This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
File:                     S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json)
Hash identifier:          BQxgsU9nPCwoNKViJ6vPm5lGf730LwYVJEL9eCu/cds=
Subject key identifier:   A3:93:C3:FA:8E:B9:50:7F:CA:92:25:33:24:42:78:63:54:CB:3B:33
Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
Certificate issuer:       /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Certificate serial:       0480
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
Manifest number:          047A
Signing time:             Sat 06 Dec 2025 22:48:33 +0000
Manifest this update:     Sat 06 Dec 2025 22:48:32 +0000
Manifest next update:     Sat 13 Dec 2025 22:48:32 +0000
Files and hashes:         1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: KpXNQmIoaP/9b6mdjQ38bOJn8aupKdr9poG1GZYkb0c=)
                          2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: Hj2ed/vfEs3kfitU1w0BAdoi0iJDtRaYFfE12UdPkyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
        Validity
            Not Before: Dec  6 22:48:32 2025 GMT
            Not After : Dec 13 22:48:32 2025 GMT
        Subject: CN=6934b2c0-fd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:58:6f:9b:1e:fd:f4:61:29:96:d5:ef:92:
                    9b:7b:cd:21:5f:0b:23:0c:8a:a4:38:03:21:ff:05:
                    89:df:48:8d:8d:59:26:a5:7e:14:ca:67:e6:f5:20:
                    fe:99:65:84:33:9f:54:16:0d:05:23:53:8b:b4:07:
                    fb:35:05:65:49:51:b5:b9:fe:2f:6b:d6:00:64:20:
                    b5:14:39:ee:41:48:cf:37:e0:94:ef:02:cd:bf:c7:
                    a2:e5:16:67:36:fe:b8:bf:df:d2:5e:cb:7d:f5:90:
                    e6:78:c1:b3:4a:c8:7e:ba:61:c0:9b:22:2d:78:cd:
                    5b:23:a2:be:7d:28:37:51:fd:7b:35:e3:b0:26:ec:
                    67:61:15:02:ef:0b:e4:7a:4b:28:5b:a8:f5:1c:07:
                    cb:2d:0c:d5:39:06:ab:7e:a1:02:d2:24:3e:f3:b1:
                    09:ac:a8:12:fe:3f:47:13:fa:a2:67:cf:18:61:a3:
                    5d:f8:71:d1:f4:cf:7d:00:1e:08:70:85:37:2e:14:
                    3a:de:4d:bb:85:04:44:e2:f1:65:9d:1c:17:b0:2b:
                    70:eb:74:98:2c:c2:06:c6:02:e8:04:5d:da:10:63:
                    6e:1a:e2:82:7d:87:7e:0f:07:3f:74:59:21:49:8e:
                    29:87:9e:a8:c9:5c:d3:3a:3d:1b:8b:fd:cb:fe:f6:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:93:C3:FA:8E:B9:50:7F:CA:92:25:33:24:42:78:63:54:CB:3B:33
            X509v3 Authority Key Identifier:
                keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:1c:46:08:69:cf:fb:49:37:e5:f4:cb:ec:ca:50:d5:5d:97:
         c3:c1:ab:41:e1:cf:a4:c4:e0:0c:cc:b0:98:e8:fd:5b:80:c8:
         87:1e:0c:1c:33:07:a6:0d:24:0d:56:f0:a2:1a:73:09:52:ba:
         65:6f:63:22:13:7d:ff:66:d9:51:0c:7c:1e:bf:e9:6c:26:df:
         7b:db:eb:a7:c1:0f:92:a6:de:06:8e:3b:b4:fa:ee:bc:4d:22:
         01:95:81:26:ee:ab:d7:05:00:ae:0b:6c:fc:12:e2:5b:93:eb:
         e0:97:be:33:1d:c3:ca:19:72:1e:ee:e0:24:19:0d:19:ce:84:
         e7:ae:ec:f6:d9:01:8e:3a:06:c6:ef:26:7e:54:82:cb:af:9e:
         08:04:f5:cd:2f:70:9a:1b:60:49:d1:cd:27:81:4a:82:93:bc:
         3e:76:cd:e3:3a:3c:a4:bf:fd:13:cd:49:b0:91:63:81:b4:fc:
         fe:54:a1:2d:19:63:f9:75:90:e6:13:11:9d:64:9e:2a:e6:ef:
         30:12:22:ec:40:ee:31:82:f0:e6:41:eb:af:cb:fc:b0:55:f6:
         f6:45:66:f8:2f:96:ed:ab:9a:c3:4f:b7:2d:97:64:b1:06:ad:
         69:2e:e4:3b:75:0a:4f:2d:0e:41:e7:36:6b:32:18:a8:05:bf:
         11:f1:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:57 2025 by rpki-client