This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          Wqo5o37GMWuX3MlMGlpjcyc3QO/ZRUxTP6hre7rGmHE=
Subject key identifier:   CF:21:F0:23:91:EB:A3:98:29:9D:AF:C4:81:E4:3A:84:7D:24:6C:0C
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          EA
Signing time:             Fri 05 Dec 2025 03:26:03 +0000
Manifest this update:     Fri 05 Dec 2025 03:26:02 +0000
Manifest next update:     Fri 12 Dec 2025 03:26:02 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: jltQ7nKs9Cd4CP+pqZhMVTkUwUlyqqQFzGzhE5hEgog=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Dec  5 03:26:02 2025 GMT
            Not After : Dec 12 03:26:02 2025 GMT
        Subject: CN=693250ca-a407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:40:1a:b3:13:af:ab:0b:c7:ea:e8:e9:d3:86:
                    bc:e1:6c:76:da:25:35:cb:f6:a5:94:2d:20:9b:81:
                    43:ca:a1:75:f7:8b:83:f8:35:6e:16:3e:1e:46:c2:
                    6b:d1:11:61:95:7a:ad:5a:6e:da:96:10:88:d2:83:
                    33:9f:09:bd:f9:86:38:d6:2b:47:f5:54:51:73:29:
                    30:82:9a:92:7c:f3:e5:53:ca:65:bb:b6:5e:62:79:
                    3d:96:f4:47:dd:eb:90:0e:2a:48:c1:57:45:15:98:
                    f3:fa:a9:b8:ee:da:fa:36:b7:5e:e2:be:9d:86:d5:
                    72:f2:f3:2d:41:71:04:b7:bc:b0:37:7f:9b:cc:d8:
                    31:1f:57:69:1f:c7:61:4c:86:29:a0:88:8b:14:40:
                    34:b5:81:7d:57:6f:3f:34:f7:55:20:e8:90:db:d3:
                    bc:06:62:38:79:af:a2:62:d3:3c:c5:c8:d0:23:96:
                    66:a9:f1:d6:b1:19:0d:a9:17:ab:f4:7b:d9:dc:27:
                    a7:08:ff:ef:0a:b2:2b:7e:a1:0c:ef:1f:fe:da:3b:
                    05:9e:59:57:a0:a2:dc:11:fc:5e:71:a9:25:82:6b:
                    dc:60:9b:01:2a:b1:c2:a0:81:a4:a2:76:97:46:81:
                    2a:39:56:d1:76:bb:90:12:a4:a1:a4:c9:40:d4:8e:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:21:F0:23:91:EB:A3:98:29:9D:AF:C4:81:E4:3A:84:7D:24:6C:0C
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:16:b6:0a:ea:d5:31:f7:50:5a:78:1a:dd:ba:0d:d0:41:
         1b:53:0f:d9:ba:19:c8:25:68:ab:ea:63:01:77:22:fc:bd:15:
         95:26:00:77:99:62:56:53:e1:22:67:10:c6:9d:05:92:c8:a9:
         35:95:10:72:08:6b:fa:10:76:79:23:6e:e1:8e:d9:31:9a:9d:
         7c:28:51:b6:ea:7c:c5:0f:5d:59:a9:29:ab:a3:51:e1:3f:a6:
         7b:ce:b7:b7:79:f1:5b:1c:18:74:b4:d7:c3:9d:67:ea:dd:8c:
         96:50:ba:b2:75:89:56:7c:99:25:10:16:7d:49:25:9f:05:27:
         05:c1:ff:fa:71:73:8f:66:40:aa:f6:a4:6f:54:b4:10:c8:49:
         de:67:bc:7e:47:c8:f4:5e:fd:9c:a8:a7:b0:c7:9e:8e:fb:cf:
         9e:81:88:29:dc:0e:9c:c0:08:a4:46:37:31:1a:e6:32:77:0b:
         9f:9a:93:b4:f1:3b:fd:d5:4f:ee:79:26:f4:1d:83:86:35:55:
         41:55:12:03:f9:e1:a7:30:04:fa:8b:97:6f:10:10:13:67:0c:
         40:11:11:13:01:1b:9d:6a:f5:12:48:4c:f6:36:3d:fd:1e:27:
         72:20:1f:84:19:9b:94:cc:6d:93:33:b7:c9:37:74:5b:06:45:
         8e:ec:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:20 2025 by rpki-client