This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          ID8tFfW7lGQ3RmuFyjYp+a4rwdoP2p0xMOAmTqVySEg=
Subject key identifier:   E3:93:BD:D0:DF:D8:80:C6:C0:4D:B5:C0:A4:B2:4D:7B:2A:C0:A4:75
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       2589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          256D
Signing time:             Sat 06 Dec 2025 15:30:27 +0000
Manifest this update:     Sat 06 Dec 2025 15:30:26 +0000
Manifest next update:     Sat 13 Dec 2025 15:30:26 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: gpopDuUGE7aChWo/wnvMVZUaa/1T9GtU/vGTqNhJRWw=)
                          2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: 2XdDFumhJrXy6IXe/lYhN3ti1b3JjPjhpziW+Y/V7SA=)
                          3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: iZrS1s3zKi3WPbeCDiFNxotK29OIUocoDpBkJ3wbMfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9609 (0x2589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: Dec  6 15:30:26 2025 GMT
            Not After : Dec 13 15:30:26 2025 GMT
        Subject: CN=69344c12-ec63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:a1:ed:79:ac:f3:8e:e6:1c:18:fe:ca:b4:
                    60:d0:64:0f:08:f0:50:e7:41:f9:39:89:ec:7f:16:
                    4a:f7:88:88:6d:9f:75:58:d1:b5:84:d6:6b:e0:2c:
                    dc:f4:60:34:5a:cf:be:62:15:fa:81:5a:3e:7d:f7:
                    b7:4c:66:60:87:d8:c7:12:f1:44:9f:8f:27:0f:ce:
                    ee:dc:89:92:ce:90:75:5b:73:00:32:f3:05:5a:b6:
                    f0:bf:29:b5:f7:e1:2e:e6:c9:22:9a:96:56:57:2f:
                    03:89:0f:55:b4:a1:5d:bb:48:e0:b6:16:13:c1:36:
                    fc:c7:91:5b:d3:d7:ee:28:3f:09:43:18:eb:f9:8a:
                    c5:b6:6a:48:d0:19:ce:c9:58:23:18:aa:ec:b2:5a:
                    f9:ad:46:90:19:f0:0b:9d:bc:6c:6a:e4:0c:10:6e:
                    a0:5a:a9:52:00:64:ee:98:03:d7:2c:e0:52:be:01:
                    92:58:4e:ff:a0:ed:01:1d:d9:fd:e5:68:cc:8b:9f:
                    69:34:f7:b9:88:96:ff:30:cd:4f:77:2c:41:65:73:
                    bd:24:d3:9d:0a:ce:8b:c0:c4:b4:a3:1c:3a:40:9a:
                    7d:8c:e5:c4:80:30:6b:dd:66:02:e9:a3:26:f1:26:
                    09:73:46:9d:d9:d3:37:a9:46:25:5b:de:b6:cd:b6:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:BD:D0:DF:D8:80:C6:C0:4D:B5:C0:A4:B2:4D:7B:2A:C0:A4:75
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:77:fc:c7:34:11:ed:59:8a:05:7c:63:90:77:a8:f3:44:
         8e:83:66:4d:47:cf:d7:48:9d:bd:0b:86:31:70:40:5a:73:26:
         1f:2c:29:78:15:dc:3d:69:cc:1c:0e:c7:70:d1:1f:aa:17:5a:
         7c:a3:33:c9:df:1a:22:2b:b1:6e:ba:c6:c2:60:73:23:00:a8:
         8c:03:d3:ae:5b:cd:fd:5d:99:c2:69:b6:13:60:49:77:a6:ea:
         fe:98:7b:3e:db:69:aa:7e:cc:85:a1:bf:cd:63:96:24:b5:58:
         85:c0:c1:7b:50:90:09:ba:e2:c7:06:f2:0d:69:45:6b:99:66:
         17:c7:ab:48:68:39:be:43:74:9a:1f:91:1d:3b:bf:95:c1:00:
         66:66:7f:61:fd:3a:28:94:41:8e:42:dc:30:b9:8c:a5:74:ab:
         e5:8f:d4:ab:ed:d2:04:54:f1:26:10:8a:c2:c9:99:60:88:7b:
         ef:e1:54:5e:30:a1:3d:87:3c:d2:ba:73:2a:ba:33:cd:0c:24:
         9c:51:10:9b:6a:3a:d5:24:15:76:ae:d3:c6:ae:a7:be:97:11:
         72:fd:46:59:44:dd:52:b8:15:89:50:18:0d:8d:90:7f:27:5a:
         81:bb:cd:23:af:b5:0a:9f:c2:d2:92:aa:b2:44:b9:f5:4f:27:
         d9:f8:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 21:35:56 2025 by rpki-client