This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File:                     a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier:          QKv9Tc/S75rlx5PHWMzEGMR2FtLvC37r1XHlRkCMZ70=
Subject key identifier:   B1:47:75:66:DC:16:27:AD:83:0E:ED:DA:DC:EA:50:36:E6:27:02:2C
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0D13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number:          0CFB
Signing time:             Sat 06 Dec 2025 17:31:04 +0000
Manifest this update:     Sat 06 Dec 2025 17:31:03 +0000
Manifest next update:     Sat 13 Dec 2025 17:31:03 +0000
Files and hashes:         1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: XDloSmLmKRBoXiCRE9MBbGj3g718XcMW0KvzmkViLew=)
                          2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: Q8R6RdYUX7rY4VWbBZw5PBzAwbilsPbivqpkW+dr/Ec=)
                          3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: rkTwGBJDEcILt7naFyYrumMd/+qJZboX4q6K9aobNao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: Dec  6 17:31:03 2025 GMT
            Not After : Dec 13 17:31:03 2025 GMT
        Subject: CN=69346858-d65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:ab:5e:94:82:d5:20:23:7b:e4:32:2a:22:
                    92:6c:89:b9:25:90:ef:cf:6a:4b:40:83:80:a1:6a:
                    a7:2b:a7:50:86:bf:ba:34:9c:b7:ff:da:9f:47:3c:
                    2a:85:2c:56:13:0f:3a:c0:b6:11:80:3c:0c:84:73:
                    3e:42:14:2e:64:14:b6:5d:42:de:53:2b:c6:2f:0a:
                    56:64:b0:a4:e5:db:f8:7e:76:aa:0e:cd:9b:b9:39:
                    eb:f0:61:f2:5f:d6:b1:2f:58:d9:a8:5a:52:d3:bd:
                    72:d4:92:9e:85:d0:74:7d:72:a8:69:c0:6c:8e:90:
                    fc:80:c3:3e:f1:a7:06:ed:9d:6d:38:66:fe:cf:cd:
                    5b:42:64:6b:f4:f8:b4:92:80:ce:97:70:12:da:93:
                    fc:e8:9f:fb:6f:53:3b:8a:2b:42:96:29:c8:05:11:
                    e1:a4:ef:31:83:fe:1c:b1:68:05:e6:17:92:2e:f9:
                    7b:c1:db:37:03:64:ff:ab:b7:28:7b:bc:b1:b2:0a:
                    d0:22:26:61:58:1c:33:dc:8e:03:36:e1:de:8a:37:
                    29:00:fd:d2:a0:a5:cb:1a:96:32:3c:28:a8:8d:6e:
                    7c:6f:d8:59:e0:bc:1d:93:54:c0:43:56:d4:71:83:
                    d9:1f:ca:5e:09:ea:c5:9d:22:8d:fc:42:58:d1:a2:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:75:66:DC:16:27:AD:83:0E:ED:DA:DC:EA:50:36:E6:27:02:2C
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:a0:85:d0:e4:af:3f:06:a2:11:f2:8a:2f:ce:59:24:08:
         e4:23:89:b4:54:eb:eb:7d:1e:7e:01:29:90:5c:01:9c:b9:b6:
         9d:09:e9:79:b2:9e:82:14:b7:47:a7:10:90:3b:ff:c7:19:bb:
         eb:a3:8c:b2:f7:9e:ac:a4:de:d8:0d:af:b9:62:fd:1e:3e:c6:
         2b:28:51:f3:da:1e:5c:a2:88:ee:68:fb:a6:c8:32:f3:78:20:
         fb:9c:03:fe:e3:c3:58:28:ca:a1:ce:31:df:03:cf:65:05:bc:
         94:b8:af:ee:9a:85:0b:87:69:ec:ba:e5:3a:08:13:fe:f4:58:
         59:06:b2:6f:23:6c:6f:07:b3:d8:08:01:74:48:60:93:23:87:
         cc:69:fe:93:ca:39:0b:f2:bb:75:eb:64:cd:0c:30:21:92:17:
         73:58:41:31:94:f5:cd:9b:90:a5:fb:8c:4e:5f:0b:af:3a:be:
         c7:2d:62:e4:49:70:f8:f6:a7:2b:c2:4f:90:d2:89:81:05:a0:
         78:bd:cc:ac:f9:c8:f8:28:0f:0f:c8:f4:38:ce:6a:00:07:bd:
         b5:04:79:14:1e:11:17:7c:3e:25:7d:5c:d3:b2:91:08:61:c3:
         35:d0:dd:cc:4d:40:eb:5b:05:a7:45:ee:5b:e7:b5:33:32:04:
         c3:6c:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:13 2025 by rpki-client