This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File:                     bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier:          XDz/asnO5PZwr/r7YTklYCl1VVeJr7HDD+zW/BrQHwk=
Subject key identifier:   24:4F:CF:B3:30:34:06:34:D0:25:83:00:35:92:4D:06:68:4D:4D:0A
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer:       /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number:          0164
Signing time:             Fri 05 Dec 2025 02:10:16 +0000
Manifest this update:     Fri 05 Dec 2025 02:10:16 +0000
Manifest next update:     Fri 12 Dec 2025 02:10:16 +0000
Files and hashes:         1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: oPegD+kriyWmdHzRBNxoYs9cGheFQ+9sap2ZYgqOKus=)
                          2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
                          rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
        Validity
            Not Before: Dec  5 02:10:16 2025 GMT
            Not After : Dec 12 02:10:16 2025 GMT
        Subject: CN=69323f08-1481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:ab:ca:df:7c:9e:b2:c7:54:7c:1e:31:82:
                    2d:cb:92:19:5a:b8:3a:6a:70:c4:9a:d0:ff:6c:59:
                    54:ad:cd:b8:c3:6d:2c:17:cb:c8:5a:cb:13:f4:44:
                    d2:76:4e:1e:33:90:14:a5:12:b4:06:46:e4:1c:ae:
                    93:0a:f6:6d:a2:b7:dd:d7:b0:87:73:c0:ec:eb:0a:
                    68:d9:d1:4e:f3:5a:0d:64:70:7e:fd:96:83:26:91:
                    56:24:e4:a0:37:3f:81:19:81:c7:81:5f:4d:67:40:
                    48:e1:cb:9b:56:97:ce:75:71:89:8e:59:0a:ae:d4:
                    67:c2:10:86:92:62:2c:6e:9a:c7:95:c2:00:0b:3c:
                    d5:5b:9a:be:0f:33:ca:13:ea:8d:e2:ca:cd:40:d5:
                    d4:da:9f:87:cc:81:d5:2a:28:7c:50:36:22:07:08:
                    c7:29:d4:3c:79:4b:32:0b:8a:d9:9a:36:ef:c8:54:
                    ce:c8:8a:9a:9a:96:ba:a1:29:44:18:94:d3:3c:42:
                    0d:3c:df:b8:56:8e:f7:03:36:a3:3f:fe:b6:25:9e:
                    2c:fc:94:68:0b:96:0a:4d:8f:ad:be:fa:87:be:25:
                    60:2e:54:be:e8:90:26:a4:63:a3:ae:f7:97:0e:2c:
                    b0:8b:1c:a7:6c:d2:7c:63:26:89:53:a4:d3:20:31:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:CF:B3:30:34:06:34:D0:25:83:00:35:92:4D:06:68:4D:4D:0A
            X509v3 Authority Key Identifier:
                keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b6:ff:dd:4a:64:4c:69:c4:17:d4:88:10:ff:bb:b7:bd:94:
         78:25:e0:73:92:c0:22:a2:47:2e:90:c9:02:6c:4d:10:7b:40:
         6e:09:cd:f3:88:bf:07:fa:41:4a:dd:94:46:de:36:e6:aa:41:
         f6:b5:48:c5:53:7a:2a:25:8c:61:38:0c:5e:a0:74:77:db:2d:
         4c:1a:be:12:44:e5:50:c5:11:ca:f0:b9:84:78:56:89:4a:3a:
         5d:a3:c7:56:0b:d7:1b:5b:24:ae:7e:8f:cc:eb:64:5a:71:ba:
         35:6c:3f:77:38:72:98:51:5a:50:72:c3:d2:26:f8:af:9c:cf:
         02:48:fc:54:cd:2e:be:9a:48:e4:b9:63:8f:d6:fd:e3:c9:42:
         6d:0e:2e:08:df:f8:55:e9:84:ad:59:8a:0b:6c:a7:e5:7c:01:
         0a:a9:7d:bf:45:ce:87:e8:4d:14:71:02:48:ab:16:72:d0:6a:
         23:fa:83:02:1b:5d:8d:ab:94:4f:3e:1e:f3:e5:07:a3:39:56:
         7c:25:06:65:b5:51:27:cf:c3:88:e0:5b:fa:80:65:f0:53:0b:
         5e:3d:0f:b4:26:97:f3:41:fe:41:b5:ba:e7:ee:50:97:7f:9f:
         8a:61:a9:f0:69:d5:78:64:e6:f8:a0:11:1c:65:49:9d:53:65:
         3c:27:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:01 2025 by rpki-client