This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File:                     CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier:          7K9Tv7n9sHzNnncr2JyGTsyPkfW1tD8I4t3sBIxMhnE=
Subject key identifier:   72:0F:9B:59:4C:89:12:E8:02:C6:03:B9:DB:24:28:49:73:32:ED:DD
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer:       /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial:       19AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number:          19A1
Signing time:             Sat 06 Dec 2025 16:01:32 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:31 +0000
Manifest next update:     Sat 13 Dec 2025 16:01:31 +0000
Files and hashes:         1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: STh71k/yMgLTPcqzeeaYj9DcjOnaDrP9A2zg5bwj2E0=)
                          2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6573 (0x19ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
        Validity
            Not Before: Dec  6 16:01:31 2025 GMT
            Not After : Dec 13 16:01:31 2025 GMT
        Subject: CN=6934535c-4db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:95:9e:81:3f:b3:ef:60:52:04:e1:a8:9a:
                    46:4e:19:50:66:d5:51:f7:94:ca:29:76:05:fb:32:
                    8f:ca:44:c1:26:29:d0:2f:5e:59:ed:53:45:81:da:
                    09:50:51:53:aa:a6:a8:20:c5:fc:a9:06:92:cc:ae:
                    43:be:4c:98:b3:58:90:d0:0d:48:d4:0b:c4:a9:38:
                    ec:c3:b0:13:8c:1b:e5:ef:32:c6:06:7c:a4:cf:3b:
                    e9:e5:2a:a6:2f:11:9c:74:7a:5a:a9:49:73:38:37:
                    7d:fd:71:8e:a3:ce:47:d2:6c:01:a0:11:06:5d:b3:
                    35:4e:b0:95:e6:2c:b2:0e:37:a3:4c:a8:89:ba:e5:
                    80:c6:2f:e6:9c:22:28:44:c8:e4:b1:01:06:31:27:
                    4b:06:e5:5b:7a:9f:26:48:7c:b4:21:66:83:da:ff:
                    a5:b7:74:8b:2d:d7:77:39:c3:8d:e9:87:f7:92:db:
                    1b:40:4c:19:08:23:6a:52:01:5c:7b:83:8f:0f:6e:
                    4f:0f:e8:ad:27:0c:bc:5d:88:7d:24:27:17:14:00:
                    08:37:72:7c:07:a3:0a:b2:e8:82:88:de:66:ce:c1:
                    36:69:fe:17:8f:8c:31:46:01:3c:b5:57:75:23:94:
                    22:1b:17:f2:7a:0c:b1:ec:e3:78:0b:01:67:6b:13:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:9B:59:4C:89:12:E8:02:C6:03:B9:DB:24:28:49:73:32:ED:DD
            X509v3 Authority Key Identifier:
                keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ad:2a:7a:54:72:9e:b9:d6:e6:77:6e:cb:55:93:50:b2:bd:
         41:c8:23:11:b6:f6:51:38:c3:97:83:5f:02:e7:0e:f9:2b:57:
         eb:a8:cc:b0:aa:d9:93:6b:6f:fb:1b:ea:8e:d9:77:7d:78:da:
         0c:15:af:09:9a:5c:58:74:8e:f5:33:0c:e8:45:40:ff:9c:bb:
         41:1e:a5:21:c9:03:39:3e:b2:d6:c9:0b:d1:9c:2c:82:6d:0f:
         ef:fd:2e:bc:86:0a:6e:fa:c7:87:b6:c3:52:75:23:e6:76:42:
         fc:5a:aa:2b:23:41:28:b8:9b:48:f4:96:92:cb:a8:e4:78:82:
         57:4b:78:f1:e4:80:85:02:b5:8f:22:8b:4e:9e:e3:9f:cb:cd:
         ab:52:2b:93:35:e0:a3:e2:74:52:38:f4:bc:50:98:50:8c:71:
         4e:b4:88:05:d6:8e:09:78:22:d6:fc:b6:9f:48:b6:9c:c9:99:
         8a:0d:45:28:2f:a2:c3:ab:c5:f1:46:d5:c4:d1:a1:3e:02:05:
         c5:0e:35:33:0c:03:91:b2:e3:10:36:0e:da:e6:0c:fb:8a:ff:
         19:70:91:ca:72:fe:4d:27:7a:96:fb:70:9a:36:9b:18:61:7c:
         b5:3d:1c:43:49:36:36:1d:72:2d:1f:63:3a:ce:af:0f:80:7c:
         96:56:6a:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF
NkY2N0NFN0UwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjEzMTYwMTMxWjAYMRYwFAYD
VQQDEw02OTM0NTM1Yy00ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAviuVnoE/s+9gUgThqJpGThlQZtVR95TKKXYF+zKPykTBJinQL15Z7VNFgdoJ
UFFTqqaoIMX8qQaSzK5DvkyYs1iQ0A1I1AvEqTjsw7ATjBvl7zLGBnykzzvp5Sqm
LxGcdHpaqUlzODd9/XGOo85H0mwBoBEGXbM1TrCV5iyyDjejTKiJuuWAxi/mnCIo
RMjksQEGMSdLBuVbep8mSHy0IWaD2v+lt3SLLdd3OcON6Yf3ktsbQEwZCCNqUgFc
e4OPD25PD+itJwy8XYh9JCcXFAAIN3J8B6MKsuiCiN5mzsE2af4Xj4wxRgE8tVd1
I5QiGxfyegyx7ON4CwFnaxMfsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIPm1lM
iRLoAsYDudskKElzMu3dMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5
OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1
aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrrSp6VHKeudbmd27LVZNQsr1ByCMRtvZROMOXg18C5w75K1frqMyw
qtmTa2/7G+qO2Xd9eNoMFa8JmlxYdI71MwzoRUD/nLtBHqUhyQM5PrLWyQvRnCyC
bQ/v/S68hgpu+seHtsNSdSPmdkL8WqorI0EouJtI9JaSy6jkeIJXS3jx5ICFArWP
IotOnuOfy82rUiuTNeCj4nRSOPS8UJhQjHFOtIgF1o4JeCLW/LafSLacyZmKDUUo
L6LDq8XxRtXE0aE+AgXFDjUzDAORsuMQNg7a5gz7iv8ZcJHKcv5NJ3qW+3CaNpsY
YXy1PRxDSTY2HXItH2M6zq8PgHyWVmoa
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:54:34 2025 by rpki-client