This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
File:                     mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json)
Hash identifier:          GLtZkih7WXW12FlLVEv173FhUuEN+MLg+bvExCmKEwA=
Subject key identifier:   38:CB:5F:1A:70:02:B7:67:DC:71:53:76:53:AE:D6:BB:17:D2:69:88
Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
Certificate issuer:       /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
Manifest number:          0458
Signing time:             Sat 06 Dec 2025 22:51:28 +0000
Manifest this update:     Sat 06 Dec 2025 22:51:27 +0000
Manifest next update:     Sat 13 Dec 2025 22:51:27 +0000
Files and hashes:         1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: UfE9ZMannxjdBQy84QjWUpwsNCoSM7ZhDROXhfV6Hvs=)
                          2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: VmrxYzvVkdO/i8G3xK4fpHSWBTRD5+zxdo/h6L8f+7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
        Validity
            Not Before: Dec  6 22:51:27 2025 GMT
            Not After : Dec 13 22:51:27 2025 GMT
        Subject: CN=6934b370-958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:14:2b:cd:b3:fb:d2:65:60:45:69:7a:f3:
                    98:95:41:cb:64:e2:e5:e6:b1:8b:63:8b:5d:0b:f9:
                    55:4e:64:ad:c3:98:c9:51:d7:22:e3:05:88:cc:c0:
                    08:fb:48:a8:53:02:58:fa:4c:51:3d:e3:7b:87:f3:
                    7b:14:fc:e8:7d:80:b8:36:9b:bf:ad:1b:36:f4:cd:
                    77:c7:ff:b8:ee:72:7b:cd:f1:74:ac:98:2e:27:06:
                    17:4c:9a:07:83:21:79:5e:79:0d:64:b5:5e:cc:51:
                    42:df:99:eb:2d:d2:f1:53:58:06:45:a4:6b:7e:56:
                    40:c7:9f:0a:d6:6b:85:ec:5e:83:59:92:a3:b9:a4:
                    f0:1d:60:79:42:21:7d:7d:74:24:4e:38:87:9d:c7:
                    22:20:72:d6:a5:62:c3:aa:60:1a:db:2e:1a:b3:74:
                    21:46:03:9c:3e:93:94:83:93:38:21:b7:30:80:e1:
                    44:25:10:23:3a:23:03:40:4d:4a:16:2c:2a:04:19:
                    fe:ba:4e:79:10:ca:ab:2b:43:90:83:80:1c:b4:97:
                    af:d9:44:6b:39:04:62:1f:fe:26:03:c8:59:e8:10:
                    16:51:dc:7d:fa:44:ba:16:76:32:51:b3:61:6a:2e:
                    37:2b:aa:d8:2f:a0:0c:fb:97:06:ea:c6:ac:2d:a7:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:5F:1A:70:02:B7:67:DC:71:53:76:53:AE:D6:BB:17:D2:69:88
            X509v3 Authority Key Identifier:
                keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:54:e0:db:6c:51:08:ff:7a:41:61:d0:d5:e5:8e:91:15:c2:
         a7:da:93:46:5d:51:c6:39:9b:a3:de:d4:c6:8a:70:c6:e9:87:
         ca:87:57:dc:b5:43:ff:ed:dc:d8:3e:5e:1e:97:5d:c2:43:4d:
         79:b1:9a:8a:bb:22:5d:e1:5d:dd:e2:05:e0:00:92:63:a4:5f:
         d7:8b:b1:85:93:d5:e1:67:6d:70:ba:63:46:78:a5:e7:a1:46:
         30:1b:0a:b4:9e:6b:aa:fd:d3:3e:1f:b5:dd:70:e2:1c:8c:48:
         24:f4:22:ff:70:25:db:b7:28:7d:78:51:77:94:83:0b:bd:19:
         23:e3:43:7f:40:03:eb:4f:76:ab:e3:66:70:09:62:89:a6:eb:
         c3:b6:f5:19:99:4e:be:a6:1b:91:49:a3:1e:3e:a0:63:eb:11:
         93:56:79:46:d6:bf:6e:fe:cf:54:a7:bd:67:d5:b7:7f:62:32:
         8e:7e:6b:6d:d8:dc:c2:95:84:ca:9b:86:e6:9a:9f:16:81:13:
         e4:f4:5a:9c:cd:4e:2a:46:22:23:0b:70:79:47:ec:b7:5d:5a:
         23:6d:93:c1:14:82:19:3a:2e:81:8a:a4:6c:ef:53:a6:58:ff:
         c8:e1:83:f4:a5:62:14:61:a3:3f:79:7a:6b:18:2c:26:cb:90:
         cb:6a:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:28 2025 by rpki-client