This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
File:                     63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json)
Hash identifier:          oUKV2kxvo4AgCXWjR71j68qDWvMvMjjxygTKnutnrbI=
Subject key identifier:   5A:E0:F6:51:4C:61:71:3F:BE:66:4E:85:11:9E:FF:5F:7C:48:64:77
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       362E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
Manifest number:          3562
Signing time:             Sat 06 Dec 2025 14:47:10 +0000
Manifest this update:     Sat 06 Dec 2025 14:47:10 +0000
Manifest next update:     Sat 13 Dec 2025 14:47:10 +0000
Files and hashes:         1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: QTQXBbHjjNWqiOhAc0mImSqYLuiaZPjgvKCj+P25UfQ=)
                          2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=)
                          3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=)
                          4: E28E6B84BB0011F0BF1A9179C4F9AE02.roa (hash: 1HyL0jFOp/LNOS6lX5w37Evjq7SXgh0FaKANZQK0ug0=)
                          5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=)
                          6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=)
                          7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=)
                          8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=)
                          9: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=)
                          10: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=)
                          11: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=)
                          12: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13870 (0x362e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Dec  6 14:47:10 2025 GMT
            Not After : Dec 13 14:47:10 2025 GMT
        Subject: CN=693441ee-2abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:e2:ab:ae:7c:37:e3:70:cf:bf:76:37:53:
                    62:eb:cb:dd:41:2c:39:9f:1f:d5:a1:98:91:50:a9:
                    0a:c4:8e:29:22:90:6f:57:c3:6a:e2:cb:01:7b:c6:
                    6e:4a:18:ec:05:24:fc:62:16:a4:c0:6e:24:f4:81:
                    63:75:e1:6a:de:1c:1b:23:6a:a1:6c:84:57:f9:ee:
                    60:9b:92:5f:a1:a9:9f:e7:7b:82:ad:88:80:72:63:
                    5f:3e:ec:dc:ac:85:b1:6d:9b:8e:24:a4:d0:78:56:
                    8b:dc:97:e2:9d:c5:aa:26:fa:2e:91:5f:1e:d5:a8:
                    2e:93:60:95:00:b7:ef:70:85:de:aa:ae:bf:8b:7a:
                    d6:c7:37:3c:40:e0:82:d6:15:e8:af:46:a7:c7:52:
                    c5:ee:9e:49:0e:2d:e2:0f:cd:70:1e:78:aa:40:22:
                    23:b1:57:5a:19:3c:1e:c4:89:85:72:c3:d9:c2:b3:
                    a2:92:a3:a1:b4:66:ea:89:e8:10:05:76:36:6b:74:
                    07:35:a4:fd:89:be:5d:62:53:c6:be:0d:50:72:01:
                    ae:6e:93:00:0d:a8:4c:4b:06:63:11:67:49:fc:79:
                    a7:7a:a0:dd:b0:a3:4b:94:bb:49:c8:95:99:d3:4b:
                    8b:d2:a1:cd:24:29:f7:2f:f2:09:ae:6e:7e:b0:95:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:F6:51:4C:61:71:3F:BE:66:4E:85:11:9E:FF:5F:7C:48:64:77
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:f3:11:0b:46:67:34:32:d0:ee:84:3a:8c:b7:f9:f6:39:
         e9:b3:19:3f:f0:cd:e9:6b:2b:12:3b:de:ad:da:f7:e8:e1:79:
         90:4f:0a:eb:a0:71:d8:25:1c:bb:6b:60:96:d6:3e:3b:e3:17:
         53:98:36:3f:66:5e:89:7d:61:93:c3:8b:24:c5:fc:f0:0e:dc:
         5c:c7:84:dd:57:3d:b5:d5:29:0c:12:02:b6:2b:d7:af:6a:b6:
         4f:97:24:6b:47:10:45:17:8e:f4:0c:cb:8c:9c:30:c1:23:16:
         3b:86:2f:79:d7:a6:3a:0f:74:b2:61:0b:a4:99:b2:26:2d:71:
         cb:0c:50:c0:e9:84:a1:e6:ad:8e:c9:90:05:d1:60:31:27:7b:
         fa:8c:da:4d:e3:73:2a:34:2f:9e:e9:e0:cd:b3:40:e8:06:62:
         24:b8:4a:25:00:e4:c8:10:bd:d7:68:1e:bb:b8:80:01:f6:a2:
         70:0e:f2:a2:87:73:52:da:25:3b:a3:58:22:d7:db:5c:fe:95:
         1d:39:88:e7:87:7f:e8:dd:ba:f8:95:b5:ae:34:68:b8:bf:56:
         a4:89:26:eb:0e:12:be:e4:cc:44:de:57:40:93:2a:03:a0:85:
         ad:3d:54:de:56:a1:76:ac:ea:99:5e:82:69:6e:81:23:b8:95:
         0b:20:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:41 2025 by rpki-client