This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
File:                     Py6661HMOPlbMj3QyF7oMK_jN7M.mft (raw, json)
Hash identifier:          /eAANUhns1s8deGB9Z608Q0XC8oE9uwWrYUGPWwyONU=
Subject key identifier:   3E:54:41:29:AC:3D:1B:EA:E8:78:66:81:F4:74:93:2F:E2:09:C4:E3
Authority key identifier: 3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
Certificate issuer:       /CN=A91C430B/serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
Manifest number:          1C
Signing time:             Fri 05 Dec 2025 05:37:11 +0000
Manifest this update:     Fri 05 Dec 2025 05:37:11 +0000
Manifest next update:     Fri 12 Dec 2025 05:37:11 +0000
Files and hashes:         1: Py6661HMOPlbMj3QyF7oMK_jN7M.crl (hash: zriFb3srhBUWqsRRXoS6/qLbvsrVH/HIogBjXEW+E98=)
                          2: B32AFC52A7CF11F0923B7A2BC4F9AE02.roa (hash: 1T9AoDGEXF0ooXdUIU1R51E1ZLMSnltdHdoWX3h7RIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
        Validity
            Not Before: Dec  5 05:37:11 2025 GMT
            Not After : Dec 12 05:37:11 2025 GMT
        Subject: CN=69326f87-efa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:5c:ee:7e:3b:f7:be:97:d1:bd:fb:ae:a0:
                    52:42:c5:84:74:6c:1b:0f:96:57:fb:e6:f7:0e:61:
                    a7:08:7a:28:27:51:e2:ba:1a:9d:9b:80:52:db:43:
                    15:17:17:83:be:56:28:53:cb:50:96:bb:ff:ae:c5:
                    a2:34:06:d8:b5:53:6f:ae:5a:3c:a2:18:9f:96:61:
                    ac:3f:9a:73:b0:db:3e:80:75:5c:31:4c:b3:eb:11:
                    56:0a:16:2c:73:27:45:dc:24:5b:22:34:45:76:c1:
                    3a:2e:d0:49:01:a5:91:67:53:cd:73:84:4b:8d:ac:
                    bf:ff:c9:0b:f6:7a:2e:a4:dc:4b:63:65:70:95:4b:
                    7d:a0:8c:fc:63:d6:48:53:bb:49:59:7a:9b:a0:68:
                    48:76:c6:3f:5e:33:4f:85:8a:ae:25:5c:80:78:50:
                    b2:15:5c:52:3a:36:f4:55:5c:3c:45:d9:4e:5e:da:
                    1c:ee:68:b8:3c:e9:a7:bf:06:17:89:cb:60:07:e5:
                    b3:79:ce:88:51:cf:9c:ba:10:85:78:32:77:46:20:
                    c7:f8:bb:14:7b:63:05:01:52:e7:60:9f:20:7b:f1:
                    81:5c:91:94:7b:3a:2c:35:26:76:f0:c1:c2:48:15:
                    bf:ab:4c:42:9a:d3:cf:2c:d1:3c:a4:95:36:7e:a1:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:54:41:29:AC:3D:1B:EA:E8:78:66:81:F4:74:93:2F:E2:09:C4:E3
            X509v3 Authority Key Identifier:
                keyid:3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:f9:09:44:90:61:87:b8:8b:53:35:2f:de:fe:d6:bf:ad:ff:
         48:60:0c:6d:7e:18:14:bb:d9:ad:3e:aa:20:29:44:93:83:0e:
         f8:3d:ef:26:5c:98:fc:88:3a:35:d2:15:d3:df:7f:e5:82:ec:
         84:47:1b:0e:44:eb:81:55:ac:96:d1:11:30:e7:f5:c5:28:28:
         02:c2:d1:5c:8d:8f:6e:73:c6:d3:c4:66:9d:ee:a0:51:45:ae:
         e1:9c:56:f3:58:dd:cb:cb:ad:8d:e3:d0:71:1b:d8:06:04:75:
         f4:d7:2c:c0:75:a2:04:8f:26:23:20:70:57:a5:51:ec:98:f6:
         cc:ea:1d:7c:68:36:fa:2a:c3:c4:b8:66:fb:46:aa:88:17:74:
         d0:ae:96:61:66:ad:53:26:14:e0:b6:79:56:f9:d9:11:f9:6b:
         11:a5:7d:a5:05:6f:91:5b:b7:b3:1e:1e:e1:54:1d:3f:37:42:
         a6:54:ab:02:ed:44:3b:b0:cd:ba:50:37:cf:64:39:33:3d:94:
         88:fd:ad:29:a4:0c:b4:b0:4d:97:a6:b2:c0:3a:6d:34:fe:c7:
         de:a1:70:98:bc:b4:72:78:68:f0:1e:fa:32:a1:7e:a2:aa:55:
         67:f9:aa:6e:f8:97:43:7d:67:75:c9:3b:88:34:71:64:e4:3a:
         69:f3:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:27:10 2025 by rpki-client