This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
File:                     iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json)
Hash identifier:          1FVimj0FKY3bgfExyX7e9AiqLjbG3tJpbhzADo13ReU=
Subject key identifier:   57:0F:05:32:73:CC:B2:C7:3A:04:5B:2F:D3:8D:8E:83:1F:80:65:8E
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Certificate issuer:       /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial:       0FC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
Manifest number:          0F87
Signing time:             Sat 06 Dec 2025 17:03:06 +0000
Manifest this update:     Sat 06 Dec 2025 17:03:06 +0000
Manifest next update:     Sat 13 Dec 2025 17:03:06 +0000
Files and hashes:         1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: OUfXKdOn2UXZGO4Z9nD5v19wF9n2ePVjG9bAUEM3lfk=)
                          2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: rMgdKojSnMQn5zP9ArOeE344pCaixcohoQsewhOoy54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
                          rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4034 (0xfc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
        Validity
            Not Before: Dec  6 17:03:06 2025 GMT
            Not After : Dec 13 17:03:06 2025 GMT
        Subject: CN=693461ca-b917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:53:e6:c8:fe:e2:f3:ee:73:ff:45:25:3c:
                    99:ab:5f:64:3d:f2:eb:47:d4:71:0c:6e:33:35:ca:
                    be:a2:d7:37:7e:ba:f4:0c:25:46:26:ac:f7:aa:7d:
                    c8:a9:22:ec:ea:5e:38:03:11:dc:d8:ac:9a:29:1a:
                    b1:cd:23:31:22:d2:35:e0:11:cd:69:62:ad:65:3b:
                    86:d1:b8:9a:eb:e9:52:ba:70:17:26:c1:6b:dc:60:
                    30:a5:0f:5c:ff:e6:10:7c:80:eb:52:e2:e2:93:0a:
                    7b:30:09:29:1e:f6:0f:d9:c3:99:d5:ef:a0:68:4c:
                    28:c1:cb:37:65:35:2f:8a:b2:c9:53:03:6b:f7:9d:
                    23:db:aa:92:7c:2a:5b:99:41:77:d9:0c:0a:2a:74:
                    6f:ad:53:d2:2b:4a:b7:10:57:15:23:41:c3:7c:dd:
                    de:62:42:89:1a:ca:9d:7b:48:f6:58:71:d9:97:43:
                    fa:84:37:25:24:75:5c:76:9b:9a:9c:dd:2f:17:09:
                    14:7f:73:f1:48:1b:13:98:d9:bc:93:4a:6b:25:79:
                    2d:10:41:d9:c3:fd:f4:9f:db:3a:11:7e:43:26:26:
                    53:dc:65:e2:9e:49:ba:0f:77:53:eb:97:c2:6d:d5:
                    d3:c4:f9:a5:c2:68:dc:dc:91:f6:72:4d:9d:c3:f6:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0F:05:32:73:CC:B2:C7:3A:04:5B:2F:D3:8D:8E:83:1F:80:65:8E
            X509v3 Authority Key Identifier:
                keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:73:0a:4b:bb:e7:63:9d:e8:52:67:cc:37:10:d9:32:34:ba:
         ba:fe:18:fb:3f:39:76:b8:fc:84:7e:ab:41:36:8a:b3:24:1b:
         a9:92:5c:ff:76:16:6e:8c:b7:61:07:47:63:ac:6e:7c:39:1c:
         65:ff:74:09:fa:59:fb:5f:42:fe:c0:d8:7e:b7:b2:82:20:18:
         21:df:0a:06:8c:6f:ff:b6:dd:f9:b0:87:42:b1:36:54:fb:5b:
         d4:33:b2:4c:ab:1f:09:64:ec:bf:65:90:a7:41:49:c7:9a:c8:
         a0:9b:99:77:ba:2a:46:0e:97:9a:e4:5b:4b:08:19:8c:2c:d4:
         82:1f:48:32:24:e5:c4:cf:fa:23:b4:94:1d:00:a8:bf:ed:2d:
         96:3b:a9:fa:e1:b1:d2:66:ec:88:0c:39:ed:68:63:90:b9:1d:
         e4:88:8d:7c:14:53:98:dd:18:ac:5d:cd:67:ed:19:b6:8c:4a:
         f4:7f:e5:c5:78:d3:19:34:b6:0f:84:00:07:a5:c6:5e:ad:5f:
         49:56:59:64:d4:b0:fe:3b:ed:97:93:8d:c8:b9:74:60:4b:44:
         71:b1:f9:ae:1a:03:4e:79:c5:b4:6f:d1:f0:1a:ef:7f:f0:7a:
         36:f0:80:5f:f7:41:e2:98:21:9c:92:af:7b:37:f5:0a:6e:08:
         ae:72:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:35 2025 by rpki-client