This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
File:                     83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json)
Hash identifier:          AMmmrzbzsNz7krFlLaW/uPEpIa1cu4UEuF84Hw0aFbk=
Subject key identifier:   EC:64:CE:4C:A4:86:08:BE:92:CF:1E:D2:2A:AD:09:05:23:25:BE:5E
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Certificate issuer:       /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial:       0484
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
Manifest number:          047F
Signing time:             Thu 04 Dec 2025 22:36:23 +0000
Manifest this update:     Thu 04 Dec 2025 22:36:22 +0000
Manifest next update:     Thu 11 Dec 2025 22:36:22 +0000
Files and hashes:         1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: hPenh95oWa6XAfJSW+e9yVTlaxWz2eGX316GRDxVSbo=)
                          2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
                          rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
        Validity
            Not Before: Dec  4 22:36:22 2025 GMT
            Not After : Dec 11 22:36:22 2025 GMT
        Subject: CN=69320ce7-1018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:73:b0:49:b7:44:f7:f3:71:2e:fe:e4:34:
                    8f:14:cc:07:f3:a0:58:9e:0e:7e:3d:06:b7:4e:d1:
                    98:65:c4:ac:23:36:e9:cf:67:1c:00:1f:47:64:cb:
                    00:00:0a:ef:de:06:07:82:cb:ce:a3:8c:e6:8d:6a:
                    32:ab:ec:58:c5:99:00:e9:6f:75:03:9a:34:76:f4:
                    34:2d:77:c9:ac:8b:38:78:17:a7:70:50:b4:dc:a1:
                    4f:e6:57:c0:d9:eb:7b:0e:e7:35:9d:1b:78:77:df:
                    ac:39:6a:c3:a7:72:0b:82:21:93:cd:a3:57:be:e6:
                    23:86:e6:cd:82:a5:cb:78:cd:71:f1:49:93:91:61:
                    5c:03:47:9a:50:58:c5:18:a0:a9:13:99:15:93:3f:
                    2e:d3:ac:59:7b:64:b0:be:2b:a8:94:60:ae:f7:dc:
                    a5:2a:fa:43:1c:94:5e:88:04:5e:f4:43:e2:90:83:
                    2f:ec:86:68:19:d2:ef:a3:5a:df:5a:46:c3:14:59:
                    c2:9c:c9:59:64:b9:de:b9:0a:33:c8:ab:64:11:b2:
                    91:a3:3e:50:7b:00:2f:ea:16:5b:90:4f:b6:73:75:
                    af:6a:e6:f3:c7:8e:c3:e0:e3:0b:d1:c0:f4:65:07:
                    2f:6f:82:18:d0:7a:f8:5a:ee:a0:b2:7a:5e:2d:7b:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:CE:4C:A4:86:08:BE:92:CF:1E:D2:2A:AD:09:05:23:25:BE:5E
            X509v3 Authority Key Identifier:
                keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0e:dc:bd:5a:23:fd:76:1c:5d:db:ea:4b:47:ec:48:f4:29:
         4c:56:a9:b0:78:e2:d9:57:c7:24:a1:6a:c0:78:ab:28:22:33:
         69:42:94:ec:4a:df:08:70:8a:fb:22:10:b6:ce:10:5d:cb:88:
         93:da:82:2b:3c:e4:fd:45:a1:c7:a4:25:a7:41:cc:10:62:f0:
         a5:a8:3e:03:6d:1b:35:fb:1f:d5:fc:f0:53:8a:b9:2b:e3:a8:
         e5:17:08:6b:64:16:f8:1e:08:79:61:ed:88:de:70:23:9f:bb:
         55:fc:0c:9a:12:fc:f0:88:cd:1e:9a:17:5a:f9:77:06:90:ff:
         b4:7e:c2:43:50:ac:70:3e:a3:ce:d9:2c:83:82:1d:da:dc:39:
         da:24:a4:4f:6c:82:45:e3:83:a1:55:d1:1e:e3:f9:1a:99:69:
         1c:fa:14:cc:14:0c:f5:dd:c4:81:5a:a0:5d:91:6a:f1:dd:2f:
         e6:15:9a:b3:8e:e1:a9:61:26:56:5a:f0:05:9e:55:40:75:cb:
         a4:d7:bd:93:2f:25:73:20:9a:5c:5c:ef:94:5d:a0:2f:99:2a:
         10:03:8a:ad:e3:e6:8b:41:6b:98:4c:97:a9:80:01:58:2e:7b:
         a0:b4:56:34:77:64:af:25:57:f8:76:3b:bf:e7:4d:6f:28:61:
         c5:f2:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:53:25 2025 by rpki-client