This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
File:                     T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json)
Hash identifier:          V3olWlNduu8wp9nivuaw4RUmgqM+eD2nKzzN87ie0MY=
Subject key identifier:   B7:0B:52:99:17:2F:2F:29:F9:9D:6D:FF:2A:EC:77:40:16:01:CF:5A
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Certificate issuer:       /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
Manifest number:          88
Signing time:             Sun 07 Dec 2025 04:44:30 +0000
Manifest this update:     Sun 07 Dec 2025 04:44:29 +0000
Manifest next update:     Sun 14 Dec 2025 04:44:29 +0000
Files and hashes:         1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: 970OodtXa/0V1INSfN/UiQIhTIVULqnvmvUs4KiiAtM=)
                          2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 04:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
        Validity
            Not Before: Dec  7 04:44:29 2025 GMT
            Not After : Dec 14 04:44:29 2025 GMT
        Subject: CN=6935062e-1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ed:37:bc:ba:49:f9:36:33:a5:bc:57:c7:f7:
                    07:f1:4f:7b:65:5b:39:24:d6:34:65:a1:92:1c:38:
                    4d:1b:a6:05:a9:08:a1:ca:b2:5a:31:32:e5:83:f1:
                    38:ec:78:f7:2a:1c:62:93:5c:c6:8c:97:95:c8:14:
                    70:42:b4:b3:65:00:92:cc:ab:d9:7f:81:f2:58:3f:
                    00:6b:ec:a1:46:7a:02:af:0a:31:f1:f0:17:f7:4a:
                    5a:d0:90:59:2c:48:b6:cc:b2:c2:9f:3b:d4:74:d1:
                    69:c6:e2:23:48:35:d1:79:21:43:2d:e4:0e:8d:5c:
                    46:ff:16:0c:44:44:17:53:15:27:81:25:97:38:6e:
                    1f:82:37:58:09:13:ed:ce:11:90:9e:a2:44:3b:0c:
                    cd:87:2e:b5:d6:6b:6c:42:f3:6d:d8:f6:44:4b:77:
                    b6:7e:0e:53:4e:00:0b:3a:ab:ea:8f:80:db:ff:cc:
                    d4:30:9b:61:bb:c0:85:14:79:fd:fe:4d:6a:03:cf:
                    a0:da:c5:60:f5:23:bd:32:63:1e:7a:0a:2a:29:3b:
                    64:85:1e:b7:7f:00:d2:88:91:72:66:50:55:5d:aa:
                    46:d0:2f:03:bb:c8:3a:3f:c2:f2:63:4a:a7:53:85:
                    ff:0d:01:59:41:c6:90:34:40:60:78:aa:48:97:28:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:52:99:17:2F:2F:29:F9:9D:6D:FF:2A:EC:77:40:16:01:CF:5A
            X509v3 Authority Key Identifier:
                keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:6a:aa:db:68:48:c8:cd:5f:68:95:e8:f3:36:26:09:6e:
         03:0e:8f:4c:cf:28:05:5d:62:48:86:03:e7:eb:73:43:e2:8e:
         2a:80:09:57:e2:c1:7d:fb:29:aa:51:39:7a:61:a9:8c:bd:0b:
         d9:24:c1:76:b7:b4:60:38:43:24:2a:da:ad:c4:94:ea:9f:2c:
         69:37:c6:da:97:1f:85:ef:a5:8b:26:db:21:54:d9:7e:6d:07:
         9a:93:1f:3a:44:fa:97:2d:16:0e:91:ad:7a:32:84:ca:f2:60:
         41:28:a3:55:00:1f:12:ab:80:bc:47:ef:25:46:64:1b:59:74:
         b7:a0:32:45:79:60:32:7f:a6:6a:15:ef:22:03:b7:7e:bd:26:
         2c:72:ab:08:90:d9:24:03:a7:98:92:7a:88:6a:e2:90:4e:75:
         1a:31:f9:f2:c5:2a:88:d0:d2:44:d4:c7:62:56:6e:34:3f:ba:
         86:b9:5a:09:33:f1:d0:29:02:48:23:73:3e:19:58:cc:34:3e:
         7b:fb:36:19:19:5f:dc:97:fe:ab:c6:f3:70:76:a8:53:bf:d5:
         a1:40:0a:3d:6a:47:b2:a0:fd:73:50:10:5d:9b:dc:06:46:e1:
         47:fa:42:38:cb:ba:2c:1c:6f:d3:f3:73:d2:97:1f:14:92:f5:
         62:2d:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:12:57 2025 by rpki-client