This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File:                     8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier:          eHfkH5UzI+L7MsS2INaZ5pN+yOK7nMmeGxHAdDuXABk=
Subject key identifier:   D5:CF:EC:58:07:70:EA:7C:6A:31:8E:9E:9D:CD:EF:7C:56:FE:65:34
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer:       /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number:          06B4
Signing time:             Thu 04 Dec 2025 21:03:13 +0000
Manifest this update:     Thu 04 Dec 2025 21:03:13 +0000
Manifest next update:     Thu 11 Dec 2025 21:03:13 +0000
Files and hashes:         1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: umPi9T+zJfi9IxQcbSww1UEEOsmR8feWdDmtKJMj8ok=)
                          2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
                          rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
        Validity
            Not Before: Dec  4 21:03:13 2025 GMT
            Not After : Dec 11 21:03:13 2025 GMT
        Subject: CN=6931f711-4674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:d9:29:77:12:05:83:8c:31:36:fa:18:63:
                    b2:dd:ef:b2:2b:26:86:fe:7f:a8:db:1f:9e:f2:fb:
                    b0:14:20:b5:d4:ad:a8:9f:6f:9d:19:80:a6:1e:6b:
                    60:54:a4:58:95:24:8f:ad:7a:59:23:26:b8:1b:44:
                    84:0e:b3:f3:26:c5:0d:e3:8a:ec:da:e2:ec:58:ea:
                    63:f3:6a:c9:ee:d8:b4:62:38:7f:ef:96:5e:79:24:
                    aa:b6:9b:98:4e:d2:37:e1:b6:22:9b:a9:19:8d:7e:
                    c3:d6:2b:d0:4e:f4:cb:e6:12:67:00:c0:51:51:52:
                    fd:75:1a:7d:57:33:76:d4:c0:1a:47:32:a7:1e:cf:
                    02:a4:25:1a:5a:74:21:70:3a:a6:c7:23:55:2c:03:
                    8c:fa:8c:32:1c:78:45:09:b9:59:5a:21:3a:b0:4b:
                    90:4f:58:25:29:d2:f1:21:f0:cf:2a:8b:32:a1:ad:
                    76:6f:2e:08:be:02:a6:d9:f7:22:75:6b:55:95:b2:
                    09:21:d0:e0:82:b6:f3:55:72:f0:0d:a5:67:42:4c:
                    91:5a:06:70:9d:fc:89:59:ee:58:b5:81:be:48:42:
                    f8:e9:d5:18:6c:40:af:a4:31:7b:b8:9c:02:8f:08:
                    70:28:a6:2b:ee:72:7a:af:dc:82:2e:85:a8:80:2d:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CF:EC:58:07:70:EA:7C:6A:31:8E:9E:9D:CD:EF:7C:56:FE:65:34
            X509v3 Authority Key Identifier:
                keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:65:33:8e:59:ea:9d:b1:c4:8f:6d:c7:9a:67:3a:58:9b:f0:
         cc:df:29:05:b7:d8:b2:13:05:b3:33:2a:68:d6:47:b8:80:e2:
         77:18:dc:b7:e3:1d:66:93:5e:c3:19:39:88:d3:18:50:f1:c5:
         ed:60:28:05:d5:41:3f:5c:97:2c:ee:a8:26:25:62:b2:58:e0:
         cc:fb:2d:f1:4c:63:67:6d:83:92:33:ee:07:36:e5:0e:71:4f:
         0c:2a:d0:bc:04:f2:d3:c1:1b:21:fc:07:f6:c0:fb:ff:22:57:
         0b:b8:25:c2:63:6c:bc:76:16:d2:a9:5e:37:b4:e5:78:f7:6d:
         98:57:58:10:98:20:c5:2a:6d:e2:5e:47:6f:5f:d9:11:e8:e8:
         40:a2:46:14:1f:7a:c5:be:42:27:95:7f:b6:fc:16:9d:7a:4a:
         6f:ed:aa:1a:aa:66:72:a0:ce:50:aa:07:81:95:0b:3d:8a:1e:
         1f:d9:29:36:21:71:a2:8a:9a:ea:ed:64:9b:46:07:3f:07:95:
         bb:8a:be:ce:fb:39:57:e5:0e:0f:02:f7:36:7e:25:93:e5:b8:
         18:49:10:27:0b:e3:f1:02:4e:06:ee:5b:8f:7a:dc:6e:12:a2:
         09:4b:05:be:c6:89:6a:e8:a2:33:ae:c6:87:b6:5c:21:44:7c:
         2f:44:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:02:38 2025 by rpki-client