This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          6W+ydW5B+GSXnvqqgoott40pVVel/kFEJkTBf8R2UMo=
Subject key identifier:   F1:41:A7:FD:FD:2E:5B:68:ED:99:4D:DF:B7:4D:BF:49:CF:4D:20:A1
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          76
Signing time:             Fri 05 Dec 2025 04:42:56 +0000
Manifest this update:     Fri 05 Dec 2025 04:42:56 +0000
Manifest next update:     Fri 12 Dec 2025 04:42:56 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: TNDwfVk2AmwxUWxi39e5THXyRfn2XFQpyu+uvMcfmls=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: KE/ITB6hhJ+i5ZAAKHW4Wk+MiRqF5kXhTWgdF88Y+V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Dec  5 04:42:56 2025 GMT
            Not After : Dec 12 04:42:56 2025 GMT
        Subject: CN=693262d0-af3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:55:31:af:d0:bd:36:00:91:24:26:fe:f2:
                    18:a6:79:51:88:44:42:51:cf:9d:de:1c:20:95:a7:
                    62:45:27:29:3a:ce:ac:67:f5:55:77:34:19:82:2e:
                    f3:9a:1a:f2:fd:57:35:d8:29:b4:85:a1:5f:b2:ef:
                    ac:b7:8a:03:86:6d:73:39:19:ac:28:d7:28:38:8c:
                    32:94:08:dc:1d:ee:81:a2:f8:5d:a5:26:6e:dd:2d:
                    34:36:ac:60:4d:7c:f0:8b:d4:e8:4a:bf:fd:90:7b:
                    26:34:79:6d:fc:6e:ab:f8:ba:53:60:37:37:4a:16:
                    5b:44:d3:f0:e8:84:07:6a:f7:fe:fe:aa:dc:0f:48:
                    1e:6b:a3:7a:82:d6:55:9a:d1:83:a7:ba:49:19:0a:
                    e6:0a:73:f1:fe:c9:24:0a:ae:06:cf:57:2e:bd:36:
                    b0:5c:f9:6a:e5:88:8b:e6:d4:fa:a1:fc:ca:d7:57:
                    1f:d6:96:29:94:09:c4:a8:e8:1c:21:ef:d1:bb:f1:
                    f4:23:3a:9e:2b:c3:71:07:8b:f8:1b:21:02:c6:ec:
                    07:1a:c4:22:34:25:9b:c4:9c:b6:41:55:1b:be:ba:
                    26:36:f1:09:40:33:08:43:0b:43:f8:06:05:b3:69:
                    4f:53:d5:95:1d:f9:8c:91:ee:bd:57:b8:82:7f:96:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:41:A7:FD:FD:2E:5B:68:ED:99:4D:DF:B7:4D:BF:49:CF:4D:20:A1
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:88:ce:09:56:db:bb:b0:95:6b:ba:ea:cf:9e:a7:e3:dc:
         1a:70:e0:46:72:cb:3b:91:e9:f1:07:8c:2a:18:9e:60:77:e8:
         f5:17:2a:b3:99:05:c1:55:9a:c8:39:2c:fc:2a:e2:53:06:a5:
         1e:33:18:70:87:eb:46:bd:ab:0c:e6:ad:c2:f3:63:f6:99:49:
         e4:9d:0e:24:ec:d6:32:a5:d2:f4:2f:41:11:8f:8c:3f:92:00:
         93:43:9e:56:e9:23:3b:12:bd:df:c9:e1:5c:ad:ca:d2:7b:45:
         76:97:72:60:bc:b0:63:85:14:5e:8b:be:12:43:3f:40:b3:53:
         6f:2d:37:ab:d7:da:bd:c7:f0:ad:0b:31:92:41:9f:ee:a9:47:
         40:e5:fc:5d:c4:20:a8:41:9e:ef:c1:d5:02:17:84:57:35:95:
         7a:7d:4a:6d:f5:49:46:21:e2:43:ad:b4:d1:c1:1a:5e:7f:21:
         e6:52:ea:f5:45:97:b8:05:15:3b:23:e2:c0:ad:f0:2c:76:4a:
         e7:c2:af:69:17:bf:90:8f:67:d6:60:12:ed:2c:14:77:8b:3e:
         3d:57:cf:ca:68:66:3d:c7:8e:15:af:f2:b4:fc:12:8c:6a:d7:
         aa:8a:fb:3b:f2:b6:8c:07:1c:8d:67:e3:bc:20:7c:9c:d3:ae:
         6b:f4:57:02
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NTIwMTExMC8GA1UEBRMoREVFNUI4QkM4NTBBNUI2QkNCNDZEN0UzQjRDOTdFOEI4
MzI4QTdBMDAeFw0yNTEyMDUwNDQyNTZaFw0yNTEyMTIwNDQyNTZaMBgxFjAUBgNV
BAMTDTY5MzI2MmQwLWFmM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD+1Uxr9C9NgCRJCb+8himeVGIREJRz53eHCCVp2JFJyk6zqxn9VV3NBmCLvOa
GvL9VzXYKbSFoV+y76y3igOGbXM5Gawo1yg4jDKUCNwd7oGi+F2lJm7dLTQ2rGBN
fPCL1OhKv/2QeyY0eW38bqv4ulNgNzdKFltE0/DohAdq9/7+qtwPSB5ro3qC1lWa
0YOnukkZCuYKc/H+ySQKrgbPVy69NrBc+WrliIvm1Pqh/MrXVx/WlimUCcSo6Bwh
79G78fQjOp4rw3EHi/gbIQLG7AcaxCI0JZvEnLZBVRu+uiY28QlAMwhDC0P4BgWz
aU9T1ZUd+YyR7r1XuIJ/luMjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8UGn/f0u
W2jtmU3ft02/Sc9NIKEwHwYDVR0jBBgwFoAU3uW4vIUKW2vLRtfjtMl+i4Mop6Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MjAxLzQ1QUFBMUU4MUI1
NTExRjBBMzk1QjgxM0M0RjlBRTAyLzN1VzR2SVVLVzJ2TFJ0Zmp0TWwtaTRNb3A2
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3VXNHZJVUtXMnZMUnRmanRNbC1pNE1vcDZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1
MjAxLzQ1QUFBMUU4MUI1NTExRjBBMzk1QjgxM0M0RjlBRTAyLzN1VzR2SVVLVzJ2
TFJ0Zmp0TWwtaTRNb3A2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG58iM4JVtu7sJVruurPnqfj3Bpw4EZyyzuR6fEHjCoYnmB36PUXKrOZ
BcFVmsg5LPwq4lMGpR4zGHCH60a9qwzmrcLzY/aZSeSdDiTs1jKl0vQvQRGPjD+S
AJNDnlbpIzsSvd/J4VytytJ7RXaXcmC8sGOFFF6LvhJDP0CzU28tN6vX2r3H8K0L
MZJBn+6pR0Dl/F3EIKhBnu/B1QIXhFc1lXp9Sm31SUYh4kOttNHBGl5/IeZS6vVF
l7gFFTsj4sCt8Cx2SufCr2kXv5CPZ9ZgEu0sFHeLPj1Xz8poZj3HjhWv8rT8Eoxq
16qK+zvytowHHI1n47wgfJzTrmv0VwI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:16 2025 by rpki-client