This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File:                     b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier:          OxXBH6SLdXeH5PjBLgLNKBuRCcR2QMzhZZxrIOSGop0=
Subject key identifier:   DF:AD:78:46:E8:75:1F:38:9D:7D:B6:09:19:8A:A7:77:D4:27:71:48
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer:       /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number:          65
Signing time:             Fri 05 Dec 2025 04:53:47 +0000
Manifest this update:     Fri 05 Dec 2025 04:53:46 +0000
Manifest next update:     Fri 12 Dec 2025 04:53:46 +0000
Files and hashes:         1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: 9UEfS3UxfL1E+Ex/Cs0qLluBmEOoMIzoNxziNjHAvkU=)
                          2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=)
                          3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
                          rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
        Validity
            Not Before: Dec  5 04:53:46 2025 GMT
            Not After : Dec 12 04:53:46 2025 GMT
        Subject: CN=6932655a-e7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:5b:84:af:6a:a5:99:55:e4:ac:cf:37:a4:
                    28:41:eb:1b:7d:30:3d:c3:39:dd:20:dc:92:bc:c0:
                    28:01:33:5c:b8:8a:04:28:93:70:bf:e0:4b:e0:f2:
                    b3:43:76:5c:a5:0a:8b:e0:d5:c0:d0:af:c5:bc:71:
                    bc:79:e4:d0:d7:03:9d:af:e2:24:6d:15:43:53:12:
                    cf:1c:ea:f1:74:67:60:24:c9:8d:37:97:a9:35:18:
                    b5:98:5a:d3:15:06:a4:0d:f3:d8:b5:e0:f8:b7:db:
                    c5:d7:47:d0:e5:51:00:95:15:23:a2:aa:98:05:76:
                    f3:d9:f4:a9:6f:5f:64:64:e1:6b:20:26:85:36:2e:
                    7a:83:09:32:c8:2b:80:e6:af:37:0c:8e:6a:00:29:
                    f1:26:f2:09:9b:8c:4b:10:43:c0:8c:82:3c:77:b5:
                    8c:29:d2:95:a6:f2:4a:05:0e:66:aa:19:e6:0e:79:
                    f8:f7:fc:d7:9c:51:de:7a:cd:98:25:31:10:51:e9:
                    91:f8:38:5a:40:42:48:fe:00:af:06:c3:1f:ec:a6:
                    80:84:1c:33:12:b6:9a:8c:79:6b:4b:66:65:85:31:
                    f7:d7:e9:fe:ce:48:b7:0f:cc:4e:fd:9d:55:67:c9:
                    a7:4d:cc:c8:33:36:a2:f3:67:7b:11:7b:ed:e4:f7:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AD:78:46:E8:75:1F:38:9D:7D:B6:09:19:8A:A7:77:D4:27:71:48
            X509v3 Authority Key Identifier:
                keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:16:37:ec:8b:db:46:b1:d0:c2:7e:a0:96:2f:4f:eb:f5:74:
         46:e7:38:83:79:0e:4a:07:17:0b:40:b2:21:64:62:99:06:e4:
         92:2a:db:aa:48:ca:96:25:5a:9e:80:d0:e0:ea:54:38:7d:c9:
         24:18:e7:6f:ac:e2:03:00:70:52:ba:10:65:11:4d:a1:15:04:
         40:b5:9f:0e:fb:64:ac:19:21:30:d3:67:6d:cd:99:e0:55:9e:
         39:05:12:d5:51:f0:22:ef:8a:17:65:0b:f8:0a:21:ba:98:81:
         62:19:32:0a:74:df:a7:16:cb:d3:3c:d3:37:9b:60:2d:bd:ad:
         57:0a:f3:14:28:fe:ed:12:6d:9d:ca:70:91:c2:1f:2f:af:5e:
         69:56:ff:06:c4:48:fe:e8:4d:33:f5:22:5c:ad:62:78:e5:d2:
         ec:f9:c4:28:1e:09:ff:ba:11:7d:0a:9e:f6:91:6f:36:6a:54:
         f8:0a:8f:8b:11:f1:e5:f8:8a:fd:d3:1b:a4:42:8c:8f:2c:51:
         75:d7:4b:83:c8:7e:7b:fe:75:84:bc:bd:d7:57:f1:8f:12:10:
         ea:16:81:52:10:ea:cd:c4:94:9c:bb:42:10:53:c8:16:94:20:
         1d:81:c9:90:e0:16:bd:91:1e:0c:78:9a:94:db:85:d8:ed:69:
         a4:31:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:52:18 2025 by rpki-client