This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          Fl/ym/YN++upBSFrmOCbeTWLKMGqqH1UOD8qJP2qEGs=
Subject key identifier:   AF:F3:84:25:49:8C:80:23:04:7A:9C:2D:33:9A:D4:90:38:09:FF:74
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0A91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0A86
Signing time:             Sat 06 Dec 2025 18:50:02 +0000
Manifest this update:     Sat 06 Dec 2025 18:50:01 +0000
Manifest next update:     Sat 13 Dec 2025 18:50:01 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: OvIvsoGtBjUCAhoboPOAy1R3pHO01V3nCogjmIZvOFA=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Dec  6 18:50:01 2025 GMT
            Not After : Dec 13 18:50:01 2025 GMT
        Subject: CN=69347ad9-340e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:cd:5a:c7:e7:db:d7:05:20:8a:64:a8:65:
                    83:47:00:22:65:42:87:9e:da:90:d6:6c:0c:47:1b:
                    e4:14:4a:38:ae:47:72:f6:ea:50:b8:a8:1a:62:bf:
                    c0:c1:7b:42:09:23:14:f4:96:bc:6e:63:8e:01:b6:
                    14:89:94:53:f9:f2:f6:a4:9e:01:83:ef:97:99:f3:
                    fb:90:b9:3b:27:05:dc:35:52:5b:dd:fd:9e:8e:db:
                    b2:9e:c4:21:d5:00:41:c9:f5:80:99:1e:61:df:77:
                    ce:60:76:5b:12:6e:e4:81:8e:07:a6:d8:cc:43:f8:
                    c7:3a:61:d9:9b:22:5d:b6:d2:30:61:d0:91:03:14:
                    47:6c:5b:20:28:63:a8:1a:b7:69:37:5c:1a:55:65:
                    d9:6e:25:ce:ff:6f:cb:47:a1:7a:0e:13:5c:b9:66:
                    db:69:9a:1c:30:6b:2d:83:8b:4b:52:20:3e:d4:c2:
                    58:cf:98:52:b0:8f:b7:fb:12:4b:1a:cc:48:31:f6:
                    b3:04:46:5f:6f:5d:2c:77:8d:b4:c7:db:c7:01:0f:
                    9c:de:f2:e3:3d:a1:3d:c6:30:0f:f6:4d:57:9c:b9:
                    1a:a9:c6:df:95:97:8b:6c:b3:36:5f:cb:91:51:5f:
                    8c:12:d3:57:ee:c5:cd:e0:3f:ff:4d:c9:ca:8a:cb:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F3:84:25:49:8C:80:23:04:7A:9C:2D:33:9A:D4:90:38:09:FF:74
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:1f:da:cf:dd:ee:82:23:b4:db:75:6e:a2:3f:0d:b0:6a:
         c1:36:1f:29:2c:39:7c:10:65:a3:3f:9f:4b:b5:39:4d:1a:15:
         ff:94:71:53:10:65:c6:ba:64:bd:a0:da:a2:a3:b5:fe:0d:4d:
         08:e1:37:67:82:e1:ec:ea:c2:a4:e9:bc:cb:ca:c0:2d:29:12:
         83:c8:fb:ad:b4:e6:b2:60:d2:84:dd:0f:b1:f2:f3:72:57:6e:
         4a:6e:f8:a6:e9:ce:af:ec:ce:9d:a5:c9:f7:2c:c3:68:f0:f2:
         5f:89:01:2c:54:39:fd:4f:62:03:4a:a7:62:9c:4f:b9:ba:c8:
         97:85:4d:5d:5c:49:8a:b6:b2:01:a4:82:9f:1e:6e:41:3f:b2:
         ab:1c:27:fd:a9:38:59:3a:d4:28:2c:27:98:e9:0a:c0:a4:42:
         d1:f1:4d:fd:19:6c:93:1b:3e:50:ac:2b:96:1a:dd:4d:a7:66:
         2a:07:4e:ae:d8:9c:dc:b6:20:72:96:7b:90:d0:b1:9d:2e:cc:
         7a:06:92:2e:77:e5:14:98:49:c3:69:68:fd:ac:97:e8:8b:6b:
         30:75:91:62:90:15:6f:88:7f:a9:ea:cc:d2:aa:e0:b2:1f:5a:
         c9:a3:a3:23:1c:66:f0:18:14:53:2f:b5:d4:1e:cc:56:96:45:
         7d:89:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:13 2025 by rpki-client