This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          FGSjIyUlPdR8pgtq7MJly0KWxurveHg4hiRj8Qe1RnQ=
Subject key identifier:   CE:1E:48:8A:D0:61:B0:E2:05:03:D2:0E:E1:9E:20:8A:BF:8B:73:11
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       18F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          18ED
Signing time:             Thu 04 Dec 2025 15:36:02 +0000
Manifest this update:     Thu 04 Dec 2025 15:36:02 +0000
Manifest next update:     Thu 11 Dec 2025 15:36:02 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: RaZ9snSEAsREZoPLEzGgrrGiz6csRKvLXxybCjgfcvA=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: Hi67OIgPZ7TBkvwrxhK9udO+gzYygQSZ8bHnr5IGMCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6388 (0x18f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: Dec  4 15:36:02 2025 GMT
            Not After : Dec 11 15:36:02 2025 GMT
        Subject: CN=6931aa62-e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:fa:84:66:47:c8:62:9c:5d:56:e5:8f:8f:
                    28:57:d2:bf:33:6f:d8:53:08:65:22:14:f4:63:a6:
                    2f:85:3b:e1:2a:0b:ad:9f:e3:d9:8e:2e:1f:05:47:
                    ec:4d:97:db:b9:cb:e7:b6:be:4c:f6:ae:a2:0c:c0:
                    d5:d0:82:62:91:2f:7f:41:da:e8:1c:3d:e9:9c:35:
                    fb:6a:40:8d:39:f1:36:97:02:0f:6b:3e:ac:02:33:
                    94:87:73:d2:5c:c1:bf:38:48:8f:d4:67:32:39:5f:
                    d7:76:19:0d:08:96:8e:e0:3a:64:c7:e9:ee:26:ae:
                    ac:fb:9a:db:2d:62:db:8e:5d:ce:5c:3b:31:e7:c8:
                    04:c5:13:5f:99:59:01:26:e5:78:33:a1:b4:f3:01:
                    94:19:72:62:da:bb:65:0f:d1:e7:7d:db:ad:a4:35:
                    19:ce:9b:77:16:b2:ae:bd:ae:d5:8f:f2:99:08:d8:
                    8a:53:18:b8:e3:63:a2:88:06:da:a0:36:2a:f4:ad:
                    5b:d6:b3:33:91:62:9d:24:f4:9c:46:eb:3d:ab:95:
                    a0:59:ec:34:fb:52:b8:c4:9f:e9:a2:6b:b3:73:ff:
                    10:06:3b:bd:87:ff:ac:2e:25:2f:cc:5e:fa:6e:18:
                    0c:7a:02:2b:bf:43:bb:e6:2e:b3:0c:86:fa:92:4a:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1E:48:8A:D0:61:B0:E2:05:03:D2:0E:E1:9E:20:8A:BF:8B:73:11
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:45:1f:74:c1:db:50:b2:c5:28:7e:07:a5:c2:87:dd:af:15:
         f6:71:00:64:b7:f5:9b:bd:82:00:4e:14:2c:a4:df:52:57:31:
         48:9f:e3:5d:bf:d0:f8:a3:f3:65:3d:e8:28:05:e5:f4:93:2d:
         fe:a5:f6:68:47:86:2a:32:86:75:ba:60:00:7d:73:14:cd:46:
         90:30:79:a3:8a:64:0b:6a:8d:2e:57:22:51:22:0b:82:1a:8d:
         4f:75:81:a5:fb:11:40:26:3a:62:8e:4d:f7:b3:4c:36:35:e7:
         42:fc:48:df:d1:53:55:98:61:46:dc:b2:40:f9:8f:d0:08:aa:
         e7:c0:dd:0a:b2:8d:e0:a0:39:35:d0:06:8a:a9:86:85:c9:43:
         c3:ce:8a:fc:68:c3:7b:aa:c1:f1:11:da:11:45:aa:0e:72:b9:
         57:b6:2c:d7:be:d0:57:9b:4e:08:9a:0a:10:68:b1:dd:7d:46:
         17:78:78:b7:a4:c3:a7:95:a0:13:61:fe:66:70:1a:ce:70:51:
         94:70:61:e2:8f:f6:8f:ab:fb:39:d6:26:39:ff:e5:42:77:68:
         1d:93:7a:d9:45:96:42:32:f1:86:03:79:18:eb:7a:e6:54:13:
         bf:d3:97:3a:07:e9:61:3d:b2:97:65:27:de:89:ab:75:22:34:
         93:dc:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:20 2025 by rpki-client