This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
File:                     pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json)
Hash identifier:          Ogz0lNbsBBFpuscCAWDXQTIu+o12BjjkLRaR7CqAE8M=
Subject key identifier:   1A:10:72:D8:DB:D8:13:AF:A9:5A:2E:74:F5:5F:3E:54:D0:A2:78:82
Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
Certificate issuer:       /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
Manifest number:          01CF
Signing time:             Fri 05 Dec 2025 01:10:57 +0000
Manifest this update:     Fri 05 Dec 2025 01:10:57 +0000
Manifest next update:     Fri 12 Dec 2025 01:10:57 +0000
Files and hashes:         1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: MCOvYcR15FF7KrRbPdl5QN8UxQWvGszDBLUT83C2mdQ=)
                          2: 935947E8234B11F0B6DF721FC4F9AE02.roa (hash: wUur8hr6UOENzZrUofd56u0ua+u6fpIC9vNGe/0Q0+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD5B5, serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
        Validity
            Not Before: Dec  5 01:10:57 2025 GMT
            Not After : Dec 12 01:10:57 2025 GMT
        Subject: CN=69323121-d66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:55:a3:f3:03:a8:b1:e3:8f:44:df:b5:47:
                    a8:09:ce:06:eb:1c:80:7f:59:bd:fe:11:47:ed:76:
                    49:01:85:d5:c7:a9:e5:ce:41:83:4f:59:9c:0c:68:
                    3b:bf:5d:ea:c3:a2:bf:cf:97:0d:3d:bf:85:87:70:
                    3e:17:67:d1:86:c2:00:b2:f4:5e:d1:2c:f0:a8:78:
                    d7:9b:ec:a8:48:5f:5c:f5:fa:f3:53:e0:44:88:6a:
                    41:13:99:36:f4:2a:47:1a:33:2e:e8:2e:e3:ce:71:
                    a6:0e:d2:f0:13:d5:08:26:a4:0a:b6:57:4b:23:25:
                    0f:3c:70:cb:74:b5:12:92:d5:72:02:98:46:85:95:
                    80:ca:9d:6a:d0:5e:37:79:78:4a:87:58:0a:75:3a:
                    68:ab:da:23:f3:2b:a6:4b:b2:bf:66:5b:e7:19:e9:
                    47:9a:2d:48:bd:5c:54:76:a3:61:b5:d6:c3:cc:a7:
                    68:4f:01:a9:44:fd:74:ef:82:9e:ad:b0:a9:0d:77:
                    d8:dc:57:6d:88:08:f0:33:db:90:02:9e:b7:0c:3e:
                    ed:b8:b5:4a:06:37:2d:94:1d:f1:c8:46:52:7a:4f:
                    44:10:e2:4b:bc:f8:3b:09:97:ec:85:02:40:b2:bb:
                    11:1b:82:6b:52:de:5a:13:66:fb:bf:f7:79:c5:ee:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:10:72:D8:DB:D8:13:AF:A9:5A:2E:74:F5:5F:3E:54:D0:A2:78:82
            X509v3 Authority Key Identifier:
                keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:b2:ec:04:b8:33:07:fe:ea:cc:e5:5b:07:3b:cf:cd:e1:
         5b:dd:2f:98:49:b1:e1:5c:c4:32:5c:8e:35:1b:57:a4:96:92:
         bb:a9:9d:b7:da:44:e9:30:8b:e1:59:5b:aa:a8:0f:10:6f:f7:
         c8:a3:86:86:4a:c1:0a:03:39:b6:8d:23:3e:af:a9:46:6e:96:
         b1:8d:27:d0:bc:b5:2d:f2:fd:f6:1b:e7:18:2c:fc:ef:dc:a8:
         70:33:d2:e7:14:50:3a:d6:02:3c:25:a8:ee:54:05:2d:7e:ad:
         ba:61:1c:9c:5a:9f:1b:96:45:37:e2:e6:4e:79:27:6d:3e:df:
         30:67:1c:31:6b:9b:4a:22:f0:7d:36:59:17:e3:68:42:45:e7:
         73:33:8c:5e:48:87:15:04:e5:d5:d4:79:24:80:2c:48:69:06:
         82:20:1e:e3:13:fb:8f:ea:b8:b9:1c:bf:fa:8c:ac:17:e9:a0:
         74:5d:be:8b:65:b4:41:5a:5a:01:89:c6:b7:08:62:c7:26:da:
         65:a4:92:cc:91:26:91:e3:7e:a1:9b:47:9d:cd:5c:5d:a1:4e:
         0c:bd:33:d8:a0:b0:71:80:09:b9:a1:db:65:53:d1:70:9d:39:
         1c:6e:a2:14:c0:82:ea:e3:c5:b8:e4:9f:ac:a3:e5:2b:36:88:
         47:3e:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:04 2025 by rpki-client