This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File:                     2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier:          qx3TTaqQxSpQZr3LxiaPSQURVoZWyy03cl9ryGTh0/4=
Subject key identifier:   70:26:96:DF:22:9B:6D:AE:01:88:C2:C2:31:BF:9D:B6:E5:16:DE:38
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer:       /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial:       06C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number:          06A4
Signing time:             Thu 04 Dec 2025 21:10:27 +0000
Manifest this update:     Thu 04 Dec 2025 21:10:26 +0000
Manifest next update:     Thu 11 Dec 2025 21:10:26 +0000
Files and hashes:         1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: KqlBx3fUZj41sjCL0W+RyZwCWYLVqzOENZ+ORXOwxkY=)
                          2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: NzOCnKqg2qahRXEOik1xyZlxFZ3lrtlDe5hks5SrPJA=)
                          3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: IqmyGbo6lE5IdQOfP9xw6QgI0Xcsu+xkWZJJhr6ZiRQ=)
                          4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=)
                          5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: xoqWpk6kq9UDnJpAtKinOiTxbgS2kwe2RRE2npE/Mm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
                          rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
        Validity
            Not Before: Dec  4 21:10:26 2025 GMT
            Not After : Dec 11 21:10:26 2025 GMT
        Subject: CN=6931f8c2-b5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:a3:c0:86:9f:9a:ef:76:54:f7:03:74:7b:
                    a1:e8:bc:b3:0a:2c:54:7a:0b:e5:fc:08:f4:ba:bc:
                    76:0b:4e:f5:aa:1e:ec:11:73:86:16:d7:45:37:de:
                    0e:a6:ef:1d:2e:4d:6e:5e:c6:03:98:60:df:42:06:
                    43:2b:24:b6:73:63:1d:c6:b9:0e:8d:cf:2f:0c:5d:
                    69:5d:6a:9c:86:db:9e:05:ed:2a:0a:33:59:0b:7f:
                    7f:10:e6:bb:18:97:d4:fb:eb:b1:a1:c6:e3:b2:7e:
                    a0:27:bf:97:ca:0f:6f:dd:2c:f5:18:11:22:e5:40:
                    a2:a4:c6:5f:45:45:05:7b:39:79:52:22:91:52:fa:
                    c4:77:32:68:70:35:aa:78:5d:e9:58:60:fe:f0:38:
                    f9:f9:14:98:40:6b:27:b5:b9:14:04:04:62:a6:a2:
                    c2:9e:81:5c:71:d9:2a:2e:b7:f9:51:3f:f9:57:56:
                    6e:db:1f:7e:de:75:d6:0b:e0:51:be:f7:6c:b2:fa:
                    1d:92:f8:63:f0:62:d9:99:a9:17:fc:b4:ba:ec:bf:
                    5a:7f:1f:5e:eb:c8:50:33:c8:4f:08:4d:46:b5:0a:
                    da:89:88:2f:c1:3f:47:db:71:2c:94:e3:71:d2:ad:
                    de:03:51:3c:33:04:9a:c5:c3:94:2d:6d:ae:7d:bf:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:96:DF:22:9B:6D:AE:01:88:C2:C2:31:BF:9D:B6:E5:16:DE:38
            X509v3 Authority Key Identifier:
                keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:f1:8a:13:77:df:b9:fd:a4:3e:a7:bf:23:07:74:77:00:
         6f:fd:67:63:e7:08:bf:6b:8f:22:d4:a9:b6:a1:40:97:af:ab:
         7b:c1:81:ed:46:75:9c:7c:1e:79:3a:69:4d:64:cf:b1:7e:91:
         56:68:02:78:60:c7:0d:87:46:c7:af:53:f1:c9:35:b8:23:61:
         bf:a3:ef:1c:4d:32:45:27:8e:28:dd:6a:01:3d:db:f4:4e:4e:
         23:f5:d3:a3:4d:20:cb:dc:4a:e3:00:8d:73:20:e8:3e:26:4c:
         7c:0c:4c:f8:9f:f1:6d:aa:66:87:a4:24:08:20:d6:ab:9c:5d:
         e8:5a:32:8f:67:bd:4d:a9:cf:96:1f:38:1e:09:36:57:44:e8:
         ab:6b:d2:8d:a2:46:3a:6d:72:a2:51:4b:96:cd:9a:c9:1c:43:
         8f:57:3e:50:59:69:e0:74:b3:93:3b:bf:16:eb:4b:ab:b2:77:
         d3:32:1d:bf:d5:de:e2:81:c9:ae:8f:78:a1:c5:34:8d:02:81:
         ae:2c:56:56:7f:f3:0b:3d:72:8c:02:81:c5:04:50:f9:89:7d:
         52:af:48:62:44:f6:11:aa:11:77:10:4d:4a:93:d9:5a:6d:7a:
         26:79:10:78:a1:88:77:4b:4a:00:f8:0f:32:0f:65:4a:ff:f0:
         8b:55:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:05 2025 by rpki-client