This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
File:                     AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json)
Hash identifier:          v7kMCuu94JP7tKlOcGVWRYS76KHwJJOARaPIBrTPWS0=
Subject key identifier:   D7:EB:75:7A:E5:6E:E3:7D:65:A5:3A:43:B7:E5:EC:41:D8:0C:45:F7
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Certificate issuer:       /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
Manifest number:          0352
Signing time:             Thu 04 Dec 2025 23:22:27 +0000
Manifest this update:     Thu 04 Dec 2025 23:22:26 +0000
Manifest next update:     Thu 11 Dec 2025 23:22:26 +0000
Files and hashes:         1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: jmTRnZae2XQ5drNqnUDgA1f9BItTeScZD/v/4GEUsPY=)
                          2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: yybFsJYo0u1DXgO0+Ag0eONj7o/2vIeK/qEAg2e5UXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
                          rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
        Validity
            Not Before: Dec  4 23:22:26 2025 GMT
            Not After : Dec 11 23:22:26 2025 GMT
        Subject: CN=693217b2-2a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:ca:0d:07:2c:1e:05:dd:06:af:5d:9c:a8:
                    f9:d4:92:c2:6f:18:7c:10:52:1a:3c:99:66:9b:62:
                    b7:52:c3:b5:48:a0:01:2e:57:c4:a8:f6:35:f4:1c:
                    c3:4f:b8:80:99:12:96:e2:f4:fb:df:f1:d1:41:3f:
                    31:55:16:4a:77:be:41:80:a7:1a:38:b1:0d:17:fc:
                    50:5c:80:58:79:7e:00:51:87:53:d9:1d:0b:2d:59:
                    f1:5a:68:31:53:78:47:bf:99:7a:bd:4b:8b:cb:cc:
                    7d:bd:1c:8f:53:8c:d3:ad:e7:4f:0c:5b:55:c9:3e:
                    d8:cd:ca:93:f0:ff:b0:d7:03:c7:4b:a2:4d:ed:4a:
                    70:76:7f:f9:24:de:34:e7:39:de:9b:65:10:06:c3:
                    db:a6:24:7e:6e:8b:c6:1a:1a:fa:65:8c:b9:30:24:
                    7d:4a:cb:30:bb:b3:82:f4:72:44:52:8c:a1:e5:d1:
                    8d:44:bf:49:2c:b1:9c:4b:fa:a8:a0:84:ad:fa:47:
                    58:e4:27:ea:88:bb:4e:40:e0:6e:63:99:6b:3a:11:
                    0a:e0:14:ec:58:67:03:38:73:2a:bf:ec:8d:71:69:
                    a3:07:e9:03:4d:33:28:19:43:70:28:59:36:50:57:
                    f3:49:92:6e:e7:70:23:9d:99:33:24:78:4f:69:0d:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:75:7A:E5:6E:E3:7D:65:A5:3A:43:B7:E5:EC:41:D8:0C:45:F7
            X509v3 Authority Key Identifier:
                keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0f:88:2c:10:31:cb:a8:98:9b:b2:d8:b9:69:e2:31:de:6a:
         a4:e9:9c:76:2f:dd:7f:f8:c7:d1:56:43:e6:d2:82:34:60:78:
         47:f3:f8:02:37:55:2f:30:ca:4c:c2:f7:10:fd:04:45:f3:9e:
         0c:b5:9a:bb:bb:17:5b:30:05:03:0f:c2:34:b4:10:de:ff:57:
         5e:d6:27:a3:6b:4c:0d:40:35:96:bb:d9:1b:b2:ce:49:a7:f9:
         e8:be:bd:97:76:a9:fc:06:eb:2d:27:52:7f:b1:70:04:c4:4c:
         68:a6:e5:17:c4:70:b2:67:4e:02:26:3f:7d:9b:48:7f:d8:be:
         07:1f:8e:f8:32:04:5e:e6:04:e1:bb:c2:55:ca:c2:ce:0e:f2:
         46:e2:ff:ea:cf:c5:4a:a1:6f:62:59:b0:fd:54:d9:8b:5f:cc:
         b4:de:e9:3a:35:9a:45:c6:64:27:07:a1:f9:ae:3a:09:f2:5a:
         43:39:77:75:65:70:d0:96:73:5b:78:a7:d4:0d:0f:af:43:89:
         07:85:24:3a:c0:9d:4a:ed:80:45:85:a2:f8:54:a9:b9:4d:ba:
         68:2d:a9:ea:b5:2f:4b:99:40:3d:df:f5:eb:6c:18:15:3a:85:
         f3:88:15:93:28:32:0f:3b:61:83:53:cd:9e:73:7d:5c:8b:eb:
         6d:21:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:18 2025 by rpki-client