This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
File:                     n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json)
Hash identifier:          ZVUfpSp0+nttkMU99zmiDZbGABFnQBogv+ovKTMQ5pU=
Subject key identifier:   AB:34:28:48:9C:23:7F:C5:38:BD:DE:AB:BC:A9:71:36:67:97:95:B1
Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Certificate issuer:       /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
Manifest number:          07C1
Signing time:             Sat 06 Dec 2025 20:22:15 +0000
Manifest this update:     Sat 06 Dec 2025 20:22:15 +0000
Manifest next update:     Sat 13 Dec 2025 20:22:15 +0000
Files and hashes:         1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: ODuIMQLh+fUfgzztnzu8Kqs5FCiMhnmvM1UesxDp6LE=)
                          2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
                          rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
        Validity
            Not Before: Dec  6 20:22:15 2025 GMT
            Not After : Dec 13 20:22:15 2025 GMT
        Subject: CN=69349077-ec04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:62:e1:77:a8:a7:bd:93:bf:7b:dc:5a:e5:
                    4e:71:4f:d8:50:9a:7b:60:55:31:fd:78:67:ca:1c:
                    7e:08:1d:5c:0f:47:97:f0:3a:76:7c:bb:16:35:5a:
                    39:10:46:ee:d7:0e:06:a8:4c:a0:e7:4c:28:53:11:
                    c3:66:cb:d3:b6:a3:74:02:ec:5e:f8:ac:54:a0:bc:
                    b1:16:b4:2c:d8:df:02:68:86:bd:45:8f:7b:2c:37:
                    8c:ed:e1:b1:aa:5c:6c:66:f7:56:37:f1:0d:ee:71:
                    f7:23:28:a3:59:68:85:be:ae:f0:1d:7d:58:31:5c:
                    3a:32:6a:df:14:c8:68:5d:f4:3e:2d:c3:9e:a0:4e:
                    e9:8f:c6:86:2e:df:b5:50:91:8a:52:75:b5:d1:21:
                    46:f7:d2:e7:d7:60:82:82:34:2d:de:0d:49:2e:f1:
                    38:de:73:d6:f8:28:de:5d:65:0c:9f:4d:4a:b5:8a:
                    2d:78:3f:17:40:94:72:39:11:fc:91:8b:12:9b:a6:
                    a0:71:ce:d4:c6:29:c0:d7:fe:97:be:77:04:81:dc:
                    d0:92:31:dd:9e:9f:1c:ad:21:fe:cb:ce:f7:10:fb:
                    48:a5:1f:1e:4b:f2:10:a9:45:c4:3b:e0:9f:b5:9f:
                    48:36:ba:88:49:75:76:c6:36:8e:e5:0e:91:ad:09:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:28:48:9C:23:7F:C5:38:BD:DE:AB:BC:A9:71:36:67:97:95:B1
            X509v3 Authority Key Identifier:
                keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:14:a9:95:37:60:e1:f4:07:6b:4b:42:6f:3f:9a:4a:32:
         36:1a:3d:7d:f7:17:77:f3:07:7e:38:f5:e5:30:86:af:67:e0:
         1f:22:d1:9a:bd:c1:f3:95:4f:f6:90:57:f0:18:7e:7e:1b:9b:
         bf:05:10:8d:41:78:64:b9:e4:7b:b2:47:ba:65:eb:b4:ac:c5:
         a9:d5:4c:f6:87:b5:91:a9:24:0e:5e:e1:de:32:f8:48:1d:63:
         22:a0:3a:c4:c1:84:09:6b:0e:0d:0b:ba:20:1b:52:ad:77:64:
         55:d3:a9:5b:09:6e:55:18:74:8c:56:bb:5e:ef:58:24:4e:21:
         61:3b:6a:65:af:11:d1:7f:59:6d:0a:e9:cc:d6:93:c0:20:f1:
         30:13:ca:21:ae:63:17:47:51:22:79:93:4d:7e:cc:a3:56:69:
         27:43:9a:d4:ad:e9:e0:5c:2f:88:17:83:be:fb:0c:13:3b:ae:
         d2:42:0f:83:d8:c9:5d:d7:f7:dc:91:63:4d:c8:75:1c:54:71:
         18:0f:65:14:18:79:95:b8:52:c8:aa:43:d1:4a:06:db:9e:10:
         3a:f5:98:8c:6c:3c:9d:6a:21:35:3f:d4:18:53:c7:05:1c:8d:
         47:e5:42:68:38:5b:84:c3:7d:af:e0:f2:91:df:62:04:cb:09:
         36:83:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:31:33 2025 by rpki-client