This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          fpauqKtA6EdA9iGI9NEOLCl8Ipc5JZ5Qn7SBqsOKT7k=
Subject key identifier:   FC:C6:AF:5F:F9:8A:AE:DD:F8:54:2F:60:80:30:F1:A9:1E:2A:A2:47
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       3430
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          3422
Signing time:             Sat 06 Dec 2025 15:10:13 +0000
Manifest this update:     Sat 06 Dec 2025 15:10:13 +0000
Manifest next update:     Sat 13 Dec 2025 15:10:13 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: q9NtgbCU9BGa6I6cNWeqV4ehamXTA+aMVaxvevqGGc8=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13360 (0x3430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Dec  6 15:10:13 2025 GMT
            Not After : Dec 13 15:10:13 2025 GMT
        Subject: CN=69344755-86db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:3f:f3:1c:ca:01:3a:68:84:71:3a:cd:e9:
                    8c:25:c5:0c:fa:62:87:a3:b0:d2:00:36:55:38:83:
                    55:36:4c:17:fc:d9:dc:6e:c0:82:11:1d:11:36:cf:
                    0d:e4:7b:ad:16:7a:34:08:4e:0e:70:68:c9:9c:48:
                    ff:ac:d1:8a:c4:8e:f5:8c:7e:3a:dd:93:be:b0:d2:
                    70:bc:20:25:44:fd:73:a1:86:7f:64:28:8a:36:0a:
                    8e:2f:d5:96:9c:11:c6:ea:d0:0a:9d:68:e5:28:7e:
                    19:38:2a:c9:95:88:24:99:85:86:4d:d2:64:fe:5e:
                    cd:09:9b:1d:a3:17:85:29:09:2f:e2:4a:d1:b8:e1:
                    c4:29:ff:41:80:d6:7e:11:89:05:be:22:9f:a1:16:
                    f5:67:d9:37:a7:4a:62:83:2f:ba:bf:16:0a:cd:72:
                    30:01:f4:d8:7e:78:65:91:ee:b5:c0:37:c3:6d:43:
                    2f:97:1b:14:16:53:90:e5:a3:22:5f:ab:a2:5e:93:
                    0b:87:0c:91:ca:38:39:91:d0:e8:73:f8:9a:d5:ac:
                    d4:63:80:01:e0:61:ab:80:02:e1:6e:48:ae:94:23:
                    98:30:9f:70:2e:3a:23:fa:c3:4c:ef:be:f9:a4:8e:
                    84:e5:61:15:42:58:83:7a:56:ef:de:63:fb:c6:c2:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C6:AF:5F:F9:8A:AE:DD:F8:54:2F:60:80:30:F1:A9:1E:2A:A2:47
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:39:d9:05:ef:b0:b4:49:0c:26:67:3f:1a:6d:ec:7d:6f:
         93:ba:45:69:aa:8f:87:82:b9:94:7e:9d:45:4e:e2:58:ba:f5:
         98:36:9a:74:16:87:b8:fc:3f:74:89:79:ae:5f:b4:a9:0a:c1:
         20:e4:7d:30:a3:7d:1c:ed:1d:de:17:e2:d1:6f:b4:f0:8b:28:
         38:a5:dc:26:de:7d:5f:4a:96:41:7e:42:a7:ad:09:ef:16:27:
         de:36:df:80:7b:36:74:0a:71:df:90:e6:c3:01:ea:fe:f1:89:
         fd:c3:6a:cd:c6:a4:a4:bf:6c:2c:dc:50:56:ce:4d:21:60:f9:
         b3:92:dc:07:e9:17:be:63:02:f8:e9:10:6b:e4:05:9f:86:2e:
         be:51:d4:12:72:cd:50:d9:7a:80:87:11:3c:61:01:92:42:d6:
         65:b8:ed:40:3e:99:c6:15:6e:c3:76:b8:0d:b1:0c:41:b3:4a:
         e2:34:fa:6b:07:8a:35:50:89:24:5b:25:f6:50:a1:72:8f:64:
         d9:e8:c8:55:58:a0:7b:ef:86:1f:c0:66:39:aa:a9:33:46:14:
         2e:46:19:58:08:32:3e:85:20:b4:45:d8:ed:7b:bb:8d:61:e1:
         8b:91:53:26:68:f3:e4:79:ed:54:1b:df:95:91:e9:e3:35:ee:
         95:82:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:35 2025 by rpki-client