This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File:                     57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier:          aQvq0PntLbwou9GfIQUuIzVsMFKTzkpucfS2ugyzIiU=
Subject key identifier:   22:2C:FC:C4:74:D1:21:49:2D:99:DF:2D:10:A0:58:FF:BE:ED:EB:C6
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer:       /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial:       0E5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number:          0E50
Signing time:             Sat 06 Dec 2025 17:13:35 +0000
Manifest this update:     Sat 06 Dec 2025 17:13:35 +0000
Manifest next update:     Sat 13 Dec 2025 17:13:35 +0000
Files and hashes:         1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: 2grUnnEGjTOONjL2S3kpCdU4XGDfIr83j90wKhGIZeM=)
                          2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=)
                          3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3679 (0xe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Validity
            Not Before: Dec  6 17:13:35 2025 GMT
            Not After : Dec 13 17:13:35 2025 GMT
        Subject: CN=6934643f-6a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:4b:52:00:67:3a:28:f1:27:fc:74:4a:3e:
                    9d:c5:db:ad:01:cd:a6:47:2e:a7:e7:8b:3f:94:57:
                    74:0e:0e:cc:4c:bb:02:a0:f7:8a:ac:07:13:35:95:
                    94:db:4b:1a:e8:8a:c5:5a:59:4c:e0:3d:4f:48:7b:
                    65:01:3e:e4:3b:f4:15:62:e1:90:88:44:29:b1:a9:
                    1b:3b:2c:20:a7:b1:a2:98:20:a5:2c:9b:0b:78:83:
                    bc:a5:3e:b6:42:c5:1b:71:64:94:1b:47:52:77:f1:
                    be:9c:11:a6:43:d4:95:98:b4:ed:5d:0d:37:c9:b2:
                    67:9b:b6:c0:7b:09:23:14:d4:12:f0:e6:8e:79:65:
                    0c:f6:bf:d8:77:e9:14:28:8f:ed:12:39:37:83:73:
                    f3:09:90:bd:73:65:9b:71:40:33:b9:64:ce:e6:d4:
                    45:be:df:87:de:82:19:5d:32:45:a9:fa:39:bd:97:
                    6a:22:15:29:b9:8f:8c:56:5f:92:29:84:cf:a7:8a:
                    ce:58:60:00:f5:f4:e7:eb:cf:d5:c7:4f:ce:2a:41:
                    d4:f6:c2:d7:94:fe:24:6e:c4:32:b2:ac:08:95:fe:
                    d6:38:4b:66:b4:05:b4:39:2a:69:ab:33:df:5d:2f:
                    a0:07:58:33:ee:b1:17:00:af:8a:36:1f:ac:55:e3:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:FC:C4:74:D1:21:49:2D:99:DF:2D:10:A0:58:FF:BE:ED:EB:C6
            X509v3 Authority Key Identifier:
                keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c3:7b:cd:8a:b4:c1:e6:72:ef:37:80:7c:70:9b:d8:a7:06:
         42:e7:f0:2c:9d:7d:45:e4:2a:c2:29:38:67:b2:b7:25:ed:a1:
         88:4e:8a:6b:bb:24:da:ec:5f:e1:36:2d:5c:4c:34:61:d3:eb:
         3f:9e:11:b6:e1:3f:66:80:08:f8:0e:b2:01:ec:87:f2:97:4f:
         fe:0b:42:cf:dc:be:ec:6c:17:c1:c2:06:56:e8:59:8d:c6:00:
         b8:4f:0a:5e:a6:8e:d0:5f:8e:9c:a8:16:74:d4:01:6f:e7:60:
         0b:88:ed:44:ba:d7:8a:5f:9e:c3:1c:6a:3f:8a:1f:08:51:d3:
         d5:fc:4d:d3:88:3b:c0:32:45:2d:b5:3d:dd:2b:72:8d:cb:bb:
         c5:8c:ae:94:5c:07:99:d5:18:09:c0:d3:10:21:76:f8:bc:83:
         41:16:78:b1:4a:3f:6c:ba:d3:d7:74:70:d6:23:f7:13:95:89:
         0b:cd:e1:00:c7:c2:2a:e2:3e:44:cb:29:24:1b:22:c2:b0:84:
         62:0a:a4:3b:57:79:d5:ac:88:4d:44:3e:59:e9:80:bc:0c:40:
         a1:a3:e8:6e:06:5b:00:96:a9:2c:1c:d5:e1:a5:39:af:ea:4b:
         88:81:09:07:07:38:83:0d:a4:68:43:c4:00:b7:b3:40:5b:ea:
         fd:ac:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:24 2025 by rpki-client