This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          xfYi6uDqcxA8UQBGcPY8MvznbdnKeZk0oTng1yfhOk4=
Subject key identifier:   A3:D1:18:B8:A8:6A:7D:B7:AB:9B:2B:B6:61:9E:C1:93:3B:75:B5:A0
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0C5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0C46
Signing time:             Sat 06 Dec 2025 18:00:25 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:25 +0000
Manifest next update:     Sat 13 Dec 2025 18:00:25 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: vzKqVISv7RqXkSB5uzY8MgVc2P3qncZTlOEaXuCr9uw=)
                          2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: srW/OZ+gufuOrgwsN3TtzuEuYmynFy3l8AmOXmBxqp4=)
                          3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: 5vimEGr3gRZLpfm5tFt/h59hECKoXGndHIqB7DGboHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3163 (0xc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Dec  6 18:00:25 2025 GMT
            Not After : Dec 13 18:00:25 2025 GMT
        Subject: CN=69346f39-28d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:b5:75:75:3c:eb:43:70:1e:a0:26:db:52:
                    e8:1e:87:fc:2f:59:0d:4a:65:7b:89:59:50:36:4d:
                    33:9b:7e:a1:a0:18:d9:8a:06:1e:2c:bb:6e:ae:74:
                    53:5c:c0:41:51:6c:f0:ae:df:36:21:46:39:57:fa:
                    d7:70:cb:74:be:01:82:a7:ba:6e:4f:5f:f2:f9:e6:
                    d8:a0:84:34:8b:34:be:eb:14:06:c5:05:dd:74:2c:
                    b6:02:c6:4a:44:34:a7:10:cb:1c:66:50:85:2f:47:
                    9b:3c:28:ae:4d:92:74:11:13:6b:cc:a0:88:a0:d6:
                    c9:cf:b5:21:02:ee:99:c6:81:be:de:34:31:df:57:
                    0b:1e:37:1d:fe:18:73:21:4c:3c:4c:5c:7a:ef:a9:
                    7f:d2:68:f4:77:c7:44:0e:b3:b0:1a:4d:10:dc:2a:
                    11:0a:f6:50:13:f5:64:81:23:32:42:33:e7:79:c7:
                    eb:af:23:1e:85:fe:38:e5:37:57:ef:50:7c:15:40:
                    c5:3f:08:77:dd:95:c2:69:26:59:18:b0:2f:f2:c2:
                    17:9b:d7:63:b6:97:51:e6:dc:a9:b2:8d:1f:32:ed:
                    46:05:e8:24:e5:90:98:c6:f1:61:ad:3b:4b:d4:10:
                    16:a0:db:d8:fb:2b:b3:cb:a2:b3:58:1e:cb:13:2d:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:18:B8:A8:6A:7D:B7:AB:9B:2B:B6:61:9E:C1:93:3B:75:B5:A0
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:89:ca:85:5f:52:cb:64:27:21:d6:92:1c:bf:b8:18:b0:
         92:23:0f:5f:3c:3d:5d:52:3a:4b:95:00:bb:ed:89:1c:6b:da:
         64:ef:f6:d6:18:cc:53:63:8a:6f:ea:73:07:c1:cf:70:e2:c8:
         1e:16:77:d2:76:3d:98:15:d0:f4:3f:6e:6d:1f:a7:36:5c:f1:
         f1:98:4b:53:99:7a:0d:c9:b7:96:a2:a1:97:6a:5e:59:79:b6:
         73:6a:4a:22:0e:77:bf:ff:53:6f:55:71:df:3f:25:fe:21:42:
         ca:76:8f:3c:3b:e4:e7:db:08:48:db:d7:6c:bc:60:db:94:ff:
         53:e6:c2:11:ab:ad:73:11:c7:0c:f8:b1:60:09:2f:67:68:b8:
         f0:04:a8:52:29:38:5d:06:d9:73:73:32:78:4f:e6:c0:8c:72:
         a5:ac:31:c9:2b:dd:ac:a9:ec:04:9b:d9:e4:e6:11:16:55:0e:
         33:93:09:6f:ec:64:46:61:c0:8e:3f:15:df:47:91:e4:d3:e3:
         16:2e:6d:62:af:83:52:4a:a7:fc:24:77:39:aa:47:64:f9:9f:
         52:30:44:43:90:60:26:51:42:75:b1:52:34:bb:bd:b9:7c:ce:
         a7:86:cb:21:03:00:37:69:8c:ae:24:71:f2:30:dc:3d:70:d1:
         35:9e:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:14 2025 by rpki-client