This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
File:                     O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json)
Hash identifier:          Jmhnd3qMm/QAu5/GrPuU4XKCDa7szSo8/6k1V481+oI=
Subject key identifier:   EC:2B:01:D6:0B:B9:B2:60:56:4F:64:C9:72:84:87:C1:23:AA:1E:C5
Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
Certificate issuer:       /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
Manifest number:          0150
Signing time:             Fri 05 Dec 2025 00:41:20 +0000
Manifest this update:     Fri 05 Dec 2025 00:41:19 +0000
Manifest next update:     Fri 12 Dec 2025 00:41:19 +0000
Files and hashes:         1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: zc4gpKUaMIrBFDhcyqzhTvaO6V+Bs8DDBLXsq+TAoRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
        Validity
            Not Before: Dec  5 00:41:19 2025 GMT
            Not After : Dec 12 00:41:19 2025 GMT
        Subject: CN=69322a2f-6abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:54:d1:ca:a0:a0:7a:52:26:66:6d:9d:da:
                    14:17:b1:ba:26:4e:05:13:d5:4d:00:79:36:96:cd:
                    4b:7f:76:c7:29:e4:e3:4a:d8:bf:0c:40:c5:f1:83:
                    54:04:ea:c9:cb:a2:00:7a:99:91:7a:da:35:74:55:
                    38:f8:bc:51:88:6f:4a:ee:5a:4a:8f:b9:1c:9f:25:
                    67:8b:86:8e:8b:8b:e6:d8:b1:38:3d:9f:55:fc:15:
                    8b:0a:55:2f:7d:25:f8:64:53:02:2d:5a:85:15:04:
                    21:14:f6:ca:cd:1e:a2:0e:27:e3:09:cd:63:1c:76:
                    77:42:d9:56:f3:25:87:f1:02:9b:d9:14:4c:13:ef:
                    50:a1:76:0b:3e:b3:b8:27:71:3a:1a:c0:df:09:a8:
                    28:c8:60:1f:29:c6:28:50:a4:0f:b7:37:0a:6b:82:
                    48:9d:f3:da:f8:24:b5:eb:07:05:e5:5c:3a:a6:7c:
                    67:aa:33:e5:ab:3c:3b:c6:14:98:c1:47:86:1f:f0:
                    03:88:e1:9a:1e:68:aa:3d:90:2c:a4:df:3a:7d:97:
                    7c:f5:7b:45:97:3f:c8:75:05:bd:08:d4:10:46:87:
                    9f:69:c8:58:ee:0c:77:7c:ef:cc:ec:3a:a0:16:b2:
                    0a:49:2f:be:3e:ae:e3:b4:f8:dd:f8:2b:ff:f5:16:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2B:01:D6:0B:B9:B2:60:56:4F:64:C9:72:84:87:C1:23:AA:1E:C5
            X509v3 Authority Key Identifier:
                keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:fe:1c:98:85:7d:25:70:d7:84:b4:2a:e1:a4:75:10:23:
         e6:71:5b:8a:c8:b2:8d:9d:e0:f9:00:11:16:3f:d5:24:82:4f:
         91:34:01:7d:93:c4:49:bd:a9:93:da:99:43:0e:fb:f1:4b:17:
         f3:67:89:14:36:fa:b5:38:a0:a6:ae:b0:51:ce:3f:ac:dd:02:
         7f:4f:2e:61:6d:6b:d7:d1:7d:4a:1e:a6:c6:53:0a:3b:c0:ff:
         c0:8a:ca:36:ab:5d:44:c2:17:8c:69:75:02:e9:12:43:00:cf:
         52:c2:32:55:24:09:03:5d:23:b4:23:26:55:7d:1e:a2:9d:00:
         b0:aa:4f:5a:9b:2c:27:eb:81:8c:f3:12:52:a8:04:85:76:ff:
         a4:07:e5:25:ed:4d:da:b5:0d:9e:e5:60:7f:3c:f5:a4:86:ac:
         4e:c4:e9:1a:a3:b7:cd:73:90:35:b0:00:b5:71:97:ed:61:dd:
         3f:a5:d8:97:cc:24:ed:a0:9b:4d:90:eb:23:86:27:3c:77:79:
         09:a2:52:b6:67:d7:f2:12:df:88:6e:86:f1:4e:67:4d:bd:84:
         07:51:70:f5:25:e4:a9:70:1d:c1:77:d7:34:a6:c5:9c:3c:3b:
         85:7d:bc:a9:a0:b9:de:a9:5d:2c:eb:8d:06:6c:6f:1c:cc:24:
         af:08:b1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:54:27 2025 by rpki-client