This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
File:                     asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json)
Hash identifier:          DyHtKkZTQuTzgs84oYgX4SNNSilXHXmgXdldgrjLJ/o=
Subject key identifier:   D5:36:BD:D8:DB:9F:1D:74:C6:AE:E8:03:5B:C9:B4:11:15:46:0B:E3
Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Certificate issuer:       /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
Manifest number:          41
Signing time:             Fri 05 Dec 2025 05:17:00 +0000
Manifest this update:     Fri 05 Dec 2025 05:17:00 +0000
Manifest next update:     Fri 12 Dec 2025 05:17:00 +0000
Files and hashes:         1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: 5XwC7E35FbCuDEK5j2XSev2nISapgK4yR30lCqJsQso=)
                          2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
        Validity
            Not Before: Dec  5 05:17:00 2025 GMT
            Not After : Dec 12 05:17:00 2025 GMT
        Subject: CN=69326acc-d62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:f9:7e:d5:93:e2:25:91:1b:2f:d7:fe:08:
                    e8:c8:69:1f:ec:ce:ea:8e:2a:05:8b:90:96:51:23:
                    f4:6a:f3:78:00:32:a4:92:e1:f2:a6:eb:71:b3:00:
                    5e:ad:62:f9:e6:4f:93:ad:22:ce:97:a0:96:d4:7e:
                    f8:b0:fd:13:7f:6d:2d:50:41:42:4b:b1:c9:23:c1:
                    43:c1:b6:08:20:46:54:66:e5:a7:cd:88:91:ac:ae:
                    c6:21:10:fa:54:d3:2f:86:1d:65:36:59:fb:cc:3d:
                    f1:80:43:ab:f8:0b:0f:51:4b:3b:f2:62:a0:29:87:
                    5f:fe:b5:a3:35:88:7a:c9:f9:93:fe:c2:84:d8:b8:
                    5e:a1:7f:19:86:24:18:98:40:0a:79:dd:af:0a:0b:
                    7f:3d:9a:ba:61:be:c0:5b:9b:16:69:ff:10:a3:50:
                    9d:cd:ac:0f:1b:0a:6e:59:b7:4a:6b:5e:f6:28:92:
                    ac:40:f7:1c:da:bb:e7:63:c7:95:39:a9:33:4e:c4:
                    ce:67:a9:75:2e:6b:68:61:fb:c5:c9:85:76:e8:19:
                    63:88:da:22:97:27:86:88:57:5f:0d:f0:d4:b6:e5:
                    6e:5c:74:f0:b8:cf:ee:90:16:3b:87:7a:5a:84:d5:
                    fb:93:c8:29:b9:8e:b3:ed:54:f7:c8:84:63:30:9e:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:36:BD:D8:DB:9F:1D:74:C6:AE:E8:03:5B:C9:B4:11:15:46:0B:E3
            X509v3 Authority Key Identifier:
                keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:d8:ea:f5:68:9f:e0:46:4e:96:7f:2d:dd:fd:f4:ee:57:
         a8:f6:0d:2d:81:f7:20:00:bf:10:96:63:e8:75:6e:fd:53:f5:
         7d:40:a0:96:10:f4:00:5a:dd:d8:85:8d:8e:c1:ca:b5:9a:e9:
         25:e7:53:6b:21:ec:eb:c5:91:53:e6:49:3f:c4:f9:39:c3:f5:
         37:12:7d:ac:98:bc:90:e1:d0:23:65:2a:1e:c4:43:54:ef:c2:
         45:09:fe:5d:a5:d1:c5:fd:ea:38:78:3b:be:7c:27:23:01:eb:
         ca:18:0a:f0:cd:0d:a5:17:12:2a:9f:53:66:34:55:76:39:42:
         ca:7f:f5:fd:f9:68:de:3b:75:f7:d1:29:91:f6:cb:8f:fb:d4:
         42:8c:36:f8:c3:c1:28:33:1f:90:71:df:d7:72:e6:e6:e5:40:
         cf:9c:1d:84:8f:be:73:85:00:29:d6:92:c4:2f:24:fb:41:78:
         09:86:31:51:7c:41:d0:52:41:d0:d6:6f:3a:2f:66:bd:c2:b4:
         73:82:24:1f:c4:0a:4c:f4:48:4d:e8:26:48:91:5d:d3:9e:59:
         3e:40:43:8c:c6:9a:70:15:01:c2:3f:43:90:2c:44:6f:5b:7a:
         24:f7:8d:db:73:0b:2e:33:e3:0a:f8:b1:b2:81:b0:58:c1:25:
         bb:cd:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:24 2025 by rpki-client