This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File:                     dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier:          a0xicjju5SGEeM5jhd4zRmlnFyyowJ+nbTdLYfLU50k=
Subject key identifier:   DB:13:8B:50:8E:B0:05:F3:4E:D0:91:E5:9E:FF:60:DC:B2:B0:15:70
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number:          0211
Signing time:             Fri 05 Dec 2025 00:33:39 +0000
Manifest this update:     Fri 05 Dec 2025 00:33:38 +0000
Manifest next update:     Fri 12 Dec 2025 00:33:38 +0000
Files and hashes:         1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: nNFgr5pLiW7npjV1GeUun4+esPmYeIwc0JM0tLoQerg=)
                          2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: DPyqPkT0neP2hvNy+hn6VREMN9M60vGzkrQgZGHU27c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Dec  5 00:33:38 2025 GMT
            Not After : Dec 12 00:33:38 2025 GMT
        Subject: CN=69322862-45c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:8f:a1:cd:90:92:ce:d3:62:13:e8:d1:df:
                    67:3c:72:5d:6b:75:55:f3:9b:cd:32:e3:97:ab:a3:
                    7f:7e:88:4d:23:1a:df:0f:d9:5d:64:89:44:bb:ce:
                    88:ca:f0:4f:08:14:5c:81:10:a9:82:8a:27:9e:75:
                    0b:ca:bb:51:e9:f8:f5:c3:2b:79:60:76:3b:ed:73:
                    bf:e2:20:5f:f5:39:bd:c1:e5:c1:76:66:b9:62:d8:
                    94:be:4a:8e:20:76:45:22:b9:6b:6c:7c:14:5c:7a:
                    37:27:3f:6c:d2:fc:38:eb:97:c7:55:bc:38:e2:36:
                    09:fd:75:7b:8b:ea:ab:e9:a0:9b:6c:d7:17:ad:10:
                    2d:78:9c:9f:85:2c:6f:a8:05:69:81:d4:af:b0:e0:
                    1b:8f:ed:d5:b5:64:fb:43:99:45:96:d1:ec:3d:a4:
                    6d:21:02:35:5f:0e:e5:f4:4b:d2:ac:6c:82:83:19:
                    1b:da:28:36:eb:14:84:c6:90:21:95:e7:72:a1:f5:
                    3d:af:cb:c7:37:b6:38:17:84:42:e0:d0:52:ee:b7:
                    1b:6e:09:4c:7d:87:de:f5:b3:80:6b:85:60:f1:00:
                    65:c7:24:c3:ed:4b:46:30:45:e0:c1:9b:17:07:49:
                    d3:36:6c:ba:7f:19:5d:cb:fc:1e:25:a1:4c:5e:5b:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:8B:50:8E:B0:05:F3:4E:D0:91:E5:9E:FF:60:DC:B2:B0:15:70
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:61:69:4a:f4:36:b6:8f:5b:7b:03:c1:7b:f1:12:3b:1a:
         ed:9c:ef:67:33:bc:d9:3b:32:e5:a9:cf:d9:07:b2:b4:03:f2:
         a5:72:86:a2:80:8a:27:1c:f3:ae:6f:84:17:dc:51:33:17:45:
         7e:6f:cb:1d:68:ed:8a:4e:1c:6d:bb:43:c3:42:9f:8b:89:c0:
         1a:69:83:a6:5b:9d:8b:e9:22:b9:88:4e:11:8a:26:65:38:c7:
         4d:15:4d:b9:8c:f8:ce:d1:b9:5d:4a:c0:65:f0:3e:12:67:30:
         f4:af:3b:78:55:61:c5:68:0b:a7:51:49:d8:02:a9:54:a6:7d:
         30:82:b2:e1:6e:c9:34:72:63:2b:87:e5:25:ba:24:01:3d:a6:
         a3:fd:87:a4:58:a7:cc:6c:e5:36:8f:ed:c3:81:97:9e:ad:91:
         6b:e0:b2:41:85:d1:29:3f:61:50:a4:76:5e:cd:3c:85:31:52:
         7c:55:48:a7:9e:9c:db:04:74:f1:85:2a:ba:02:00:07:42:1a:
         c3:b5:42:f4:f1:d6:6c:5d:f1:17:ab:4a:66:ca:06:4c:37:e0:
         40:80:65:07:97:11:61:fc:5e:31:05:3f:10:c3:06:eb:e3:22:
         f7:11:39:a4:82:f6:6e:f9:9a:1a:69:20:76:49:e3:c7:e5:ea:
         ff:6a:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:33 2025 by rpki-client