This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
File:                     aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json)
Hash identifier:          WvarBuzzXHIji1KoeGdN80HNfvK8QsWGmJrD4iqjAko=
Subject key identifier:   7A:B4:18:75:EE:CF:5E:2A:7D:72:F6:29:D8:65:14:B4:D1:64:59:A5
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Certificate issuer:       /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial:       04C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
Manifest number:          04A2
Signing time:             Sat 06 Dec 2025 22:45:42 +0000
Manifest this update:     Sat 06 Dec 2025 22:45:41 +0000
Manifest next update:     Sat 13 Dec 2025 22:45:41 +0000
Files and hashes:         1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: jDkoZPmbqZ88xTLk9DNX8e0rkKTkt9Fd4he6vd7Dd6E=)
                          2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: QEkMEVTQBayFx2m7EivW7eRMOejHOK5Ic4vwhvxB81A=)
                          3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: +odywDquwxeF6SYI69k239OrBCZD98jk7qEP7myd7ZI=)
                          4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: Lee2Usqd9hsodQDlh02wVnCx8PbKZpN8M7lZu7WoioY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
        Validity
            Not Before: Dec  6 22:45:41 2025 GMT
            Not After : Dec 13 22:45:41 2025 GMT
        Subject: CN=6934b216-2983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:83:ef:94:4c:62:2c:67:6a:b5:62:f1:2e:
                    c8:13:f6:97:a6:92:cf:7a:41:9f:5b:28:c8:ff:07:
                    da:e0:31:bc:ca:54:4f:98:4f:20:59:94:38:31:46:
                    e2:8a:7f:55:10:d5:16:96:34:bd:43:e7:67:02:ee:
                    a2:1f:02:dd:80:f9:15:d0:e5:8d:30:75:17:ee:79:
                    ea:85:40:18:46:2c:7b:a4:17:7e:0a:03:74:fb:5c:
                    d9:28:26:02:71:83:95:e6:b4:1e:c5:4c:f0:07:5f:
                    cb:15:b4:59:8c:ac:9a:fd:c0:45:74:d6:a1:8a:94:
                    c7:16:fb:4f:ed:40:9c:d5:1c:79:3e:a1:34:8f:26:
                    7a:0e:ca:0d:9a:df:e8:ef:50:e1:61:61:ba:75:91:
                    62:1c:0a:9e:0d:c9:4c:cb:a0:50:df:e5:8c:06:3b:
                    d3:2a:ff:3d:7e:da:b7:91:10:a0:10:dc:35:62:99:
                    15:87:cf:f2:6f:60:76:4a:9a:50:30:49:18:21:a6:
                    82:95:62:43:eb:7d:14:73:d7:1d:c9:ef:f2:ea:88:
                    39:22:69:5b:6c:5c:4a:6a:1c:17:92:86:26:0b:92:
                    a9:9e:05:4c:a6:d8:73:3e:0d:e8:e4:b6:6c:c0:1a:
                    86:94:ac:8b:89:58:93:0d:e8:a2:80:90:ed:c1:ed:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:18:75:EE:CF:5E:2A:7D:72:F6:29:D8:65:14:B4:D1:64:59:A5
            X509v3 Authority Key Identifier:
                keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:f2:83:6d:a5:d8:f8:f5:52:71:68:b9:fe:7d:8f:68:70:
         90:c4:c5:ca:0f:f4:1d:c9:86:16:f0:4c:a1:4b:5c:90:5c:eb:
         2e:26:ff:91:73:2e:bb:8f:3c:f5:00:bc:cf:bf:f8:a2:d4:aa:
         9d:46:45:87:a1:8c:de:d2:9b:b7:84:a7:64:79:6d:80:b9:21:
         22:f6:58:6e:85:ef:72:b6:87:b6:19:96:13:9d:ff:a5:37:6e:
         57:c1:8e:aa:a3:48:74:88:e5:0d:09:17:2d:66:8e:db:28:98:
         d9:23:14:61:9c:e3:11:4c:47:1f:53:70:82:c3:f4:ec:a0:d2:
         05:98:cc:05:7f:2e:14:f0:93:75:cb:80:1a:b1:39:23:fb:73:
         69:4a:a5:f3:3b:c3:95:a6:25:54:4c:dc:1e:38:57:54:d0:48:
         1e:94:8a:3e:8a:0b:6d:d1:78:e0:53:5b:ae:9c:03:66:76:b9:
         97:77:28:4b:81:df:98:cf:a1:53:a7:6b:72:43:d6:2c:7f:62:
         ce:d5:dd:64:6a:bd:8b:c1:58:ae:38:5a:05:b3:39:86:b0:4d:
         92:29:c7:2a:7a:d8:7a:6d:48:86:05:05:ff:10:3f:0a:96:37:
         2d:54:09:2e:88:e1:4b:a9:9c:93:05:c8:95:ba:05:dd:be:c9:
         22:a7:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:14:39 2025 by rpki-client