This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
File:                     xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json)
Hash identifier:          YY3qbEuahN3ZXNeXVlzAzowSogstjF3I0NeSAaU+1tM=
Subject key identifier:   CC:5B:4A:7F:8F:A5:3C:1A:52:5D:49:25:AE:E1:9D:2B:42:7E:50:99
Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
Certificate issuer:       /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Certificate serial:       0512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
Manifest number:          050B
Signing time:             Thu 04 Dec 2025 22:14:12 +0000
Manifest this update:     Thu 04 Dec 2025 22:14:12 +0000
Manifest next update:     Thu 11 Dec 2025 22:14:12 +0000
Files and hashes:         1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: 0QMlKxmWZAPYbFvU5whgzikLXmi2Y1taPUHJqbKbxu8=)
                          2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: NBcgBUuRK2Oc31nKRp+BExXYFoPfjJAOt1Hb95kMeP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
                          rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
        Validity
            Not Before: Dec  4 22:14:12 2025 GMT
            Not After : Dec 11 22:14:12 2025 GMT
        Subject: CN=693207b4-a7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:5c:a6:1b:46:45:f5:6e:01:60:13:ef:c4:
                    0b:86:ec:f2:4f:4c:da:ba:39:52:14:63:46:a9:ab:
                    02:ab:fe:35:2e:77:eb:62:1c:2c:dc:71:85:83:56:
                    6b:5a:ff:30:99:53:7f:27:8c:34:cc:76:c1:15:18:
                    56:b7:1c:3e:42:68:54:23:d5:14:00:65:b9:45:e9:
                    36:b1:b6:ca:6c:fd:e0:3f:5a:a2:6e:8b:21:9b:a5:
                    bf:61:40:8b:26:00:52:38:e8:6c:2b:17:30:9f:1c:
                    cc:8f:5d:6a:4a:47:74:58:dc:f6:63:a9:71:21:74:
                    09:30:82:c1:92:27:e1:0f:70:22:25:5e:bb:4c:b3:
                    db:a6:f9:58:f9:3b:b7:84:c8:86:c5:fb:e0:c5:5d:
                    76:12:dc:42:26:bf:6f:54:6c:09:35:29:6e:cc:35:
                    ff:47:4a:97:02:2a:ce:20:99:a2:7a:b0:23:21:26:
                    35:46:5d:70:33:3a:70:cb:66:17:b3:6b:12:31:be:
                    c1:d3:89:73:69:98:cb:d6:c4:28:af:48:3e:5f:51:
                    26:6f:20:02:c6:72:48:3b:cf:e7:41:ea:73:7b:5a:
                    a8:07:45:9f:1b:64:21:28:f8:14:ba:88:25:45:48:
                    7b:71:b0:28:6b:78:fe:42:cf:7e:8a:1c:3c:55:59:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:4A:7F:8F:A5:3C:1A:52:5D:49:25:AE:E1:9D:2B:42:7E:50:99
            X509v3 Authority Key Identifier:
                keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:21:0f:1f:be:ce:5d:bc:73:62:2e:06:87:12:2b:ed:2c:d0:
         18:de:97:7e:92:ea:b1:f4:80:4f:5c:41:92:0a:4d:86:28:82:
         10:59:48:4a:f5:0e:c6:89:57:aa:97:bd:f2:5a:69:9a:55:8e:
         4e:08:a8:b8:03:37:32:24:a1:9d:00:5c:e8:75:0a:dc:6e:e9:
         3b:cd:ae:f6:c3:52:6f:45:32:1f:b6:fc:96:17:aa:ed:f9:27:
         53:b5:46:28:1b:55:4d:cc:27:db:2c:98:71:c6:26:8d:3a:01:
         8e:15:f0:dd:de:19:31:38:e4:b6:88:ec:32:90:40:70:93:0e:
         f7:ae:e2:a5:42:22:e7:e2:6d:08:f5:47:88:a8:6e:4d:b4:96:
         f8:09:4f:02:12:67:0a:96:8e:fd:ce:bb:06:74:c4:e3:57:e6:
         d7:eb:e5:de:f0:c6:9d:e6:1f:df:48:24:24:66:71:9d:84:56:
         9a:8b:b3:46:cb:08:60:92:f8:88:95:95:e3:15:c6:69:f0:77:
         22:37:15:5c:5e:62:25:60:ba:04:50:4b:5e:e4:8e:f0:c2:ec:
         1b:04:4f:a0:c8:8c:52:03:50:a3:32:a0:3f:ce:db:19:57:35:
         bb:9c:ac:e8:2d:89:b7:54:ff:fe:f9:83:78:f0:5e:bc:f2:1c:
         ab:fb:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:10 2025 by rpki-client