This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
File:                     P7b20GZYOGwje40UDa0VsoOLtco.mft (raw, json)
Hash identifier:          yZx/SF0BXAkFbXTtN2bMFy5Zw9yD9OJE932q4HrZgns=
Subject key identifier:   96:2A:33:0C:B6:DB:DB:C1:65:C2:9F:94:99:A3:86:C1:99:59:63:AF
Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
Certificate issuer:       /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
Manifest number:          0B81
Signing time:             Sat 06 Dec 2025 18:21:24 +0000
Manifest this update:     Sat 06 Dec 2025 18:21:24 +0000
Manifest next update:     Sat 13 Dec 2025 18:21:24 +0000
Files and hashes:         1: P7b20GZYOGwje40UDa0VsoOLtco.crl (hash: AXV1jyCaZKtxD3IkH+IULF7A/28nCc8JAiOZyqyjQw4=)
                          2: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (hash: d1wEAtOklHH/pS7iavUcvo62WbDBiArhDOGZCIjBXFU=)
                          3: 9F9FD574758811EA93AADD3FC4F9AE02.roa (hash: bzYatoV9vXAn/TFneZ8B1b8ytRqlQM8seu8F8tZug0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
                          rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
        Validity
            Not Before: Dec  6 18:21:24 2025 GMT
            Not After : Dec 13 18:21:24 2025 GMT
        Subject: CN=69347424-f934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:fc:d8:66:74:12:69:85:37:ad:ac:9c:d7:
                    89:1c:38:69:f0:e9:be:48:88:76:78:b8:90:bd:97:
                    0c:bc:73:3f:5d:ad:2c:a4:7d:dc:1d:9a:b5:d5:80:
                    3b:2a:7e:64:f7:ea:9d:70:4b:22:67:55:b7:11:24:
                    bc:80:4b:f9:2f:01:82:bf:99:d3:d4:b4:a0:6a:f7:
                    59:52:06:2c:ef:48:a6:6f:a0:7d:58:ff:81:23:46:
                    65:da:27:0c:84:41:97:c6:ff:b5:26:fd:dc:6d:13:
                    e1:c6:ba:fa:e3:89:1c:70:00:30:5e:39:31:ca:4d:
                    15:8e:d5:3d:09:31:4e:42:fc:92:a5:11:77:8c:d2:
                    2f:ba:d4:f9:75:69:ff:77:81:4a:2b:4b:a2:e2:35:
                    66:dd:a3:1d:d9:3d:1b:6f:04:cd:fe:a0:16:91:66:
                    cc:79:50:e3:4a:27:08:39:09:12:28:c8:52:fa:d5:
                    0f:b6:b4:8a:14:d8:78:09:ac:e6:fc:21:c1:43:af:
                    1e:bd:66:1e:94:4d:b3:84:07:4c:4f:8c:53:f5:2e:
                    02:9b:74:ac:7a:41:e1:7b:f3:52:b3:71:37:f5:2f:
                    a8:8e:a2:31:e7:91:bb:30:6a:f7:ff:db:ff:1e:2a:
                    23:af:0c:96:ed:82:97:db:e0:c1:b6:48:6e:13:f0:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:33:0C:B6:DB:DB:C1:65:C2:9F:94:99:A3:86:C1:99:59:63:AF
            X509v3 Authority Key Identifier:
                keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:06:47:02:2b:ca:99:30:dd:f6:89:5f:e7:da:ea:e5:7e:8c:
         05:a0:bc:e7:7d:8f:da:12:e0:b9:ef:13:32:31:48:be:16:8f:
         4e:3e:64:22:d9:d1:fe:62:a8:2b:3e:63:67:8a:25:ba:fc:c9:
         49:ea:e8:c5:04:ab:52:8f:15:31:4a:b4:14:79:18:4b:77:fb:
         d3:ca:d8:f9:89:67:9d:25:42:18:81:6e:aa:43:ab:be:78:9b:
         94:48:21:fc:bc:c9:bb:76:19:27:87:18:5c:fc:3d:73:b1:12:
         8a:89:65:db:e5:2d:6e:cc:36:47:cf:06:19:e1:69:c6:1f:fe:
         f5:c0:05:ed:bf:f4:e6:01:1e:89:96:64:dd:e8:26:c5:fd:0d:
         2e:a7:81:eb:b1:b1:52:16:2c:18:84:0a:7f:08:2d:c1:0a:04:
         5d:97:3d:18:d8:d7:db:21:8d:f8:bc:32:d6:6a:6a:b9:3d:60:
         8e:2e:25:ed:50:9e:20:17:e3:54:24:08:f5:6e:61:50:42:0a:
         39:e2:51:59:b0:9a:dc:de:b7:57:f3:0d:e6:01:80:0e:dc:39:
         b1:e2:86:ef:b0:ae:15:b7:79:16:14:2d:69:73:6c:30:43:36:
         2b:3f:22:e5:bf:f9:51:68:ca:47:66:54:80:bc:ff:88:13:fe:
         ee:1e:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:40:03 2025 by rpki-client