This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
File:                     rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json)
Hash identifier:          uLfowNR26wYWfhlZGahEq3VX98vHqnkULCH4sJ6X2Dg=
Subject key identifier:   E2:04:89:36:78:12:B6:60:6A:43:2F:D5:71:F1:69:CE:E5:3F:57:F6
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Certificate issuer:       /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial:       0963
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
Manifest number:          0956
Signing time:             Sat 06 Dec 2025 19:20:06 +0000
Manifest this update:     Sat 06 Dec 2025 19:20:06 +0000
Manifest next update:     Sat 13 Dec 2025 19:20:06 +0000
Files and hashes:         1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: T727sX2+ZZ9aAkQSiXWhWjBwRljMeP++NwRfcVnqa2I=)
                          2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: 1cgPVh8WdtKfjeGj/rrD5cxiCucmJ6j+98VBK0Krq4o=)
                          3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
                          rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
        Validity
            Not Before: Dec  6 19:20:06 2025 GMT
            Not After : Dec 13 19:20:06 2025 GMT
        Subject: CN=693481e6-d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:ea:60:2b:cf:21:eb:c0:dc:34:74:3f:6f:
                    56:09:a2:4c:d7:e6:c9:70:82:80:2e:af:9d:89:89:
                    fd:f0:e5:7a:0f:e0:9e:58:3f:10:a4:39:d6:c0:22:
                    d3:2f:57:7a:3f:81:9f:d5:c9:24:8a:a3:29:2d:f2:
                    45:10:86:19:8b:84:86:73:20:d2:a2:3a:15:e9:a7:
                    b0:9d:71:e9:9e:bf:bc:fe:56:83:ce:d7:65:d5:f3:
                    c8:8a:54:c5:18:0f:da:4e:d3:32:e2:47:42:b2:e6:
                    ec:aa:ec:74:69:3b:db:f4:6a:cf:09:99:4b:8f:62:
                    3b:47:7a:3c:8d:4c:5a:59:bd:cf:f9:23:9e:30:13:
                    79:f7:6a:50:b9:06:a5:91:03:af:62:c6:c6:28:e2:
                    b5:6e:cd:3e:23:16:7f:27:eb:84:3b:38:8d:fe:f2:
                    4c:9e:9d:2e:26:0b:1e:16:5b:97:33:31:d9:78:e7:
                    6b:67:9d:93:1c:cb:9c:cd:bf:2c:2a:83:f9:b5:40:
                    55:a9:b0:de:d5:93:eb:97:31:ff:fc:72:c8:99:94:
                    37:bd:7d:58:cd:72:3e:01:fe:f7:b3:e6:5f:08:3e:
                    b1:2a:2e:e0:ce:5a:36:30:43:58:c6:c0:cb:48:d6:
                    59:9c:af:ee:72:a4:7b:0c:6c:15:38:cf:de:4d:f1:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:04:89:36:78:12:B6:60:6A:43:2F:D5:71:F1:69:CE:E5:3F:57:F6
            X509v3 Authority Key Identifier:
                keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:f4:09:a6:d3:74:94:52:c5:55:c5:2a:72:6d:1a:7c:77:
         4e:ef:ad:ce:2a:6c:95:9e:2f:09:60:89:d6:a1:33:16:b6:3d:
         2f:6b:35:0e:9f:b6:92:f9:a8:fc:df:73:a2:55:d1:52:cb:94:
         6c:b2:c8:78:e7:8a:ea:fc:04:2b:ad:9c:0c:19:14:c5:b5:9a:
         02:4c:95:cf:b2:c9:3b:0c:56:bd:20:e1:42:5d:99:b0:55:ff:
         ed:fe:3f:e1:de:19:67:26:31:f0:1e:d4:c7:03:c7:70:ec:1d:
         9e:31:8f:b3:d9:c0:6e:a5:c4:8c:4a:cf:c9:1b:49:78:34:bd:
         f5:28:e1:22:87:d7:26:b2:98:86:51:75:a5:90:26:84:ed:33:
         67:40:cd:72:af:05:0d:b9:ba:e1:98:24:3c:69:43:93:e9:c4:
         1e:64:76:3f:fd:5f:25:5b:0c:9e:5c:80:66:df:d9:69:1f:83:
         95:c2:a9:ed:9c:6c:bc:b3:e1:da:07:61:b7:9e:dd:b0:a2:9b:
         30:35:91:47:db:8f:6f:7f:57:a3:79:c9:4f:08:25:ab:bb:b4:
         f3:9b:9b:a9:51:6e:0f:33:f8:ad:e7:6c:f4:73:bf:e7:1d:c5:
         24:be:1a:86:02:ad:d6:5f:fc:fe:3d:0f:50:c9:62:ac:f1:76:
         3c:86:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:32:01 2025 by rpki-client