This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
File:                     U76BKLnP6HdJhH5kRfquGociydI.mft (raw, json)
Hash identifier:          NyvbowcrHRIA/S44H9U0EQtggMPRcaPw81CC6lve8uo=
Subject key identifier:   38:2E:C4:3B:B0:B3:8D:22:80:2E:63:20:8F:54:91:79:CD:EB:D7:30
Authority key identifier: 53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2
Certificate issuer:       /CN=A91BDC6D/serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
Manifest number:          27
Signing time:             Fri 05 Dec 2025 05:31:17 +0000
Manifest this update:     Fri 05 Dec 2025 05:31:17 +0000
Manifest next update:     Fri 12 Dec 2025 05:31:17 +0000
Files and hashes:         1: U76BKLnP6HdJhH5kRfquGociydI.crl (hash: Wj0fpFzk9Ahk2V6Us2en7ZGxPCLwc6Xt6mC45LNaaSc=)
                          2: C6425B12981D11F093FE8643C4F9AE02.roa (hash: cHtHl0mfRr10cBG++S9xArUxnFAw0CPyJZEh1n1ePUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC6D, serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
        Validity
            Not Before: Dec  5 05:31:17 2025 GMT
            Not After : Dec 12 05:31:17 2025 GMT
        Subject: CN=69326e25-9ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:6c:b5:79:4c:b2:63:8d:ef:68:81:68:f9:
                    e9:7b:2f:11:7f:82:e7:b1:4b:7a:dc:c0:13:6c:33:
                    ee:39:c4:6b:0b:85:09:c0:50:4f:f2:a6:b8:1f:16:
                    db:c8:9b:7c:cb:b7:23:68:cf:5c:47:8f:ca:08:48:
                    a8:d5:9c:28:a7:06:d8:60:4d:66:28:20:f0:ab:37:
                    ba:09:8a:3e:ab:ff:68:5a:0a:96:53:c3:d0:5f:5f:
                    31:ce:5f:1a:72:91:08:44:cb:b4:84:14:b9:34:14:
                    a7:36:fd:56:59:33:f8:29:eb:2b:d9:65:6a:aa:5c:
                    cb:0e:1c:4d:0c:42:ae:4b:3c:56:33:f0:55:3e:ab:
                    8e:8f:44:24:96:2b:b6:4d:de:c5:93:39:0a:8c:ef:
                    83:c1:85:d5:a4:99:00:90:19:e7:8f:81:38:a9:89:
                    bf:22:c6:8d:db:58:a8:b8:80:2c:cd:49:70:19:f6:
                    28:11:52:5d:27:48:c2:d7:76:60:2c:78:22:65:bb:
                    ee:3b:c3:d1:89:5c:83:e5:45:39:97:59:05:98:2e:
                    b1:c5:bd:f3:b8:4a:51:14:34:60:20:15:44:3b:01:
                    4c:b4:04:8c:c9:83:9b:8b:bf:09:9f:77:a8:1c:c6:
                    7c:fd:3e:9a:16:19:53:18:2d:15:95:10:e6:af:9d:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:C4:3B:B0:B3:8D:22:80:2E:63:20:8F:54:91:79:CD:EB:D7:30
            X509v3 Authority Key Identifier:
                keyid:53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:68:13:6a:bd:4b:66:77:42:28:1b:f1:d0:e8:fd:01:50:1a:
         71:75:cc:1b:49:91:bd:48:eb:b4:47:8e:b0:ce:52:47:92:4e:
         e3:2b:be:be:1b:c1:5f:d5:77:8c:71:40:62:81:2a:b0:a5:b5:
         43:69:c4:e8:f7:a2:1b:48:3c:72:42:b0:4e:45:5d:df:eb:eb:
         66:53:53:2e:68:bb:2b:ce:e8:12:e5:22:b0:73:e4:b5:8c:04:
         41:1e:5b:52:9a:b8:4e:9d:63:86:cf:e1:3c:0b:50:e7:1f:33:
         30:e4:7d:4f:22:0d:30:fa:81:f4:4a:3d:e7:2f:13:43:b0:88:
         94:a5:15:a1:ef:d5:c7:49:a7:49:fb:1b:72:3b:38:7e:da:91:
         63:c1:26:69:f1:2e:69:c2:0c:6c:91:bc:c0:8b:bd:69:4d:09:
         4a:12:71:56:cc:5a:36:9f:92:a7:2d:e3:2c:5e:2c:ad:47:c1:
         20:bf:f9:b3:b6:dc:87:85:ab:ac:fd:20:30:e4:72:62:3c:a0:
         d0:74:c4:c4:9c:ab:d4:a7:fa:68:99:2e:17:2e:c0:1f:04:90:
         16:6b:d0:7e:d5:9a:b2:c9:aa:fe:dd:58:7f:15:25:9c:cc:14:
         fe:bb:ad:99:d6:a7:6c:60:e6:7e:94:55:d6:9c:43:6f:4d:4f:
         89:b4:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:53:17 2025 by rpki-client