This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File:                     SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier:          JYzfbct5jU0/shWWC2TW65jrZrCsdKDb9cFRC89UEdc=
Subject key identifier:   AE:12:DE:35:F3:CC:08:2B:8E:16:32:11:09:85:7F:27:53:A5:D6:E6
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer:       /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial:       0807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number:          07FE
Signing time:             Sat 06 Dec 2025 20:08:07 +0000
Manifest this update:     Sat 06 Dec 2025 20:08:07 +0000
Manifest next update:     Sat 13 Dec 2025 20:08:07 +0000
Files and hashes:         1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: B0k55RuwFSZEUmDUJwA+yMnqaAfMiyC8En8tiHG0GwI=)
                          2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
                          rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
        Validity
            Not Before: Dec  6 20:08:07 2025 GMT
            Not After : Dec 13 20:08:07 2025 GMT
        Subject: CN=69348d27-418c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:53:e5:4e:0c:06:17:c1:bb:4d:50:c0:86:
                    75:b4:27:d1:0a:54:82:cf:54:0f:03:ce:e6:92:61:
                    5a:0c:ce:73:68:57:7f:c0:67:3f:19:36:fc:01:ee:
                    2e:bb:13:e6:c9:0d:02:04:d2:0d:12:c1:19:cd:32:
                    6d:c3:62:b6:df:be:32:b9:e9:08:cf:d6:fe:e0:06:
                    87:51:e1:98:b3:bb:09:4e:30:5d:15:5f:39:bb:7b:
                    e6:e5:ec:9b:ee:88:19:7c:13:5d:11:64:a8:e2:72:
                    c6:bf:f8:6b:c0:79:a5:8a:a9:c4:37:68:cd:af:71:
                    cb:4f:66:eb:9a:85:ad:86:20:7b:54:e3:33:7b:4c:
                    db:a1:ce:3f:48:6a:ee:de:f1:dc:e8:de:11:50:10:
                    13:2e:81:9a:78:3b:08:61:f2:3e:00:ea:b9:13:39:
                    08:12:34:8c:b4:cb:4e:a0:ab:a8:dd:64:9c:e2:af:
                    ed:5d:27:e6:e5:17:64:f3:d6:d7:0c:c1:b4:cc:57:
                    cc:dc:cc:26:b5:65:00:c1:2a:c7:ed:df:d5:c2:93:
                    5e:65:24:c7:24:ea:0c:9c:f5:47:1b:99:89:31:35:
                    f8:0a:a7:fa:2e:56:2b:a4:70:73:07:e2:53:05:02:
                    92:77:c0:aa:fb:10:30:31:4b:78:29:3c:1c:ab:01:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:DE:35:F3:CC:08:2B:8E:16:32:11:09:85:7F:27:53:A5:D6:E6
            X509v3 Authority Key Identifier:
                keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:b4:01:53:cc:f9:34:0e:bf:da:2a:58:16:c6:02:04:a7:
         07:3c:a3:0f:55:0b:bc:51:be:12:8a:a8:79:dd:a1:fb:7a:b8:
         b5:0e:a4:b3:3c:c6:1d:f3:bc:e6:ce:3a:b4:9b:f9:4c:84:bf:
         0e:9b:84:d1:46:74:b8:6b:f9:24:48:e4:1e:64:99:2a:b4:d7:
         c8:ab:1d:f5:e0:00:ad:02:f7:f8:d7:ce:2e:4e:e4:1b:ea:e2:
         9b:8a:b2:4c:0b:66:21:92:90:78:43:e3:43:61:9c:73:33:a0:
         fc:ef:8d:90:c0:cb:ba:52:69:56:68:a2:2a:3e:bb:0e:b7:9e:
         62:34:0b:15:1c:46:7a:ef:5b:05:a8:59:8e:40:64:71:49:b6:
         17:4a:41:15:f6:dc:78:7f:9c:e4:3c:8c:63:5b:87:47:51:53:
         6b:2d:13:5a:87:5e:78:4f:9e:22:85:79:90:e6:e6:47:fe:78:
         44:41:cb:87:4b:39:42:db:49:7c:26:11:4e:69:6c:36:8c:c2:
         7b:86:77:0b:c5:65:7b:e7:2b:cc:83:2e:40:81:13:b7:99:5f:
         4e:b0:48:ef:ca:ae:72:87:e5:b0:20:0c:98:f2:2a:e8:97:59:
         2d:55:ac:b1:4c:ab:22:8b:aa:45:62:79:38:08:a0:ac:47:0d:
         1d:62:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:51 2025 by rpki-client