This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          vu8vDzH2VGmTvwM0c/jaC8vrs+DLZYlw/5gxFyjs8rA=
Subject key identifier:   96:FC:FD:FA:45:82:3E:AC:7C:27:C6:91:9C:10:1A:B0:01:6F:0E:52
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          018E
Signing time:             Fri 05 Dec 2025 01:44:43 +0000
Manifest this update:     Fri 05 Dec 2025 01:44:43 +0000
Manifest next update:     Fri 12 Dec 2025 01:44:43 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: h7ujUB+Ls/j9ZV2QNw7cIRqi7+PfU0fSod406rOC1wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Dec  5 01:44:43 2025 GMT
            Not After : Dec 12 01:44:43 2025 GMT
        Subject: CN=6932390b-dd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:03:10:de:bc:83:12:bf:24:b7:5f:b7:54:
                    00:0f:e4:fc:79:c8:ad:d4:46:c1:df:84:f9:d4:4d:
                    19:1c:c3:b9:72:66:65:91:87:95:d1:7f:c2:75:80:
                    8d:6d:b8:d4:2a:4c:2f:85:44:ea:86:7c:f4:ba:cd:
                    77:fc:37:44:06:e2:63:e3:ae:63:66:53:b8:90:49:
                    d7:83:ec:94:42:66:98:2a:d7:90:a4:e4:fe:20:4d:
                    9b:23:a0:62:d0:b2:15:6c:e2:0d:79:54:5b:32:e7:
                    94:b3:10:be:82:e4:e5:11:da:a3:ca:ab:94:3f:63:
                    29:1c:21:b5:04:77:80:72:1b:30:9e:16:9d:9c:c0:
                    2f:d1:21:79:42:2d:85:9f:65:42:4c:b7:16:05:9e:
                    b0:d5:9a:d8:49:12:81:53:ee:7e:1a:41:e2:ea:ce:
                    40:7e:8d:8c:f6:eb:42:f2:1a:0a:cf:9c:00:ee:a9:
                    23:9b:c0:4d:8e:88:f6:0f:b6:fc:8b:ba:31:ac:e0:
                    4c:52:b4:3c:d8:55:23:5d:69:b1:38:21:83:bc:19:
                    b9:e6:70:96:4a:82:b4:5f:79:b2:af:62:a9:c7:3c:
                    71:c4:2d:9c:96:ca:2e:01:c7:42:d0:56:05:5e:4e:
                    cb:9a:03:d1:b6:1d:0e:91:06:47:e4:71:4f:d4:f7:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FC:FD:FA:45:82:3E:AC:7C:27:C6:91:9C:10:1A:B0:01:6F:0E:52
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:c6:3b:9d:da:28:a9:28:ca:7b:f8:13:06:a1:9f:c9:fe:
         58:98:04:d2:5c:14:c3:4d:0b:52:a8:de:4c:df:da:cb:61:5d:
         6c:9d:f4:91:17:6d:c1:9a:a1:34:06:f3:6a:a5:03:d7:de:4e:
         44:28:d5:cc:e9:00:fb:11:57:67:08:a6:16:26:c5:b8:f5:9a:
         99:0d:2f:03:1f:e4:24:5b:56:fd:d6:a5:4e:04:e1:c9:b0:2a:
         d3:58:ca:03:e0:3c:cb:5f:ef:f0:08:78:cb:be:31:b3:76:9e:
         90:bf:78:ed:4b:fd:40:29:51:7c:7c:dc:e3:c4:a5:e5:57:bf:
         bf:0b:42:1e:bc:d9:99:51:08:06:a7:2a:e0:58:63:c6:3d:a7:
         c6:96:0a:be:48:df:a8:39:44:8c:f9:28:e9:8d:74:9d:50:d4:
         f0:5f:8a:30:4d:79:a5:f2:c3:f3:15:a9:dc:59:24:f7:ea:31:
         35:2d:b3:49:83:c9:24:7e:1b:a6:73:20:12:3a:a8:74:38:bc:
         0f:75:d6:e5:b5:be:de:7f:37:a3:ef:2e:be:7f:79:86:92:7a:
         8a:9c:16:cf:72:ea:5f:63:ee:79:ed:5d:c8:0b:bc:58:a3:51:
         11:05:56:cf:e5:60:7e:68:d7:59:e0:52:8b:9e:90:63:f4:d1:
         ea:1d:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:27 2025 by rpki-client