This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          Pzb6K5VX942jRX4RVbSJL96lrRkNVHEY9/cSQKj6Mno=
Subject key identifier:   C6:9F:80:7F:C2:49:61:36:3D:D9:5D:ED:67:2E:47:F6:55:39:7F:79
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0C83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0C6C
Signing time:             Thu 04 Dec 2025 18:02:16 +0000
Manifest this update:     Thu 04 Dec 2025 18:02:16 +0000
Manifest next update:     Thu 11 Dec 2025 18:02:16 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: G4kcPDUxDu8vE5NiAwj8YX4ge9cqvhqqaFs0g5SUIlU=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: 71wtlkFspbYtUock+BFXzeZYBB331wF/cr+DbtyBMzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3203 (0xc83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Dec  4 18:02:16 2025 GMT
            Not After : Dec 11 18:02:16 2025 GMT
        Subject: CN=6931cca8-fe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:36:00:ca:96:88:56:90:1e:17:73:9d:ef:
                    ba:ec:e3:bb:26:e1:d5:16:c7:a4:a0:5c:2d:1d:c7:
                    73:d4:d7:15:47:fd:3c:67:d5:0a:a7:86:8a:99:3a:
                    3e:7e:81:1d:22:84:4b:3a:d2:69:ad:85:df:e4:2b:
                    3f:67:ce:08:0a:13:01:ef:bc:dd:1b:d5:51:ea:63:
                    9c:3c:11:28:c9:e7:2c:47:da:96:d6:61:66:c9:e4:
                    c7:21:ad:6a:21:73:c9:ae:46:f3:cb:71:6b:c3:ad:
                    f1:b3:b7:02:19:48:40:71:8b:d7:0a:5f:eb:da:07:
                    fc:bb:b4:70:1f:49:6b:28:4e:4f:29:f2:74:f9:42:
                    67:4a:1a:78:06:0e:13:e5:b8:d4:bf:b3:0d:c6:4d:
                    88:e6:07:0e:21:dd:f2:4e:84:06:17:b7:85:9d:d8:
                    32:48:70:cd:44:35:e5:01:80:50:49:ce:00:d3:32:
                    27:ec:58:c7:fb:17:c5:02:79:40:b7:80:92:c3:62:
                    37:25:1f:f1:d8:05:06:62:63:a8:97:c7:6b:5a:a1:
                    20:67:2e:4a:8d:d3:ad:aa:be:66:2e:9a:d3:34:e5:
                    16:bf:3a:46:5b:54:2d:4e:c7:2b:69:48:98:60:a6:
                    2b:13:8f:3e:cd:d6:3a:99:06:b4:9a:d8:ce:69:d6:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9F:80:7F:C2:49:61:36:3D:D9:5D:ED:67:2E:47:F6:55:39:7F:79
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:d6:a5:9c:31:a0:de:43:15:f2:11:3a:a8:b7:f4:b2:34:
         ba:03:c5:f2:01:7d:21:52:9e:96:c8:6d:22:44:f6:a9:bf:e1:
         15:95:4d:f0:35:cd:db:a2:a7:5f:e8:42:14:1c:a6:52:db:2b:
         59:db:cc:61:ac:42:65:50:ea:39:99:38:74:81:3e:21:8f:e8:
         cf:74:b4:83:9a:b9:fd:36:90:13:bc:0e:4a:9d:e0:d1:b8:1c:
         c3:4e:e0:4e:7e:ab:c2:7a:a7:8c:56:00:ed:37:54:f8:4a:d0:
         50:21:1b:7f:04:89:c7:2b:c5:c6:c0:fc:00:c6:fe:98:92:e2:
         56:21:71:a7:93:f0:49:fa:c6:3b:28:8b:6a:ce:e6:5f:f1:77:
         02:2f:d1:72:88:e2:87:b7:fc:3a:da:b7:40:32:5e:ca:4c:76:
         02:70:c6:47:f5:44:98:54:c2:f2:ef:33:de:7a:00:88:36:60:
         dc:e2:fd:a6:e2:27:e4:70:fd:87:b1:9a:50:d2:01:a7:a0:e9:
         16:85:dc:f4:84:6f:2b:41:1b:54:90:18:27:21:4c:d0:f2:b2:
         fd:51:b6:17:17:c8:7f:f5:3e:6d:df:b2:4c:23:ef:cc:a5:ec:
         8e:f9:e2:e8:ac:c1:a3:0a:e0:d3:eb:ee:21:f1:ac:dd:4b:85:
         e4:9b:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:45:06 2025 by rpki-client