This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          846UyrcaoGzyLJ54Vwfnkrp3l8M+6x2AqMpc8fgb+d0=
Subject key identifier:   BA:37:11:2F:4C:1E:B2:C1:DA:08:5D:00:99:DD:C3:2F:C2:4E:50:02
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          01DD
Signing time:             Fri 05 Dec 2025 01:09:40 +0000
Manifest this update:     Fri 05 Dec 2025 01:09:39 +0000
Manifest next update:     Fri 12 Dec 2025 01:09:39 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: 63xxjuwEJEKppaOWVZz9LUvWrgoKeEFkq5Z3r6UybUI=)
                          2: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=)
                          3: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: MH6wsYDU+7B4vBy0zb2eprwe8/XNCjBzLMel9f7LB3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: Dec  5 01:09:39 2025 GMT
            Not After : Dec 12 01:09:39 2025 GMT
        Subject: CN=693230d4-b6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:d7:74:79:fd:49:ba:77:87:61:5e:75:0a:
                    5b:fc:d5:d8:47:75:af:73:7d:f1:e3:3a:36:d5:61:
                    c5:7d:52:4f:4d:c5:ad:d2:b7:58:20:e2:58:a2:b8:
                    7b:7f:84:e6:58:dc:54:b1:cd:7a:98:68:41:01:ad:
                    78:f7:50:48:7c:96:a9:98:1e:58:4a:8c:af:f2:fb:
                    eb:2c:42:15:4a:dd:f1:7f:ac:fb:c1:04:2e:3e:05:
                    87:14:39:2d:c7:dc:17:06:1d:91:1d:a7:73:9c:ba:
                    38:09:ae:71:74:2e:d7:50:b7:54:2f:89:fa:d8:39:
                    da:49:38:18:79:66:c8:db:6b:b4:ad:f2:7e:19:46:
                    0f:38:a9:2e:56:7d:40:58:09:f8:6c:17:87:51:d8:
                    63:93:c2:f3:03:7a:0e:45:f5:a8:b1:70:b2:d1:a1:
                    c3:69:7e:d0:a2:ed:a6:07:16:b4:a8:55:46:05:c8:
                    49:95:9a:78:46:53:03:3c:da:72:fd:67:a8:74:8e:
                    29:ce:3b:2d:5f:3e:0c:40:ff:62:a8:8a:b9:29:55:
                    b3:75:ba:d9:f9:21:9b:c1:7f:44:05:c1:ea:90:58:
                    9c:59:43:84:2f:99:7b:5d:33:ac:a1:23:6d:f3:78:
                    1c:d9:e6:55:eb:02:28:cf:ed:e3:c4:21:ef:c0:1e:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:37:11:2F:4C:1E:B2:C1:DA:08:5D:00:99:DD:C3:2F:C2:4E:50:02
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:e9:39:46:d4:11:9e:5b:98:42:e4:e9:7e:c9:74:32:8f:
         fb:92:af:e9:76:c2:ca:33:30:4c:39:9e:c6:c0:ca:aa:95:67:
         f2:7b:60:71:ca:7e:31:44:38:83:58:a4:7d:88:a3:0f:8f:39:
         a2:b7:eb:8c:70:ef:c3:c2:72:47:cf:78:08:24:e5:28:22:4d:
         98:ed:06:06:bb:f3:c1:82:c2:3d:ec:69:3e:5c:ba:d6:91:d8:
         5b:de:d6:ae:81:58:e5:ea:d3:5e:21:1d:35:a8:e5:aa:2a:9f:
         a4:17:16:8c:05:34:02:c6:0b:10:26:6d:77:83:b1:47:dc:74:
         db:28:bb:5d:78:ee:19:c3:2a:39:5f:1f:73:f7:20:27:67:07:
         c8:44:9c:f7:03:2e:29:7f:7f:b3:70:5f:36:ba:b0:79:12:50:
         3a:4c:79:2d:37:41:96:cd:c5:37:5a:66:bb:d3:36:8a:03:9f:
         95:dd:86:ff:2b:90:68:3e:7e:cb:6e:b3:77:18:a3:11:09:82:
         e1:41:ae:18:86:37:1a:05:79:32:1b:f8:80:05:ed:40:fe:26:
         48:22:2c:f5:92:c1:94:e5:b1:c5:e6:45:88:7b:71:fe:0f:77:
         f3:59:4f:36:3f:23:b7:bf:03:e2:80:c4:d9:3b:bb:af:85:fb:
         06:a8:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:57 2025 by rpki-client