This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
File:                     L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json)
Hash identifier:          5pXG7x9AfAKf0GcXSNiyZJ2jQmiOBiEFynjlvHqZzRc=
Subject key identifier:   4F:A7:56:53:32:2E:E9:55:7B:A8:09:1B:69:BF:FB:9C:6C:42:95:52
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Certificate issuer:       /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial:       0315
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
Manifest number:          0309
Signing time:             Thu 04 Dec 2025 23:33:35 +0000
Manifest this update:     Thu 04 Dec 2025 23:33:35 +0000
Manifest next update:     Thu 11 Dec 2025 23:33:35 +0000
Files and hashes:         1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: CSxEXCgwdSilaSaC8gHmlzyAD2+RLoTzyb8zWz4R1o4=)
                          2: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: l12GGHb5zU8WFaP5yfw8CrXUTcEdQRcdzqYPOrrqqtY=)
                          3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: mBez32ljXmIU/FGdNqv/QIBBd8Jpz2uUA0e46aOruT4=)
                          4: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: I75VXJWFaD1GwhF1O0TXZ8SEa9d38CWsNr1ZhVLKJs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
        Validity
            Not Before: Dec  4 23:33:35 2025 GMT
            Not After : Dec 11 23:33:35 2025 GMT
        Subject: CN=69321a4f-47a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:03:3a:ff:f3:cc:42:f5:b6:ac:c9:f4:b4:
                    70:e6:93:71:25:26:bd:e0:6a:a8:f7:b6:3c:13:0f:
                    17:2d:bd:d4:31:87:bb:10:b6:7d:d5:9d:3d:1a:c5:
                    b6:33:26:d6:7c:c4:52:ad:3e:46:07:9b:c1:13:0d:
                    a1:8e:a7:ad:b4:01:94:2f:2d:3e:ab:81:ca:4b:95:
                    d5:ae:34:eb:29:6b:43:ac:14:ed:45:c5:31:9c:db:
                    45:07:0b:b5:e8:aa:1a:6a:30:1b:ca:2a:85:99:99:
                    5b:dd:04:e7:e1:24:ab:90:24:05:f2:db:da:4a:45:
                    bd:ae:4e:64:46:3a:a3:8d:57:d5:6c:ab:54:0f:45:
                    46:1c:ba:57:64:78:f8:48:56:93:f3:a9:b5:d6:5f:
                    70:6b:71:34:45:4f:5d:d2:94:90:fd:af:65:25:a1:
                    37:60:f4:70:bb:76:8e:f0:6a:f5:c5:bb:15:fe:d4:
                    74:b5:a3:c5:da:36:1c:95:0f:36:b6:49:20:ee:ef:
                    48:55:37:69:dc:94:bd:29:d7:15:f3:7e:d7:db:06:
                    fc:cf:d2:62:34:ad:53:77:bd:7a:5f:f9:b9:52:98:
                    9f:0e:c8:80:da:c5:a3:a3:82:7e:11:44:7f:d8:98:
                    ca:97:d4:cb:45:09:36:f0:63:ed:00:a0:b7:7e:f4:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:56:53:32:2E:E9:55:7B:A8:09:1B:69:BF:FB:9C:6C:42:95:52
            X509v3 Authority Key Identifier:
                keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:4e:1e:5a:e1:0f:fa:1b:d3:2d:eb:cd:a6:e9:57:8d:80:
         48:8f:5b:3b:ca:c0:b6:56:81:45:d9:57:8e:05:4a:e6:2d:3b:
         65:53:9f:19:1d:2d:56:56:44:53:b7:8e:ab:5b:27:00:d6:95:
         20:48:2c:cc:bc:40:63:ae:fa:2d:8b:4c:71:fb:35:26:17:fb:
         25:04:8c:ef:27:0d:7a:58:09:38:b0:89:dc:92:61:fc:c3:2a:
         d4:5f:c7:f2:5c:94:9c:6b:cb:ee:86:dc:ef:1c:cd:5e:2c:90:
         96:2e:1b:3a:e2:a4:6c:75:b2:a0:93:bc:12:a6:b9:df:2b:05:
         1a:a5:8c:f6:23:b2:cd:c0:5f:2a:dc:c8:cd:b5:35:9c:ac:30:
         93:b5:ac:2d:98:23:47:ea:b3:9b:71:18:15:98:73:ab:b3:fd:
         10:ac:2a:e2:f1:49:75:27:74:29:ee:e4:64:34:07:91:e5:5d:
         da:54:ac:3b:28:19:1c:7e:c1:ad:b2:9d:e6:3d:fa:f9:70:a9:
         ae:da:37:7d:90:72:25:1e:40:7d:af:2d:4a:6b:09:9e:35:b7:
         b8:53:ad:09:e6:f3:14:12:4f:fa:1d:c9:8a:8b:fa:fe:96:8f:
         c9:8a:3a:1f:ac:25:fb:07:df:1c:27:2e:c4:ef:23:cb:be:f2:
         e7:4f:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:07:33 2025 by rpki-client