This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
File:                     -c2wYYjVT9E3MDC5IMjkRdstPVc.mft (raw, json)
Hash identifier:          csG4sF/D3PUjywxNaYIFZDZQc/J9EjRmf63fAr+mVDg=
Subject key identifier:   F7:DD:6E:3E:F4:BE:91:20:72:FE:F9:A4:B6:40:58:79:54:82:3E:07
Authority key identifier: F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
Certificate issuer:       /CN=A91A99F8/serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
Manifest number:          8E
Signing time:             Fri 05 Dec 2025 04:34:59 +0000
Manifest this update:     Fri 05 Dec 2025 04:34:58 +0000
Manifest next update:     Fri 12 Dec 2025 04:34:58 +0000
Files and hashes:         1: -c2wYYjVT9E3MDC5IMjkRdstPVc.crl (hash: xyQb20/tlBchCjL2mNKsRbcRZVM5Gt0Ilq21i463Xyc=)
                          2: C4D0CEECACF611F0AC34117FC4F9AE02.roa (hash: 7ucYBUaCLmqgDRuv79Vd3l7kVK2Q22cJEETdC+Ms3yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99F8, serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
        Validity
            Not Before: Dec  5 04:34:58 2025 GMT
            Not After : Dec 12 04:34:58 2025 GMT
        Subject: CN=693260f2-6418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:05:61:b2:19:c0:e3:ac:a1:85:d8:cc:2a:
                    e9:a5:f2:08:1d:81:f2:b4:1d:07:f9:9c:4f:1d:bd:
                    77:25:91:f0:53:b7:12:b2:54:fb:c9:c5:9f:42:f2:
                    64:52:cb:73:5d:10:70:e5:cf:6a:83:a9:fa:c1:59:
                    7c:69:df:90:56:60:87:61:0a:f9:c9:bd:27:a4:b3:
                    15:e2:f4:49:4f:b3:b1:69:24:a7:48:1d:35:94:24:
                    b2:a0:15:d7:d0:54:4a:02:6e:90:a4:5c:13:f2:86:
                    74:5d:19:3b:5a:15:f2:67:6e:70:f6:b4:02:4c:a1:
                    b7:e4:a1:69:e7:b6:0a:b5:e0:2b:f7:ec:e5:b4:8d:
                    c7:41:51:04:9d:f7:58:3d:a2:2a:4c:04:62:02:3d:
                    a7:b5:ea:73:7e:f5:35:45:8b:ad:a8:2e:31:24:77:
                    e3:8b:ee:cc:01:e8:a0:95:47:70:07:3a:53:4f:55:
                    dd:d0:71:dc:32:ce:30:e7:c9:84:83:e1:19:db:b8:
                    8f:14:39:db:b3:c1:f8:c3:92:bb:af:08:86:6d:7d:
                    54:c9:98:56:b7:b7:fd:8f:75:71:19:d1:a0:20:bf:
                    1c:33:1a:c1:78:7b:41:b3:42:d9:26:b8:2d:f3:d7:
                    6a:cd:fd:d1:28:44:10:ec:a6:09:6e:f9:68:58:d1:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DD:6E:3E:F4:BE:91:20:72:FE:F9:A4:B6:40:58:79:54:82:3E:07
            X509v3 Authority Key Identifier:
                keyid:F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:20:a2:ae:23:a2:a9:5a:43:89:56:0f:f9:8a:bf:8f:38:
         08:67:56:c5:1b:56:0d:35:31:de:00:b7:de:a6:8a:35:c9:37:
         98:84:c6:b9:11:b0:af:0c:6a:03:4b:2a:0f:82:a0:27:84:82:
         c6:d4:ee:34:92:05:6d:06:ce:6f:26:9e:b2:bf:04:1a:fc:2c:
         87:40:c9:69:82:2f:47:55:31:d8:ed:de:fb:da:12:33:03:63:
         cf:b1:ff:3e:9d:cf:a2:7d:74:05:16:fa:01:2c:18:b9:5b:32:
         b5:69:c3:86:b6:bc:fc:40:c7:0a:6f:8b:6e:36:b1:57:13:2f:
         72:24:60:7b:32:99:ac:b0:61:d3:77:ce:65:72:21:78:4c:cb:
         4a:a2:41:a6:2b:1e:2a:2e:3d:2f:a4:aa:87:28:f7:81:bd:81:
         0d:a8:00:52:80:e2:56:81:5d:e1:a6:e9:ff:dd:55:72:6d:a1:
         b5:1a:41:45:a9:57:dc:3b:44:96:03:cb:ed:da:24:31:29:de:
         4a:1f:c0:27:29:1b:9e:4c:93:d9:9d:c1:a0:e5:4f:c5:6e:25:
         f5:b6:18:55:be:fb:75:d5:e4:8f:f5:ae:4f:c4:58:00:68:40:
         e0:cd:60:98:d3:93:f8:e9:a7:33:c5:16:c9:03:0d:0d:9b:62:
         14:ad:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:48 2025 by rpki-client