This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File:                     rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier:          I8IDIuixVzjAt2+fmzpmMMML+bpRaqSo45b02LJ2IGI=
Subject key identifier:   06:75:F9:1B:39:4A:E8:D0:69:EA:48:D1:A7:9E:8A:11:45:BF:CD:B9
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer:       /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number:          053D
Signing time:             Thu 04 Dec 2025 22:05:05 +0000
Manifest this update:     Thu 04 Dec 2025 22:05:05 +0000
Manifest next update:     Thu 11 Dec 2025 22:05:05 +0000
Files and hashes:         1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: VclXKHLkMeXZG7l03pxYLnrw4TmutNAiJBVzAJV/y+E=)
                          2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=)
                          3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: s0fTkj19sRTx/+BDg72CnNonlKPiE7C9YigY/ZfS3pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
        Validity
            Not Before: Dec  4 22:05:05 2025 GMT
            Not After : Dec 11 22:05:05 2025 GMT
        Subject: CN=69320591-e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:90:bb:2d:02:44:96:52:d5:88:2f:b8:c3:
                    e4:1d:88:e9:39:5c:7f:dc:69:0b:ed:ad:e9:55:b7:
                    39:51:e9:55:b5:16:77:ef:69:c4:56:84:f6:33:6c:
                    3a:03:19:c4:a2:89:55:db:f8:32:72:0f:d7:47:ff:
                    cd:22:25:60:17:6a:3f:0d:f1:e2:c4:d8:70:8e:7a:
                    d8:61:c4:ac:e7:8a:20:29:ac:bb:ba:27:12:db:f5:
                    5e:90:75:53:ae:b2:c6:98:fe:6e:2f:89:03:34:ed:
                    a6:ed:75:c1:c8:45:db:65:76:b6:98:4a:00:94:7e:
                    23:d2:74:81:66:5d:32:66:74:1b:56:ec:4d:68:29:
                    8c:ba:20:54:8c:8a:e9:fe:36:13:9a:2a:72:0e:7e:
                    89:36:17:67:50:50:d0:c5:18:5b:16:d7:34:48:38:
                    ef:b0:7f:99:06:de:16:13:76:e7:ec:73:4d:25:a8:
                    cf:ba:cd:06:8a:08:f9:1a:d0:67:26:bd:af:51:e8:
                    64:6b:c4:4c:a6:59:11:48:2b:ac:d7:b7:e5:9e:a2:
                    f3:93:18:a3:4e:b9:af:32:36:f7:1c:77:ec:7e:33:
                    6c:13:92:dd:36:90:b7:21:28:21:c0:3c:cc:f4:08:
                    3d:b0:79:ad:c3:41:45:0d:56:75:05:aa:f5:b3:c1:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:F9:1B:39:4A:E8:D0:69:EA:48:D1:A7:9E:8A:11:45:BF:CD:B9
            X509v3 Authority Key Identifier:
                keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:fc:03:fd:4c:1c:d8:b3:13:52:e7:87:da:fa:bd:0d:c5:
         bd:7d:9d:97:0f:54:b9:6c:10:9c:20:42:a8:59:64:6a:13:90:
         59:de:f6:41:f3:0f:ea:45:9c:e9:04:3b:fc:6d:53:5f:b5:8a:
         a0:13:10:ab:c4:e6:e8:58:04:ae:9b:b3:dc:b4:66:73:89:7e:
         a0:fb:86:06:f3:fd:b8:36:f5:77:b1:75:21:61:a9:d8:bb:d8:
         f0:dc:12:0e:3c:2e:88:ce:46:e5:02:fc:af:c0:f4:23:12:72:
         95:a1:88:fb:57:48:46:83:87:44:5f:69:bb:3f:d2:32:11:f4:
         c1:22:43:7c:6a:0d:85:b1:9d:3c:6f:b1:e5:68:85:5b:2c:1f:
         09:ae:af:25:e4:cb:5f:e2:58:3b:20:63:a4:4a:6d:a1:d3:e6:
         bb:9a:82:00:3e:1b:5b:3c:39:87:a1:dd:52:19:eb:68:6e:c5:
         bc:95:f2:65:71:a7:b3:87:1a:91:7d:68:54:77:65:a5:2c:e7:
         4a:75:ae:29:57:f8:19:49:0c:f5:74:90:89:06:2e:3b:1e:67:
         3b:ea:e6:e3:22:fe:6e:20:62:dc:19:dd:87:1f:cd:20:95:3d:
         ff:f6:92:5f:54:66:b8:2c:9e:f5:1c:f4:09:c4:93:1b:55:7b:
         e6:b1:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:46 2025 by rpki-client