This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
File:                     s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json)
Hash identifier:          Lg/pZAhjRipJDQVZtx9pcAq/5R+945SsADmSUG8f1uM=
Subject key identifier:   A7:00:B7:F2:76:09:93:8D:76:B8:26:82:0B:11:5D:5B:30:AF:FE:0D
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       37A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
Manifest number:          3665
Signing time:             Sat 06 Dec 2025 14:23:31 +0000
Manifest this update:     Sat 06 Dec 2025 14:23:31 +0000
Manifest next update:     Sat 13 Dec 2025 14:23:31 +0000
Files and hashes:         1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: KDY0SerlutXXCMGcZ92XpP/AH56zJD8f5n9cNxHhTUA=)
                          2: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: YPxJgAFP2pm+e64iG82yJRkFHNHfja4F2rH7VSVuFpA=)
                          3: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=)
                          4: B6704306C9F111F08975B813C4F9AE02.roa (hash: HYkhw8fZq9kBjZNB+FV2rHmH6ApPJKlwKqPb86pTwqA=)
                          5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=)
                          6: 305A13D6C9F211F0ABA27932C4F9AE02.roa (hash: Q9IV/BwxSxn4MVml8VD/CwXk29GKG8jKJQUd5cNt0Qk=)
                          7: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: 8JKaEfgtThOrevd/FI1wUsWQCsjDZCsWDfH4rtPvYOM=)
                          8: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: Yn6iyp3sOHzht7NrUVV1K95CTLrIyR+zeCU6DhPlbi0=)
                          9: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: E9Q0DLQxOx2PNLNxJzUPOmEekE0nfR8RNH8+NziMkYc=)
                          10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: UB9M+LLNN3sS8I2EFsp8N9BHGeanS2Z+lbFEvYsOTeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14249 (0x37a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
        Validity
            Not Before: Dec  6 14:23:31 2025 GMT
            Not After : Dec 13 14:23:31 2025 GMT
        Subject: CN=69343c63-248e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:66:cc:92:cb:84:da:50:b2:fc:5c:3c:3f:
                    c9:17:90:3c:dd:66:51:cb:e3:a2:c0:06:c2:36:34:
                    1f:15:fc:e5:67:fc:a8:9a:fd:2e:47:6b:63:de:6d:
                    40:5c:b6:4f:25:f8:70:e8:1c:c3:34:d0:61:f5:2b:
                    62:aa:de:39:b9:29:fd:50:ca:54:5c:af:ef:23:64:
                    e0:cb:0d:15:3b:c8:3a:bf:ae:2f:cf:18:ab:28:ed:
                    48:e7:90:be:59:5d:89:47:1d:74:01:f2:23:8c:65:
                    d2:2a:f0:bc:7d:97:75:5a:9b:2d:40:6e:86:66:a4:
                    68:db:99:9e:d7:6c:69:6b:04:e9:ff:43:06:b6:fe:
                    67:85:51:7b:73:46:20:c6:f6:e6:12:53:0e:66:f7:
                    1c:5f:41:e2:90:8e:ee:e4:96:2d:c8:f3:87:2d:04:
                    21:8d:8a:1f:fc:a5:5d:7e:b2:f0:44:6f:3e:d2:8a:
                    30:8a:33:0e:81:e3:76:04:db:fa:cf:f6:c5:2e:e2:
                    a0:e8:e1:50:2d:09:e3:db:67:9f:86:66:f3:ce:5f:
                    77:d1:01:92:a4:98:fe:7d:c2:77:82:f7:e3:47:00:
                    6d:47:af:82:5d:bb:ba:ac:d8:79:11:cd:1a:4c:61:
                    6f:07:41:90:49:3e:67:9d:79:23:28:22:59:f4:d3:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:B7:F2:76:09:93:8D:76:B8:26:82:0B:11:5D:5B:30:AF:FE:0D
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8d:fc:4e:1a:ca:6a:41:48:60:bb:cc:7a:9f:6f:69:1b:59:
         f4:d9:53:7f:5b:64:81:78:53:3d:a4:2c:2c:02:d0:f6:10:07:
         0e:ba:e6:98:6c:bd:4a:94:ca:e6:18:08:b4:e8:56:a7:eb:05:
         86:34:19:2a:a3:8f:0c:01:ab:db:68:64:07:ce:af:c4:a0:6a:
         97:45:09:3f:b9:b6:a4:10:32:ec:a0:5f:d9:dc:93:02:b0:a2:
         a5:63:2b:c9:1d:ee:33:ed:f6:f2:83:cb:bf:63:60:4d:10:8c:
         c1:b8:26:b2:f7:d8:f4:8b:05:b1:13:6d:5e:00:16:9d:5d:eb:
         a4:0d:72:af:bb:74:39:7a:5c:fb:fe:f5:f8:42:8b:60:26:74:
         e9:36:76:4a:9a:50:26:e6:bb:99:c4:82:4e:61:f1:c5:f1:80:
         2c:af:e8:31:86:33:38:5c:30:77:1e:d8:25:2c:30:2e:cb:ec:
         9e:e4:42:e7:ca:93:af:8e:8c:8e:99:84:ab:3d:47:05:a9:38:
         66:e3:69:df:1b:ff:e6:60:32:55:be:47:54:e3:4a:29:af:d6:
         de:2e:83:0b:c7:f2:cb:cc:12:9d:e1:60:8f:35:de:c9:d7:34:
         f6:be:5c:28:c5:9c:d6:67:d6:8d:5c:58:f5:3c:8a:85:9b:1e:
         c0:90:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:24 2025 by rpki-client