This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
File:                     XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json)
Hash identifier:          a35B33Md8SzCczSnfhbL+bzQE1AgiW0riHIlTuCbKto=
Subject key identifier:   B3:3E:4E:62:8D:6F:BE:C3:AB:37:14:F0:4B:FD:CE:89:CF:2A:4F:B4
Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
Certificate issuer:       /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
Manifest number:          DF
Signing time:             Fri 05 Dec 2025 03:31:14 +0000
Manifest this update:     Fri 05 Dec 2025 03:31:14 +0000
Manifest next update:     Fri 12 Dec 2025 03:31:14 +0000
Files and hashes:         1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: JojQlFGodP/lDQP9SOdj7F/w1g5mt9p9+ORMVYyYFOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
        Validity
            Not Before: Dec  5 03:31:14 2025 GMT
            Not After : Dec 12 03:31:14 2025 GMT
        Subject: CN=69325202-cb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:96:42:0d:f9:6c:51:f5:3f:13:13:ed:7f:
                    ab:c0:be:42:b2:8a:7e:d6:df:ac:1e:ff:f6:d5:3b:
                    87:b5:c9:59:fb:db:fa:8d:ac:24:f8:4e:ea:60:66:
                    40:ca:5c:d9:22:1b:b0:b9:1e:dd:59:68:d0:0c:63:
                    e2:cb:33:ea:fa:51:48:0b:91:fb:f3:94:ba:b6:7c:
                    38:81:55:47:61:4b:1c:8c:4a:d6:18:e2:4c:4a:9d:
                    be:75:8f:e3:29:ec:31:eb:e5:5b:4c:48:00:bf:3c:
                    ed:4b:86:45:d8:e9:c3:44:32:8c:b0:72:7c:c6:e9:
                    b5:e7:35:62:ee:c8:88:1b:3d:c9:20:f1:e7:d1:64:
                    1f:e8:96:9e:13:dd:48:b3:93:f8:d1:03:5e:b6:51:
                    91:15:be:0b:14:01:65:1d:67:19:0e:4c:7f:25:72:
                    d0:46:89:b5:fd:27:0c:35:3c:56:b0:65:cf:eb:5d:
                    3c:5b:99:42:a0:b6:bb:2a:30:93:3e:8a:fb:fe:43:
                    9e:a3:4b:30:9a:bc:60:69:e4:83:47:07:80:ba:83:
                    71:42:75:b4:56:e5:b4:1f:16:66:3e:d9:62:eb:46:
                    f4:48:ba:1d:7f:c5:ec:8e:32:25:b1:d4:89:c4:c5:
                    b1:d8:7a:df:f7:20:0c:fb:fc:54:23:8e:6b:55:01:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3E:4E:62:8D:6F:BE:C3:AB:37:14:F0:4B:FD:CE:89:CF:2A:4F:B4
            X509v3 Authority Key Identifier:
                keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:25:1a:e2:96:3d:a3:76:22:a4:18:d6:5d:4f:00:93:2c:f1:
         0a:04:61:36:bc:01:d0:4e:c7:93:c4:1f:fa:79:12:be:28:d2:
         e7:d6:0a:df:b0:48:23:40:19:30:12:12:b4:47:4a:38:85:69:
         ad:d5:c9:78:d1:dc:a9:88:f1:95:7b:5d:30:f4:c8:27:39:04:
         3d:cb:b4:e6:ad:a2:04:aa:fa:64:e1:74:45:3b:9f:f1:c5:f3:
         98:ca:64:61:ba:9f:67:ed:6b:8c:10:46:fb:6b:25:6b:42:94:
         1d:b5:7c:f0:6f:b4:bc:89:27:9c:d8:aa:00:7e:8b:3f:34:a5:
         70:a8:94:26:09:4b:70:29:13:04:b7:15:e4:a2:cd:4c:db:13:
         b7:25:30:74:6b:d6:5f:e9:a2:d7:9b:c2:6d:0a:73:a6:a1:e8:
         43:df:70:a7:2a:02:8e:12:02:b3:56:87:d5:2b:da:31:73:3c:
         fc:e0:cf:bb:46:ae:6d:c9:b1:75:ee:da:4f:58:a2:6d:67:57:
         65:5f:4a:6e:d2:4b:61:1a:ac:97:26:70:4a:60:b6:53:ca:9e:
         13:c1:55:b4:62:94:5d:a0:60:33:c4:30:16:17:d7:a2:27:7b:
         5c:33:79:04:af:4f:3e:1a:4e:2f:40:01:e9:0b:a6:c0:e6:4c:
         9c:26:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:38 2025 by rpki-client