This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
File:                     72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json)
Hash identifier:          rrz7sz5PahcnbFvnJnfKIY+eXE/Ta+wCIT+vfm4U8ns=
Subject key identifier:   99:0B:2E:95:FD:AE:52:E3:9C:5C:41:C3:F2:83:35:92:B9:6E:B7:E5
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Certificate issuer:       /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial:       051D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
Manifest number:          050F
Signing time:             Thu 04 Dec 2025 22:36:34 +0000
Manifest this update:     Thu 04 Dec 2025 22:36:34 +0000
Manifest next update:     Thu 11 Dec 2025 22:36:34 +0000
Files and hashes:         1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: VvyJz/GMa359USp45a5SQ0m7Lu7p3wdgFxAS/MQyDEQ=)
                          2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: RtF3QF7uJka6OGDIQWbUTerYNiAs2ytZrcxGiAE5oMQ=)
                          3: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: ehKgJL5LpCf7RlyE1aWed3p9Jx0fKt/Hbu4XpQx0/fc=)
                          4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: yboxuGYa7ria6kIKGtokstUujAuaxIezyJo4PlnmwrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
        Validity
            Not Before: Dec  4 22:36:34 2025 GMT
            Not After : Dec 11 22:36:34 2025 GMT
        Subject: CN=69320cf2-3ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:80:0c:3a:25:a4:15:15:12:38:97:28:7c:
                    c0:2b:40:42:e2:90:b0:3b:58:89:e6:9a:65:e7:a3:
                    6b:fd:13:19:81:7a:df:b6:b0:33:e6:af:02:f5:1f:
                    a2:bc:61:39:5b:76:79:85:19:af:a2:c0:51:ae:c8:
                    6d:5c:d2:8c:f2:ad:76:ab:5f:35:17:fc:d0:79:0e:
                    eb:4b:37:d5:ba:7e:19:10:10:9e:ec:4f:aa:ca:1c:
                    b0:e9:cc:f9:62:dc:cc:82:e3:6b:88:57:0d:35:f8:
                    df:88:f1:8b:19:07:db:f1:f9:96:3d:77:ec:6c:1f:
                    7b:20:91:a6:fb:2b:29:07:f4:d4:ac:8a:38:aa:9f:
                    1a:d5:2c:e4:40:ed:e4:5e:74:ef:6a:9f:0e:34:e2:
                    82:7f:52:93:11:6e:3d:cd:dd:c1:79:e9:a5:22:98:
                    6f:a7:ad:9f:5d:a4:08:56:ec:b3:f9:0c:29:9d:50:
                    cb:c0:87:e3:c2:b3:8c:f1:0a:27:1d:07:96:b8:dc:
                    84:aa:19:02:03:8b:cf:4f:a0:da:87:b8:b8:1a:12:
                    16:84:e4:c7:2a:05:18:8d:78:7e:b6:55:63:db:43:
                    d2:83:23:3d:53:a2:1e:68:06:af:e0:15:14:40:c2:
                    f4:b3:7a:6d:74:18:2f:f4:d7:b7:92:ef:ee:79:d5:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:2E:95:FD:AE:52:E3:9C:5C:41:C3:F2:83:35:92:B9:6E:B7:E5
            X509v3 Authority Key Identifier:
                keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:67:e0:d9:32:70:0e:f4:75:ef:e7:62:a1:88:b9:c9:42:
         f3:35:df:9e:a0:d3:1c:31:bd:09:d7:f3:92:8f:1e:e2:6b:76:
         4a:59:8a:dc:11:83:c1:62:d8:27:87:03:8f:bc:34:97:36:47:
         f8:c4:0b:24:68:25:da:87:47:ab:aa:bd:39:9d:58:bd:dc:7e:
         3c:b8:f4:f7:93:1c:88:a3:41:62:c5:60:5b:4e:76:76:f8:ea:
         7f:6d:de:fc:4b:61:fd:83:8f:6f:c1:00:eb:39:dc:99:8f:f1:
         b6:c1:5c:26:29:b7:89:e5:c2:af:f1:53:95:5e:34:4c:ee:98:
         26:69:f6:89:51:4e:6c:91:06:aa:3e:41:6c:3e:02:03:c1:11:
         69:35:96:de:8d:f9:8f:d2:4e:6f:fd:8c:23:cb:fa:0c:08:6b:
         22:4c:49:2b:ab:db:e6:e8:af:a9:1d:78:fe:19:a9:1b:d4:3a:
         a4:64:71:dd:55:39:db:00:09:d4:5f:d8:c5:87:fd:d8:b4:7a:
         d7:a1:70:82:48:5d:a1:22:74:7a:d0:31:b7:d7:e8:57:4e:d8:
         42:26:bb:ec:8a:0b:87:6f:28:b9:54:37:ed:52:61:a3:d8:79:
         e5:b9:0a:ef:b7:61:98:3f:3e:fa:0f:1c:58:ff:d2:50:96:65:
         a2:70:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:21 2025 by rpki-client