This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File:                     sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier:          VQQ/1FLHoSud59SBpdLbTZLtIwKr8kn4QkRjWjHsWlI=
Subject key identifier:   10:73:7A:21:16:13:19:7A:24:F9:90:DB:AA:AB:20:AA:26:FF:AC:07
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer:       /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number:          CB
Signing time:             Fri 05 Dec 2025 03:48:50 +0000
Manifest this update:     Fri 05 Dec 2025 03:48:49 +0000
Manifest next update:     Fri 12 Dec 2025 03:48:49 +0000
Files and hashes:         1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: t0CnXuwUx1ISJk8uNVZmOJxrXMCkvxKdhumVzc834T0=)
                          2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: Yj2V8/6jOgitXcRoNNna3W/sKqY/mfOcuez+bXMF3yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
        Validity
            Not Before: Dec  5 03:48:49 2025 GMT
            Not After : Dec 12 03:48:49 2025 GMT
        Subject: CN=69325622-0a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:91:4d:0b:24:01:b2:9d:b3:ed:f5:48:64:
                    6b:ef:6d:32:5c:5d:29:4f:20:0b:09:d0:ff:c9:ae:
                    a0:79:af:3a:36:50:c8:ce:fa:56:62:a6:80:29:0c:
                    17:7b:ba:a3:4e:41:20:e9:fc:80:e9:c2:b6:c9:a5:
                    99:31:6c:f2:93:d2:fc:af:e5:30:0e:be:fc:d5:b6:
                    0a:c3:90:92:64:f2:35:cb:b3:fd:64:32:84:88:09:
                    33:95:18:f8:f0:9a:1a:3d:11:99:9e:2d:dd:93:fe:
                    45:9a:4f:db:b7:c6:4e:05:8a:21:e7:1d:2c:52:e9:
                    55:9f:d8:93:c6:86:33:6d:7d:62:fc:79:c7:70:0e:
                    18:f0:76:c2:34:18:ef:1f:79:62:de:d3:d3:3b:56:
                    bc:ae:a4:2c:38:70:88:a6:0b:42:1e:83:9d:7b:69:
                    77:84:6a:2b:40:08:0e:d2:2b:9e:ca:77:ed:80:e0:
                    d5:a0:08:f7:9e:94:2a:a8:4e:e9:b8:16:64:35:30:
                    b9:9f:b6:1b:b2:87:42:a3:af:8e:cc:b2:a0:93:f0:
                    7a:85:90:43:74:61:7f:d0:2e:98:14:af:bd:24:f9:
                    b9:62:78:c4:c0:fe:6c:05:39:11:ef:b6:ef:cc:24:
                    43:cb:44:f9:9d:29:d0:73:23:77:f0:28:8d:ef:f3:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:7A:21:16:13:19:7A:24:F9:90:DB:AA:AB:20:AA:26:FF:AC:07
            X509v3 Authority Key Identifier:
                keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:84:1f:2d:74:d6:2a:1c:6b:05:e1:18:c4:68:20:e1:88:17:
         0a:aa:e5:1c:a6:f9:ab:32:47:8f:d8:64:23:4b:a6:98:1f:e1:
         0f:91:37:bf:7e:0d:cd:82:7e:73:c9:28:4c:c5:0c:65:6f:0c:
         97:78:bd:8a:58:e6:45:fb:c2:70:3c:5b:f0:eb:42:53:3d:69:
         a5:a9:f0:1d:2d:af:08:75:eb:bb:46:43:df:af:d5:e1:97:35:
         74:20:54:fb:8e:40:96:01:88:9d:f3:98:99:a0:6e:5f:e8:45:
         ba:71:7d:58:54:b4:2a:6a:4b:a5:c5:80:03:4a:55:9d:bc:0a:
         56:ac:f1:da:8d:af:e6:57:74:84:5e:ad:96:65:74:fe:ce:aa:
         a5:86:8b:fc:29:fe:48:91:78:ea:d8:da:5f:0f:cc:70:84:cc:
         3d:2c:03:c5:ac:1e:fc:99:71:98:e4:4c:0a:77:c2:8f:82:08:
         47:76:41:2d:b6:40:97:cb:31:ce:4e:3d:d4:61:1d:51:fb:3a:
         38:9d:15:4f:4a:78:d1:32:ee:7b:ab:da:f6:f7:7c:d1:38:b5:
         9e:49:89:9b:53:82:d9:32:a9:53:b2:0f:dc:2c:52:d7:83:68:
         8e:c4:34:ac:3a:5a:49:c6:58:6d:b3:1c:cb:91:3e:32:9c:95:
         39:4a:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:29 2025 by rpki-client