This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
File:                     tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json)
Hash identifier:          HDPjPPUxd3Z30WPGMAzwW+gVojPfpHlSNZ9Ei3W4JQc=
Subject key identifier:   79:C2:39:E9:A9:BC:84:57:07:C7:90:1C:91:2E:76:67:EC:9B:4D:21
Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
Certificate issuer:       /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
Manifest number:          6D
Signing time:             Fri 05 Dec 2025 04:48:15 +0000
Manifest this update:     Fri 05 Dec 2025 04:48:14 +0000
Manifest next update:     Fri 12 Dec 2025 04:48:14 +0000
Files and hashes:         1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: dQe6h5vS7xvl7JQOa9PMe+c5tDs6nifeW88FmOWWYK8=)
                          2: D470A60E294511F0B1412377C4F9AE02.roa (hash: R5e5Pbe0gCRILBx2wr55E5wPwG2ILhIOGtJI6e+r29g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
        Validity
            Not Before: Dec  5 04:48:14 2025 GMT
            Not After : Dec 12 04:48:14 2025 GMT
        Subject: CN=6932640e-e5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:34:ee:0f:12:48:34:1e:00:e4:c7:3d:c6:
                    42:d3:76:bc:0a:8a:43:83:ee:13:25:37:2a:bc:b6:
                    ff:ab:12:93:55:28:e6:69:43:47:8f:c7:ee:b9:e4:
                    97:b4:f6:26:a9:f0:e1:11:62:3d:0e:24:92:f8:d9:
                    cd:f5:da:b6:3c:e8:44:29:eb:b9:ae:dd:74:6b:b1:
                    1d:8a:4d:09:02:32:71:0e:92:5d:8a:2b:5a:5b:6e:
                    01:f5:46:0f:90:b2:2e:06:ae:f8:38:70:73:e6:e0:
                    66:f2:58:28:96:e6:84:d5:7d:84:f8:d0:05:6b:5a:
                    e6:21:6c:21:17:86:b7:71:98:60:81:4c:a1:02:16:
                    17:9d:39:c0:7d:19:a6:73:18:ea:75:c8:81:ce:4c:
                    e7:eb:04:d0:1b:93:59:0e:14:8b:3d:06:97:bd:f4:
                    c1:97:b3:ed:6e:f2:0a:fa:ea:7a:21:9a:35:6e:68:
                    33:7d:91:69:c0:61:57:50:3a:5d:d0:d9:3a:a6:70:
                    1b:8f:1f:51:38:a9:0a:2a:e4:e8:6a:66:ac:c0:f1:
                    6e:9f:55:55:d9:8c:51:9d:5d:4e:b3:51:f0:14:e0:
                    27:7a:7c:a4:ef:a1:89:35:42:bf:c1:24:82:18:91:
                    92:76:22:cb:2d:2a:5c:6f:10:4d:9d:b1:0d:f6:64:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:39:E9:A9:BC:84:57:07:C7:90:1C:91:2E:76:67:EC:9B:4D:21
            X509v3 Authority Key Identifier:
                keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:41:fc:d8:e4:a4:e1:4f:2c:e4:6a:f0:51:35:a1:00:0c:
         78:58:88:cc:7c:24:4f:4c:39:01:f6:c4:ea:52:b4:55:84:e1:
         dc:87:95:31:44:96:8f:ba:ea:6d:7d:3b:fa:12:4b:41:b3:f9:
         95:8c:9f:2f:ec:66:a7:5b:50:27:9d:87:b9:eb:5e:47:34:47:
         df:10:3f:bc:a9:63:f4:5c:95:a2:50:a3:b6:65:d3:59:99:64:
         6e:bd:34:73:d5:d2:b7:6d:2b:94:b6:2e:ce:77:89:78:ad:4c:
         6e:87:1d:62:5e:fa:52:2c:c8:66:36:77:86:27:88:84:92:72:
         00:67:e8:16:b5:bd:54:f2:87:f2:1d:20:0e:28:11:47:4f:8f:
         26:0b:9b:b6:eb:1f:c3:d8:7a:0c:b1:be:98:7a:f0:c9:3c:53:
         7d:75:43:55:6e:87:ab:b0:8d:6c:ca:33:60:c1:fc:43:6c:d5:
         9d:39:11:5f:1f:44:fe:61:36:5e:2c:94:1d:94:23:f0:77:6f:
         d6:a4:69:11:fe:a1:66:6e:63:f5:e2:9a:40:8f:c2:7f:40:8c:
         af:11:85:48:38:79:1e:f0:b7:f6:9b:86:ef:84:bf:1e:a9:72:
         8b:bb:bd:67:9e:3a:40:a4:01:1d:c5:e8:33:3c:81:d0:a4:5d:
         4b:3b:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:32 2025 by rpki-client