This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          sQGxqS4qFxqMuKPgEPC5SQY5F7b1JPaZ+SdF2vR1x8s=
Subject key identifier:   39:CC:67:07:A5:56:10:FB:D2:B8:8E:D5:AB:80:54:27:AA:3A:9B:2F
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       02DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          02D8
Signing time:             Thu 04 Dec 2025 23:43:03 +0000
Manifest this update:     Thu 04 Dec 2025 23:43:02 +0000
Manifest next update:     Thu 11 Dec 2025 23:43:02 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: 7EQFriYnLxPZ2BG9DrQqCtAlkkw1W8tTUNyN7QQBybU=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: e4e/2weEWR9V4/NE3J2YPV05BSS+/w2P0bwX2/dmeeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: Dec  4 23:43:02 2025 GMT
            Not After : Dec 11 23:43:02 2025 GMT
        Subject: CN=69321c86-8b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:8f:1f:73:db:da:e1:12:9d:83:f9:4d:9f:
                    57:a8:7f:6d:85:20:e2:93:ae:e0:e9:30:18:14:6b:
                    60:7a:45:ca:9f:2f:34:23:b0:ef:a5:d8:62:32:27:
                    0d:69:7f:f2:66:1b:9c:7b:5c:b7:79:ca:f1:a7:83:
                    c0:70:6e:f7:d1:5a:d4:02:8e:f8:b3:8a:d3:33:08:
                    e0:52:f8:8e:0c:14:00:eb:02:97:9e:13:57:fc:2e:
                    cc:1f:61:02:0d:b8:ec:2c:40:e0:51:04:bd:f1:e3:
                    cb:53:e2:40:40:3b:5a:c9:10:7c:2a:80:e8:03:48:
                    a8:7e:b5:7b:31:a9:bf:6b:f5:83:dc:6f:c3:0f:29:
                    8d:b4:73:4b:c5:ad:e1:a5:f0:5a:0c:95:1c:23:26:
                    fc:f7:d3:ab:29:93:8b:4f:d2:d6:c7:b8:79:ca:ef:
                    ff:79:cc:9c:60:b8:7c:1f:8f:13:1e:50:d5:7d:f0:
                    cf:65:33:52:88:fe:8a:b0:c5:87:0e:ae:31:7f:f6:
                    7d:94:98:0a:b2:0f:35:83:0f:87:d1:af:b6:69:ca:
                    1c:6d:20:9c:ea:9f:e6:20:35:42:e4:af:88:5b:ff:
                    20:29:47:d3:cc:8b:54:b5:d9:2d:00:6c:70:70:e2:
                    a1:00:bc:57:1c:b4:b0:64:52:77:1f:c6:4e:cb:48:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:67:07:A5:56:10:FB:D2:B8:8E:D5:AB:80:54:27:AA:3A:9B:2F
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:a1:d4:1b:53:55:57:81:71:cf:39:f7:5c:e9:e4:3e:4e:
         71:16:36:7c:de:0e:50:50:fd:91:cb:07:bc:af:23:91:f1:16:
         8f:df:b8:3d:bf:45:8f:ed:72:2c:c9:46:d6:ff:a2:3a:48:81:
         0f:0b:a4:d1:2c:c6:04:de:fd:59:85:ac:2a:d8:cb:ed:09:e6:
         c4:2e:0e:0a:d1:06:d4:fd:88:79:21:ac:6c:e7:86:9b:d5:ed:
         70:c0:f7:72:e3:78:67:5f:91:24:00:93:28:a2:2a:6f:26:ff:
         0d:1c:16:6f:f0:b4:8c:14:76:bb:36:33:c0:c1:cf:cd:13:1e:
         7f:7e:b2:d1:16:ff:07:7c:2b:4b:51:eb:28:f8:fc:71:14:48:
         8a:3c:ff:56:a4:2d:14:12:9a:2f:84:b1:ab:a8:c9:c1:d1:16:
         ef:fc:26:55:52:d6:27:a7:99:c9:1a:c9:6c:7d:24:72:a9:1d:
         61:a3:61:62:92:51:6f:bc:c8:63:7b:18:db:1f:a4:1f:6c:7b:
         e5:92:73:24:11:89:c4:8a:bc:ca:e1:d4:46:9f:99:36:63:49:
         7e:7f:c1:21:3d:96:a4:2a:bb:94:5d:aa:b1:51:31:79:48:ab:
         f5:32:d4:b4:eb:db:d9:f4:04:36:e0:ca:19:81:1e:26:09:ce:
         84:0e:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:36:12 2025 by rpki-client