This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File:                     sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier:          4dS19q+F+71qFn99vEMzTasRSw3hLLqd5LqAJg2CtWU=
Subject key identifier:   0F:7C:0A:5F:B8:C7:8A:2D:10:FF:F1:4D:AF:86:A7:93:5A:D4:33:8C
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       02EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number:          02C0
Signing time:             Thu 04 Dec 2025 23:56:24 +0000
Manifest this update:     Thu 04 Dec 2025 23:56:24 +0000
Manifest next update:     Thu 11 Dec 2025 23:56:24 +0000
Files and hashes:         1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: bazcdNlnt9u8z+MC5i1fyElxsrJkYw/Zfj/a92QYRsY=)
                          2: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: XfF79hvTmc8NMCL/hID++kJM7536Tc7Eia39Bf3yFuA=)
                          3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: 3S7sTHQwNR4M05c/J0LAnFvlwfRaJo13g2aipeOM4II=)
                          4: 6E41DE08310A11F0AC8DF544C4F9AE02.roa (hash: MdnsK78f+RePT5EKFxzpSrHG7P2t5sm3+YBB1dYO5+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: Dec  4 23:56:24 2025 GMT
            Not After : Dec 11 23:56:24 2025 GMT
        Subject: CN=69321fa8-b8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:e9:96:88:32:e6:ab:fa:a7:e9:79:9c:91:
                    14:23:30:7b:4b:3f:87:b7:3f:3a:85:6a:b5:f8:c2:
                    76:ca:d5:8d:60:82:8b:15:cc:52:88:0d:9f:71:48:
                    df:40:28:88:64:ef:ae:41:f8:c4:fa:e4:20:48:94:
                    33:82:11:78:47:8a:91:46:f1:92:5c:41:bf:c9:2a:
                    bf:84:73:70:41:e1:4a:e9:04:1f:b4:69:33:c5:e3:
                    d5:d5:98:5d:7e:47:e2:e7:e8:88:2b:61:5e:cc:e1:
                    d1:fe:09:b5:e6:62:f6:c2:18:92:73:d4:0e:1f:0d:
                    de:1f:ea:b7:25:7d:bc:7e:5a:0e:35:e9:8d:07:d4:
                    6b:a3:47:92:65:e1:a4:f3:05:83:8a:a6:30:da:b9:
                    01:7f:66:46:8c:97:02:fc:6b:e0:20:11:10:c5:8d:
                    35:ff:48:a0:1e:53:03:7b:14:c4:f9:d1:84:5e:d8:
                    1d:f3:4e:fd:5c:24:c0:a1:be:aa:04:7c:26:00:6a:
                    88:2f:fe:9b:68:f1:05:6e:d3:b1:31:15:07:86:3f:
                    25:9c:5e:e5:bd:ea:f7:ee:24:fa:0f:b5:67:85:03:
                    7c:ca:83:4c:13:a5:ae:2e:1a:a1:09:80:d9:bf:8e:
                    2a:87:bc:96:e5:d1:65:07:29:b5:e6:4e:26:56:42:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7C:0A:5F:B8:C7:8A:2D:10:FF:F1:4D:AF:86:A7:93:5A:D4:33:8C
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:2f:22:31:03:bd:d1:3d:84:b3:3e:a1:bc:45:00:74:35:
         78:00:40:d1:c8:5c:d7:c7:00:9b:88:4b:90:6d:83:6e:6a:7b:
         d4:ee:d4:7e:25:5d:66:46:b4:76:3b:cd:62:8f:c4:ff:46:a8:
         c6:31:1d:ed:2c:f9:16:73:5f:09:67:b9:7f:50:d5:55:f7:7a:
         47:1e:06:7b:14:c8:e4:01:9d:95:c3:51:d2:1f:f6:39:2e:b3:
         d1:b3:c6:d6:47:45:42:61:b7:ef:dd:c4:5f:b4:e5:13:d8:40:
         53:e5:0d:54:fa:66:46:30:6b:f4:d0:2d:67:37:01:7e:12:ad:
         b4:ae:17:35:e9:3e:c4:55:67:b8:72:d7:c0:cd:a1:1b:7d:01:
         82:c5:f2:a0:b8:b6:25:f6:31:c9:72:6d:31:d8:a7:53:44:e8:
         b6:1d:e8:25:2a:30:76:f5:dc:13:c6:e0:62:e4:fa:ff:eb:5a:
         36:4c:7e:32:8d:48:18:40:b5:64:c7:41:fd:29:a8:cf:9f:c9:
         aa:ad:3f:83:99:34:e5:84:75:89:13:97:ce:13:39:97:0e:29:
         fd:db:88:fc:7d:fb:69:d2:91:57:85:a5:c6:89:8e:70:77:07:
         34:4d:33:55:c2:0a:b1:37:83:67:35:67:0f:ae:67:87:d8:0d:
         e6:9e:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:05 2025 by rpki-client