This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File:                     dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier:          LawV2SfsGHhC2r7Rpt1NcxtGsKBqCltIcDUozlF0B08=
Subject key identifier:   13:4E:9A:67:FC:99:D4:73:0C:76:EB:A2:42:9A:40:EE:1A:3B:F0:36
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer:       /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number:          4D
Signing time:             Sun 07 Dec 2025 05:20:54 +0000
Manifest this update:     Sun 07 Dec 2025 05:20:54 +0000
Manifest next update:     Sun 14 Dec 2025 05:20:54 +0000
Files and hashes:         1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: yoWrN7OTQZopNP/Vknolg0O/q+K4VDTShfE9SGze1SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
        Validity
            Not Before: Dec  7 05:20:54 2025 GMT
            Not After : Dec 14 05:20:54 2025 GMT
        Subject: CN=69350eb6-786b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:46:52:cb:7a:db:c9:98:5a:46:35:34:3a:
                    03:31:9c:ec:50:38:5d:e1:c9:4d:ad:36:26:e7:99:
                    76:0d:46:27:f3:51:6a:87:e2:76:3b:60:0f:8f:a4:
                    b3:ab:48:82:b8:71:1a:35:64:11:f4:4c:6e:dc:0f:
                    2b:d7:7c:1d:31:34:d6:b1:07:4c:61:29:19:59:69:
                    4a:d9:4d:73:1f:fb:5b:51:bb:c3:98:86:45:3f:b6:
                    6f:12:c7:92:10:e7:aa:ec:0f:23:8f:fa:60:f7:20:
                    1c:61:08:26:09:ac:0c:17:37:11:2d:90:25:d2:77:
                    4c:49:cf:13:f4:69:75:fd:77:46:0f:b8:38:f0:6f:
                    fa:c3:1d:8e:4c:82:28:7e:22:f0:75:54:fb:bf:b0:
                    d9:07:38:71:65:47:9e:e8:5b:15:ac:87:d8:42:00:
                    d9:65:81:4d:3b:5b:bf:c2:e6:ea:6f:66:3e:c1:ec:
                    ff:92:0c:14:c3:65:22:e5:9e:8e:99:80:27:54:1d:
                    18:fd:b6:cf:37:3e:43:7d:81:1d:b9:ed:d2:53:df:
                    8c:0a:fd:1e:ec:53:9c:46:6d:71:e4:ca:bb:02:15:
                    69:1b:70:45:9e:ab:fe:da:fa:47:1c:39:e4:2c:fc:
                    70:07:a2:59:af:36:54:59:de:9e:88:5a:f4:93:1d:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:9A:67:FC:99:D4:73:0C:76:EB:A2:42:9A:40:EE:1A:3B:F0:36
            X509v3 Authority Key Identifier:
                keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:06:40:37:1d:73:ae:6d:e3:be:a1:d4:ef:86:1f:0a:38:d7:
         90:cb:1a:63:69:70:aa:12:d3:4d:11:07:70:5f:88:28:ca:e4:
         c4:76:ef:a2:c3:70:ad:04:85:53:b0:e9:03:c4:fa:42:96:08:
         c9:95:88:77:2c:b1:48:bf:61:f3:51:c9:17:84:d5:47:38:96:
         1f:9a:39:6b:88:2a:32:0e:1e:ed:ea:f5:64:c9:b9:48:6a:63:
         bb:7a:7d:e0:b2:42:33:fb:fd:dc:20:8d:6f:b1:a6:2c:bb:52:
         d9:ab:6e:07:ec:c1:70:a8:95:4a:a4:4a:a6:48:14:b7:24:1a:
         cb:0c:a2:f5:9c:07:ad:8f:90:e2:d8:87:5d:a2:17:74:fe:a7:
         a7:6d:d6:69:8a:7b:1d:c6:42:01:6c:3f:5f:70:36:c2:bb:d6:
         75:b4:2f:d9:a7:8d:1d:88:5b:81:76:58:05:be:8e:99:8f:19:
         01:db:b8:b1:40:56:8a:53:da:a5:d2:c4:c0:81:e9:47:e8:7c:
         4c:1d:80:43:8b:2f:f7:92:44:b7:b3:65:f7:69:72:43:93:a6:
         16:1f:c0:da:4a:54:07:cc:2a:36:f7:f7:d4:45:38:0b:aa:1c:
         33:93:a2:6b:bf:55:1f:19:6a:17:55:89:dc:b9:6a:b5:1b:a9:
         0d:98:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:44 2025 by rpki-client