This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File:                     _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier:          E+pbSGPOzJeVztHqhXchxMqgsEAmaBzvPQtNiHYax7s=
Subject key identifier:   F7:46:1E:48:75:1D:D7:3C:4A:2D:6B:9B:BD:74:19:93:14:75:9E:C0
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number:          0257
Signing time:             Fri 05 Dec 2025 00:02:44 +0000
Manifest this update:     Fri 05 Dec 2025 00:02:43 +0000
Manifest next update:     Fri 12 Dec 2025 00:02:43 +0000
Files and hashes:         1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: YiiB8c8g4j+Ib2kfAiijswPaWe0siA5n/znD14BpS3c=)
                          2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: d5OlyNe99ww1Vvepz8IME1hvCCUKj/1zCQVefrQGjj4=)
                          3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: haSQEcZvu+LWzkOvZzc7LOJTAEDY5W895cu5rNdoU9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Dec  5 00:02:43 2025 GMT
            Not After : Dec 12 00:02:43 2025 GMT
        Subject: CN=69322124-1e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:f6:1f:4d:0f:e6:f7:0f:b1:9f:42:f5:b8:
                    cc:31:f3:a9:4e:59:f9:57:c8:39:4f:62:87:6e:be:
                    e9:06:55:71:d9:7b:af:28:b4:61:76:af:4c:cc:0b:
                    7b:ab:7f:c9:43:97:be:d5:bf:4c:26:93:17:84:20:
                    24:84:ee:42:10:e1:99:b1:06:0e:3e:f3:a5:2c:ac:
                    28:8b:9d:3a:f3:c8:0b:4c:f1:df:f1:d7:34:27:91:
                    cf:8d:09:fc:9c:79:48:95:00:6e:62:37:c1:49:ab:
                    99:19:26:7c:45:f6:24:2e:6b:0b:4d:14:65:0a:75:
                    f2:d2:fb:f7:3f:47:de:2a:2b:9e:93:0f:21:88:ee:
                    c8:b2:1c:b7:45:b4:9c:0c:28:be:bf:b7:4a:c9:61:
                    4c:02:3c:cd:9e:e4:25:50:df:25:bd:2c:41:e6:c8:
                    e3:45:75:d9:f1:38:6f:40:82:14:e1:a1:6b:1b:b4:
                    72:ce:61:45:f9:1d:2d:31:65:b3:9a:50:8d:29:6f:
                    bb:91:50:67:ff:41:61:55:26:9b:83:51:02:f8:fc:
                    1f:24:b7:ab:d5:69:25:ab:e8:21:08:38:d7:1c:aa:
                    d2:f1:19:98:18:ad:96:97:c0:eb:9f:21:e7:7f:6a:
                    6a:e6:7d:83:77:5d:a7:db:dd:3d:e7:c2:af:1c:39:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:46:1E:48:75:1D:D7:3C:4A:2D:6B:9B:BD:74:19:93:14:75:9E:C0
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:60:c3:d1:a9:67:71:5e:1c:43:f2:07:5b:4b:f7:bb:c9:
         c0:24:48:54:e0:2d:d0:2b:3e:a9:df:24:33:e3:9e:7a:44:3d:
         b4:a5:b3:c3:36:fe:76:de:44:31:f3:ab:3a:01:9a:74:33:50:
         77:93:b5:2b:cc:40:51:ff:84:e4:e6:25:00:ff:1d:5e:b8:86:
         89:dc:47:aa:fb:18:0e:6d:1a:0b:08:29:69:d7:b6:32:9b:6b:
         8b:7d:88:cc:97:7d:39:52:e8:70:af:5c:cb:03:44:dd:a9:84:
         28:37:26:84:6e:13:36:49:d4:01:76:47:94:7c:fb:fd:83:32:
         79:ab:cf:a3:a5:35:55:17:82:19:ec:cf:69:e7:59:a9:4c:78:
         29:3f:41:a0:83:87:cd:38:c5:87:5b:08:ee:c9:7c:be:bc:a4:
         56:0b:6c:08:4a:96:20:1f:88:9d:09:08:6e:42:d3:5d:0d:91:
         f9:28:69:5e:0f:6e:04:8b:01:8d:37:1e:39:37:40:07:8c:b3:
         07:e7:ca:54:ef:4c:db:a1:18:61:a1:e8:b3:01:da:3b:0b:f3:
         a6:41:9e:89:4e:78:95:af:a5:f2:4f:74:16:16:18:6f:c6:f5:
         52:db:b0:25:cf:49:1d:8a:c3:50:3c:b8:90:14:3d:06:ee:a6:
         40:28:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:44 2025 by rpki-client