This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
File:                     iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json)
Hash identifier:          1zgFf3n37DIevY+EdbUamXY0nKtNJuXoWMoGaAZ/cgM=
Subject key identifier:   F2:6F:B3:36:6A:6D:D0:22:13:50:E4:35:22:E0:22:DA:01:66:D3:32
Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
Certificate issuer:       /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Certificate serial:       04A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
Manifest number:          049C
Signing time:             Thu 04 Dec 2025 22:33:37 +0000
Manifest this update:     Thu 04 Dec 2025 22:33:37 +0000
Manifest next update:     Thu 11 Dec 2025 22:33:37 +0000
Files and hashes:         1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: 7Getw9gSgDFf79P4tc82CL3dUkSFVWwdW8Uo4D/PqkM=)
                          2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: M9+vY+hFN94HdKE9FI6ZDTlRjfa1IPzz7IeGhvfQshE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
                          rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
        Validity
            Not Before: Dec  4 22:33:37 2025 GMT
            Not After : Dec 11 22:33:37 2025 GMT
        Subject: CN=69320c41-e846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:dc:e6:92:a3:44:33:b7:75:91:f3:39:39:
                    6b:3e:a4:5b:6c:e7:91:d3:bd:bb:31:19:3c:ee:dc:
                    eb:cf:ac:6b:ed:0a:b6:87:ae:ae:99:0b:2c:55:24:
                    d4:69:07:1c:f9:dd:00:f6:e2:86:ff:87:a5:29:23:
                    8a:2c:05:90:b8:c3:7d:98:a9:6b:0e:23:a4:6e:b8:
                    ad:61:f1:c5:c4:ea:c5:2c:d1:d4:b5:98:d1:83:59:
                    56:30:2b:62:59:95:b2:84:38:d3:5b:03:05:49:4e:
                    0f:0d:3c:df:fd:fe:31:c4:08:18:6f:6b:58:0b:26:
                    a8:1d:5e:15:0b:f7:ff:a7:21:f0:3d:63:c6:99:3d:
                    e3:f4:46:ad:0c:45:34:19:14:56:cf:f5:6c:f7:cc:
                    4e:df:57:97:71:bd:5a:c7:61:57:4f:8a:0f:5d:f7:
                    e2:1c:1d:7b:ad:7d:20:45:55:b9:0d:2a:49:b0:cd:
                    15:9c:ef:44:0c:c2:33:bb:0b:20:bf:d0:ac:3a:9d:
                    7c:fb:1c:4a:c3:ad:41:4f:e3:c1:76:0b:b1:43:c1:
                    b0:df:cf:32:79:42:38:45:03:10:7c:7e:82:64:1b:
                    d9:0e:5d:00:6b:e0:c0:10:bf:74:27:06:48:5d:e1:
                    39:d2:82:b4:37:4f:93:63:c0:69:3b:ad:41:56:fc:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:B3:36:6A:6D:D0:22:13:50:E4:35:22:E0:22:DA:01:66:D3:32
            X509v3 Authority Key Identifier:
                keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:60:38:f7:96:89:d9:df:4b:e5:cc:57:4e:3f:13:7a:69:24:
         cc:3a:42:35:80:4d:ab:56:51:4b:46:02:ed:07:bb:53:51:ec:
         63:22:ff:ec:e9:86:9e:0a:5e:60:5e:4a:36:2e:ed:a4:54:ec:
         34:ce:68:da:9e:04:66:76:24:fd:ef:f9:e0:8a:7d:61:36:c2:
         8e:94:fe:b7:3a:ba:f8:4b:20:e6:d1:1d:95:81:c5:74:50:e8:
         cb:68:2f:6b:39:58:89:68:d5:2f:c4:da:45:b6:08:a6:f5:cb:
         db:b1:3d:dc:56:03:10:f0:17:a3:dd:17:4f:02:aa:a5:dc:f5:
         65:b8:2d:ff:20:d2:17:e2:d7:e3:a5:49:7b:b1:5a:4e:b7:77:
         c6:57:cc:ee:1a:6d:55:8e:35:b3:63:30:3d:d7:8b:39:b8:cf:
         a9:be:a3:00:7f:88:35:0f:0d:76:67:a4:40:4f:62:b1:e5:9a:
         06:f8:c8:c1:c9:b3:0c:67:dc:fe:34:d8:2b:8e:7a:97:84:d2:
         36:c3:cf:1c:a2:dd:6e:8b:5b:5c:1b:21:57:da:22:dc:20:5f:
         19:75:86:29:ca:f5:f9:dd:39:dc:0e:d0:b2:3a:f6:ab:0e:8c:
         9f:27:72:fa:43:bd:70:35:5b:b3:ee:4c:99:a1:89:22:0e:4f:
         c1:c3:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:19:03 2025 by rpki-client