28:0c:52:f1:14:66:45:9b:dc:44:1c:91:a2:51:7e:b0:5b:
         08:22:cd:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDdFRDExMC8GA1UEBRMoRDVEMEQ4RTFGMDNENTEwMDg4OUY0MTgwQTY1RjU1MEEw
RDU4MEI4NTAeFw0yNTEyMDUwNTU0NTBaFw0yNTEyMTIwNTU0NDlaMBgxFjAUBgNV
BAMTDTY5MzI3M2FhLTRhMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZF16uephYl44rUziDL6+GyWb88C/8ga57mTAf7nuMn2BzRq32hYe3nqTJ0cRv
ZbNuP7nzljQVl+UZPCgeDrro5dvoIXrOC3Tn2dxJtWtSAA2/r5OtqTNC9oCwuyA0
fHnIg1L1k3mAqY0Nic2ZqOhY2U5Ey7UQY9gTK2qZQPlWh38vki0DYbyIptEAnrDW
Ad5lycznm3PvDi75JPSxYGS3BfHWGRmi46bL0truznXUm8Ti7IlIMUdLeEoOon5L
UspnokM7M5sru6R13nYtWRieHhY2gwYChw5djitxpI/sYtj5zd5AJ1ucumEv5IEd
/+gFwsB+TuqZALD43syZgOg9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF6EG5YXz
1UK/ShVJLpW9hXMxccEwHwYDVR0jBBgwFoAU1dDY4fA9UQCIn0GApl9VCg1YC4Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0M5QzYyREE0Q0I4
MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWREWTRmQTlVUUNJbjBHQXBsOVZDZzFZQzRVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
N0VEL0M5QzYyREE0Q0I4MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFD
SW4wR0FwbDlWQ2cxWUM0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJWkHewYPz1i0KamfFCkzrH7a9csyjDJnCZLRVMd0Ol2+HHoYnzPq8U4
JowIvblHsqA1GId2WBlw29UwoUZVXjlJvM45NbmP/VDKyHt/yZ1efKAVhBK+vTd1
Yo02SPgqwEZ0Skk99q2keYfa0kWBDL+DbO77TZlQ3Uc6fZSYPWiBxbdolbY5EnrK
htZwrOmcg7LErZmQt6uoOxuLwaFC7yKF7uZDJTuEQCd0eh2ZqOT4QQiY9Zv//Wo6
ouBp/4+bEA8TLzde9m7sdqjBYwv2o7nl6g5yiVTkX2XOttYi+QgT+MPTl1ycygcJ
vCEoDFLxFGZFm9xEHJGiUX6wWwgizfc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:55 2025 by rpki-client