This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
File:                     34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json)
Hash identifier:          ojFfAsARfwhiNrSEOnBSR6YnROzWhHz4Owu15nv0BAg=
Subject key identifier:   9A:EB:83:31:F9:B7:57:F2:28:CB:3A:3B:CA:00:05:11:47:88:5E:1C
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Certificate issuer:       /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
Manifest number:          0930
Signing time:             Sat 06 Dec 2025 19:24:56 +0000
Manifest this update:     Sat 06 Dec 2025 19:24:55 +0000
Manifest next update:     Sat 13 Dec 2025 19:24:55 +0000
Files and hashes:         1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: kulMn7v3Q+P07IpAkyHOrfGXJs9M1YjOw9qpU+Bk/kc=)
                          2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: ASBYl23bkyFf4r9vJSPXkAo/YYzd1cAPrmJW3FNKskU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
        Validity
            Not Before: Dec  6 19:24:55 2025 GMT
            Not After : Dec 13 19:24:55 2025 GMT
        Subject: CN=69348308-18bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:3d:d2:62:23:5d:63:a8:51:4e:05:98:b3:
                    96:40:fd:52:ea:58:ea:00:b8:eb:0b:fb:f6:75:47:
                    9a:3b:a7:15:a7:e5:63:e3:68:c1:9b:42:ec:9b:45:
                    00:43:e2:ac:f6:29:57:06:d3:3d:fd:ca:65:9c:af:
                    ca:36:7c:c9:e7:2a:15:e4:d3:2a:21:4a:0c:c9:b5:
                    a2:24:cc:09:18:93:aa:10:b8:be:b2:3e:63:42:5f:
                    9e:c3:f2:be:1a:49:12:ba:5a:da:78:69:c9:1e:a5:
                    1c:b0:e1:2d:5d:82:76:b0:41:3a:d2:57:66:77:8e:
                    82:99:51:95:01:c8:c2:76:f3:cc:4c:76:c2:7e:ac:
                    6e:14:1c:ff:74:e2:38:9f:39:94:b6:17:e2:42:59:
                    0c:04:4b:55:1c:82:27:fa:a0:f6:69:65:c8:7e:cf:
                    f9:df:4b:c7:86:af:fc:33:c0:58:2d:d6:2e:ef:0f:
                    bd:6e:87:72:35:aa:0d:17:d2:d2:ab:54:c6:b2:66:
                    6a:17:63:52:13:cc:f7:d8:83:dd:a9:52:51:af:ae:
                    7f:2b:5d:d5:1a:8d:1f:45:38:2a:1e:7b:62:9c:ff:
                    d4:ac:97:86:57:30:6f:26:97:d3:15:97:19:71:0d:
                    9e:30:c4:1b:b2:6f:fc:71:c5:14:69:5d:2c:c1:5b:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:83:31:F9:B7:57:F2:28:CB:3A:3B:CA:00:05:11:47:88:5E:1C
            X509v3 Authority Key Identifier:
                keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:57:0f:08:7a:b8:cc:09:6a:65:7f:76:fe:39:66:71:fd:
         bf:20:27:2f:e1:f3:f5:31:00:67:cf:46:55:ca:c0:7b:d8:db:
         ee:2a:83:61:b9:5a:23:9f:a5:64:72:23:6c:a7:4f:8a:21:18:
         a3:da:e3:e3:21:31:0a:c3:b0:39:60:3c:2c:2c:05:0c:7d:43:
         42:9e:87:45:a4:7b:9c:7f:de:2d:b6:dd:35:30:2b:7f:43:04:
         93:bf:f7:5b:38:d3:89:a6:5d:52:72:cd:26:46:42:f4:5f:9e:
         1f:28:21:22:fe:24:6f:72:cc:e6:74:35:04:19:51:5e:d4:a3:
         57:24:b4:9c:35:30:61:34:02:0b:82:4b:9e:f6:88:62:6d:84:
         0d:ad:a1:6c:a0:24:fe:57:fd:67:ce:47:6b:7a:80:31:35:ac:
         b2:5b:3e:45:32:81:50:92:1f:f9:37:c4:e7:59:f7:16:fc:97:
         e3:78:5a:11:36:39:f9:be:68:2b:ab:0c:c0:65:ba:b9:79:b8:
         c1:8f:2c:65:80:31:8f:ae:d2:6c:e7:cd:2f:8b:cf:58:8a:de:
         36:b4:04:8f:49:e3:c7:3e:85:2d:3f:3d:b3:f9:65:26:d0:aa:
         fa:16:ba:19:ca:8b:9a:1e:9d:a2:11:f3:9f:56:e2:d7:4b:8f:
         0e:ef:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:03 2025 by rpki-client