This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
File:                     _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json)
Hash identifier:          W9oDr50xKk9Z8fqbSly3+97ifTcmVnfr5jWskIaU+4w=
Subject key identifier:   94:BC:7A:64:C7:FA:7C:4E:11:01:CB:30:A0:13:E9:35:7C:EE:71:7B
Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
Certificate issuer:       /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
Manifest number:          06C2
Signing time:             Sat 06 Dec 2025 21:05:24 +0000
Manifest this update:     Sat 06 Dec 2025 21:05:23 +0000
Manifest next update:     Sat 13 Dec 2025 21:05:23 +0000
Files and hashes:         1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: 3Lh+py5skB9cT7pI9hTjWthJ9weDTeLL+PNc/j9c8fQ=)
                          2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl
                          rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
        Validity
            Not Before: Dec  6 21:05:23 2025 GMT
            Not After : Dec 13 21:05:23 2025 GMT
        Subject: CN=69349a93-f12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:3f:70:ef:0b:52:a6:7d:c0:44:6e:56:bf:
                    ad:6a:2e:5f:fb:c7:b5:39:5a:8c:24:1d:12:2b:ec:
                    b1:61:e6:57:2c:07:14:ea:9c:61:22:77:40:07:39:
                    aa:b3:0f:4b:85:d4:90:4f:e8:ff:1c:ed:2b:09:98:
                    91:ba:df:84:d5:fb:ad:c5:20:72:08:9b:46:f2:d1:
                    a5:e4:f3:fa:58:5f:dd:8d:3f:c3:31:ea:8f:2c:0d:
                    7e:3c:0f:bf:f5:2d:d2:4e:09:2c:80:e4:d7:47:2d:
                    d2:48:88:22:f5:0e:37:35:44:43:e5:7a:66:e3:26:
                    7d:39:ec:f3:fe:b4:31:da:2b:11:16:b7:10:27:04:
                    2a:3a:96:5b:a6:c0:07:e4:74:b1:c7:38:c4:75:4d:
                    d2:7f:64:b2:67:25:9b:b9:0b:6f:a1:dd:7d:55:cb:
                    8b:80:10:40:ef:4b:77:b9:9d:a9:7c:9b:77:b5:e5:
                    1e:3b:9f:21:4d:63:55:9f:bc:26:ed:04:50:ce:b6:
                    29:67:c8:c7:46:96:79:ee:1e:d0:1e:a0:2d:a9:2a:
                    1e:fb:9f:3f:f2:d4:28:84:ee:18:13:5d:73:17:ed:
                    0b:d6:94:08:cc:89:c9:f5:3b:3f:91:9b:44:2c:36:
                    71:46:45:f2:a0:32:26:b7:6d:0a:b2:1f:fd:ad:46:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BC:7A:64:C7:FA:7C:4E:11:01:CB:30:A0:13:E9:35:7C:EE:71:7B
            X509v3 Authority Key Identifier:
                keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:59:e8:7b:45:49:8c:fc:29:30:d7:21:64:6d:63:ff:72:ea:
         9b:31:87:3a:e2:4d:81:8d:ae:cf:e0:d3:49:75:14:41:d7:46:
         82:24:bc:85:95:73:da:66:fc:45:54:06:41:af:01:e4:72:61:
         12:3b:19:79:d7:5e:d1:23:16:36:cc:95:81:85:b4:46:17:8b:
         cd:53:1e:31:1f:5a:ed:0b:00:10:49:04:90:44:fb:38:30:79:
         f2:2c:77:8a:f3:8b:f5:7e:a3:b0:cc:f6:1c:db:ce:aa:c3:a2:
         87:b6:c3:0d:96:f9:b7:49:31:76:1f:22:99:6e:cb:cd:0f:c0:
         e1:47:3a:4c:96:54:7a:ac:f4:d8:d2:99:3d:1a:14:6c:58:58:
         ce:1d:ce:e0:31:3c:30:bb:e8:ed:99:ec:de:e6:5f:71:2c:5a:
         ae:a5:84:7b:f7:f6:6a:ba:4c:84:f1:7e:76:a5:e3:f6:29:18:
         27:fa:ca:0f:38:43:1a:83:bd:40:20:e7:18:86:06:4b:7e:31:
         d4:d5:a7:d9:de:81:fa:cc:7b:59:1d:a0:18:0f:26:36:a2:09:
         f9:af:bf:25:c3:87:5a:02:c0:b1:74:9c:6a:1e:94:91:f8:d5:
         7e:e9:60:2a:68:ae:57:ba:6e:79:7d:73:9b:d3:20:38:b5:73:
         e3:39:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:58 2025 by rpki-client