This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File:                     V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier:          9k9hjeNRzTruMljJriKe6fKHsOnKDnzW5pvnhANaad4=
Subject key identifier:   F5:12:0B:51:0D:72:85:08:34:8F:6A:94:D1:E0:69:6D:D1:DD:E9:D3
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer:       /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number:          CB
Signing time:             Fri 05 Dec 2025 03:51:05 +0000
Manifest this update:     Fri 05 Dec 2025 03:51:05 +0000
Manifest next update:     Fri 12 Dec 2025 03:51:05 +0000
Files and hashes:         1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: od77bThtnkNepLbbYL7PnMpQ1/u8tKpNMvfUINRnYic=)
                          2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: 59709TYd4BYZbsPTssB//DoW2gqjEPI/Hf7sdt1S0uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
        Validity
            Not Before: Dec  5 03:51:05 2025 GMT
            Not After : Dec 12 03:51:05 2025 GMT
        Subject: CN=693256a9-6bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:46:f1:f5:6c:3e:8c:56:61:af:55:ae:c4:
                    9e:9a:80:1e:58:d1:98:8e:a8:71:a4:74:fa:88:06:
                    17:0c:2d:26:20:0b:1e:46:ea:e6:94:19:d8:c1:88:
                    2d:71:45:ce:6d:5d:2d:90:43:91:24:ee:a0:ba:17:
                    63:dc:ef:32:c3:f4:52:07:d1:77:2a:ed:63:8c:0a:
                    a4:9c:0b:15:6c:1a:61:6b:aa:0f:82:3a:ca:c0:4f:
                    b3:a6:59:df:67:fd:5b:2f:0d:9d:1f:d1:27:46:44:
                    9e:32:64:78:ca:fb:3a:62:74:8a:25:0e:a1:4c:8e:
                    04:47:00:ad:05:88:6e:87:4d:3b:e6:a1:88:e0:3e:
                    b3:90:b6:c3:ce:14:11:5a:9a:6e:e7:e5:cd:f9:b8:
                    26:ab:29:fe:64:02:4d:ac:93:f6:78:32:04:59:b9:
                    11:20:47:5a:fe:c0:ea:91:bd:0d:61:44:8d:e7:c3:
                    2e:51:96:24:5f:d8:05:d7:0c:8e:fd:84:31:a4:0d:
                    60:7f:d6:c5:eb:8e:fe:f7:8e:9e:6a:77:62:d5:5c:
                    3e:a5:b9:4e:c7:e8:bf:f8:ce:6b:66:97:32:e6:2c:
                    69:c0:38:29:f4:68:f7:33:1d:d9:a0:77:9b:2f:ca:
                    66:26:9b:00:9c:8c:59:7a:42:46:02:ff:0f:8b:62:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:0B:51:0D:72:85:08:34:8F:6A:94:D1:E0:69:6D:D1:DD:E9:D3
            X509v3 Authority Key Identifier:
                keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:38:8d:73:07:41:7d:ed:a1:00:18:86:05:e3:70:84:2f:5e:
         8d:b8:4c:6f:96:16:af:88:b7:66:0e:95:a0:bf:14:aa:c7:4f:
         48:98:c3:cd:af:62:86:3b:16:fa:0a:4f:82:0b:15:35:52:0e:
         4d:d8:59:a3:b3:ba:f6:71:2a:ab:82:41:db:4d:29:d8:58:ca:
         2f:aa:45:a2:9f:96:4b:9b:b2:90:80:98:d8:09:d0:a2:27:16:
         45:c5:2a:e2:14:98:d8:43:7e:7c:b3:6d:d0:ba:b8:c4:41:eb:
         c9:8e:e7:cc:e1:64:99:05:29:2a:85:3d:1a:33:15:d6:06:a4:
         10:16:b2:60:5a:45:39:42:46:17:a9:22:8c:18:4c:29:3c:76:
         9d:13:af:b3:27:4f:80:e0:f0:d1:20:b2:da:d0:4d:a8:8e:7b:
         ae:4f:f5:87:21:9b:38:8f:d7:4e:af:5b:df:0d:6e:ae:a7:2d:
         ef:2b:69:8c:fa:00:36:0e:77:e4:2a:3c:3a:0c:7a:d7:b5:d7:
         fd:21:fd:cf:34:f9:36:dc:be:e0:43:df:77:ce:b5:08:a1:ab:
         28:67:cd:9e:98:3a:ad:00:7b:76:6b:62:7e:1b:eb:00:c6:4c:
         d6:c6:d7:53:7a:73:eb:e7:55:5e:dc:fa:55:4d:fe:c0:17:c8:
         21:71:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:51 2025 by rpki-client