This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          37MBPXRcWI7OSnz1MoMcuMx3VapiUkSSuddFrChWKhE=
Subject key identifier:   C4:6A:39:5D:B7:00:E1:DA:4E:F4:3A:FA:68:28:C5:D6:70:B9:79:73
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       05AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          0597
Signing time:             Sat 06 Dec 2025 22:04:30 +0000
Manifest this update:     Sat 06 Dec 2025 22:04:30 +0000
Manifest next update:     Sat 13 Dec 2025 22:04:30 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: O0nWkiANZAyljTezDZEY/4AZO/iBcVPZbP3B2KSCTsU=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=)
                          3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Dec  6 22:04:30 2025 GMT
            Not After : Dec 13 22:04:30 2025 GMT
        Subject: CN=6934a86e-67f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:cc:dc:66:63:7f:e9:12:6e:63:bb:a2:f3:
                    b7:bb:0a:22:e2:2d:3d:0a:e3:af:78:c0:89:a7:ea:
                    94:96:da:f6:17:06:05:8d:79:da:42:84:e0:cd:fb:
                    c9:e4:f0:a4:fd:20:a7:f2:05:97:06:84:09:8b:7f:
                    31:a0:c8:89:b3:03:8f:b1:91:69:84:3f:fe:d6:34:
                    ad:58:07:b4:4d:27:7b:ea:42:f8:6f:fd:18:a9:de:
                    8a:c8:5e:46:ef:40:d8:c5:ea:96:b8:9f:f4:65:07:
                    0d:1c:e8:c7:4a:b8:a7:3c:b1:23:1e:b4:d5:05:a1:
                    7e:46:66:0b:c4:36:c1:05:4d:de:dd:ac:1d:a4:3f:
                    42:a6:55:68:00:e4:73:36:02:c3:25:00:9f:54:60:
                    40:a1:ac:b1:aa:48:20:cf:47:8b:46:11:07:00:9c:
                    23:ad:e2:f5:93:9a:3a:c9:1e:5a:93:ab:e3:9a:95:
                    b8:9d:87:6f:10:49:21:fd:49:61:c0:dd:b7:8e:dc:
                    00:26:78:7c:e8:94:98:bb:21:f1:fe:79:69:ce:27:
                    ad:79:e3:00:de:89:0f:f1:de:81:51:7b:d6:86:75:
                    08:b3:0b:01:2e:27:b9:c9:b5:41:b8:dc:c3:44:73:
                    d1:e1:f7:23:68:83:da:1e:e1:07:e1:7c:13:11:10:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:39:5D:B7:00:E1:DA:4E:F4:3A:FA:68:28:C5:D6:70:B9:79:73
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:8e:6a:30:07:38:66:6c:fd:a9:3c:4e:e0:7e:b8:fd:a3:
         32:f1:54:3c:b0:71:df:e3:39:01:08:f8:0c:86:fd:b9:96:21:
         38:a6:ac:60:59:2d:ea:34:33:47:0f:57:7f:1f:e8:77:e2:1d:
         53:2c:4b:ce:e2:a4:43:5e:00:92:92:17:34:6c:21:20:96:89:
         fb:07:b1:84:8c:c9:ca:df:4c:95:e9:3a:c5:01:65:ba:d4:33:
         31:2c:b6:a2:c0:2f:d4:37:a5:b3:b2:d9:c4:e2:aa:e1:60:2e:
         d8:09:31:86:38:05:0c:f7:2c:43:c8:c8:99:a3:0a:fe:2d:73:
         99:95:d4:b3:c0:17:c9:02:14:cc:92:7e:1d:f9:c6:4e:4c:b1:
         7a:a8:d9:50:6e:e5:64:3a:59:a0:45:d5:64:cc:51:ef:d2:25:
         c9:e2:5c:86:4c:98:ee:11:30:b7:da:0d:78:92:52:b1:13:f0:
         b8:f5:69:37:32:3f:c6:f8:6e:59:e7:8d:82:5b:8a:80:e1:99:
         a3:af:aa:8a:c2:bb:d2:89:60:6d:84:e2:12:f3:89:56:c9:84:
         71:56:10:61:7f:4f:a5:9a:a8:39:8b:c5:6c:51:c0:94:af:6f:
         0e:8c:41:47:c9:d8:eb:48:97:a9:9a:10:e7:f8:eb:f9:a0:d8:
         c3:d6:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:50 2025 by rpki-client