This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
File:                     91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json)
Hash identifier:          3Wst/rF1MQgmd6yd2bcM0+xslPltAT1X6oz4d0dhGwQ=
Subject key identifier:   FC:D9:AF:46:2A:AA:6E:5C:96:16:E9:E2:0C:8C:65:C5:4A:6D:9B:2B
Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33
Certificate issuer:       /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
Manifest number:          01FC
Signing time:             Sun 07 Dec 2025 00:58:16 +0000
Manifest this update:     Sun 07 Dec 2025 00:58:15 +0000
Manifest next update:     Sun 14 Dec 2025 00:58:15 +0000
Files and hashes:         1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: yQXgx+MrOKT58xeXh9S1wFtMrVamXx/PajTO0/O1JfU=)
                          2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl
                          rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
        Validity
            Not Before: Dec  7 00:58:15 2025 GMT
            Not After : Dec 14 00:58:15 2025 GMT
        Subject: CN=6934d128-8b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:94:8c:9a:eb:a1:49:25:eb:95:ed:5f:a9:
                    8e:8f:34:b8:76:d8:9b:13:4d:86:21:93:12:44:16:
                    84:be:56:2d:a9:4b:be:07:bc:ca:ca:83:22:8b:64:
                    db:1c:3c:eb:fa:67:56:6b:d1:46:4b:f7:77:45:b2:
                    58:88:8b:40:1a:5d:4d:72:6b:ea:5e:eb:76:59:54:
                    e9:4f:4a:33:c7:95:ec:d2:2f:25:a4:47:73:27:f9:
                    2b:e5:32:d7:7b:39:6c:65:f5:97:6c:48:dc:8a:80:
                    6c:e7:e1:98:31:ff:46:00:27:4c:18:f7:3b:1c:44:
                    2d:71:70:a4:81:d3:4e:a8:c1:4f:db:87:16:80:4f:
                    5e:98:c2:ae:bb:4a:dd:b9:e9:da:f4:df:30:fe:cc:
                    e9:94:b6:21:f5:e6:9d:1f:29:4a:64:63:8a:42:3b:
                    c9:99:d5:d9:3c:d7:54:3e:a8:33:9b:d0:d2:bc:57:
                    e9:c2:64:02:d9:59:0a:02:82:1a:54:10:cd:9e:b4:
                    ab:0d:7d:67:a8:59:8b:99:64:42:b0:31:9e:7b:44:
                    e2:9e:4a:c7:79:bd:ee:09:38:91:54:59:c0:84:86:
                    88:0e:7a:d7:e1:bc:2d:a6:3c:bb:d6:a5:7f:ad:aa:
                    0a:3e:47:d7:8c:b5:5c:5c:50:ef:18:57:52:68:2f:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:AF:46:2A:AA:6E:5C:96:16:E9:E2:0C:8C:65:C5:4A:6D:9B:2B
            X509v3 Authority Key Identifier:
                keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:b1:f2:a8:4b:13:45:9c:2e:d2:14:7f:52:0c:de:d5:bd:
         a9:5a:0b:cb:05:9f:30:ba:73:b8:04:cc:8b:d1:6f:a4:8d:a7:
         42:70:f7:2f:74:15:9a:7f:cf:bf:46:ec:f3:a7:af:a0:4f:c4:
         67:96:0a:ad:6a:fc:d1:e3:18:bc:5c:8e:49:e5:52:08:9d:99:
         59:23:21:0c:88:5d:6a:eb:7c:8c:3b:97:9d:67:ba:a5:be:8f:
         80:f4:fb:90:c7:56:9e:f2:87:9a:19:5f:88:94:a1:bb:fd:07:
         4e:18:99:05:ca:eb:d5:4c:54:1f:71:e2:18:8a:14:3e:d7:77:
         e3:58:20:38:ce:c6:28:9c:77:89:87:d3:43:b6:57:6b:8c:52:
         36:8b:0e:8e:ca:9c:75:b6:27:f0:dd:3d:ad:fd:64:b3:82:be:
         a9:e0:68:61:a1:3f:8a:a4:e0:af:45:11:ff:f4:d2:e8:58:79:
         df:93:f9:19:3c:57:4e:8e:87:08:4d:ad:65:ee:7f:b6:67:b1:
         ea:b6:9d:81:5a:59:db:57:90:f7:dc:32:64:49:7e:e1:ba:ff:
         ab:e4:c7:ca:07:94:c4:45:39:e4:de:ca:b0:83:ee:a5:30:24:
         de:1f:85:32:80:63:12:46:35:44:5c:51:e8:fb:e2:bb:d5:e3:
         88:ca:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:02 2025 by rpki-client