This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File:                     SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier:          U+/7lSNFEGU1XO5Wr0QNUQLbIA0baXUk18BS41Ycj4I=
Subject key identifier:   F6:7B:33:E1:C8:BC:B9:17:51:F2:30:C3:2D:68:3A:77:97:92:1D:86
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       34ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number:          34E8
Signing time:             Sat 06 Dec 2025 15:07:08 +0000
Manifest this update:     Sat 06 Dec 2025 15:07:08 +0000
Manifest next update:     Sat 13 Dec 2025 15:07:08 +0000
Files and hashes:         1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: uPdD3EDcEXlko+15Ay5Ia7b9Sp45mGPEE4rZGldySdw=)
                          2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=)
                          3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
                          rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13549 (0x34ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
        Validity
            Not Before: Dec  6 15:07:08 2025 GMT
            Not After : Dec 13 15:07:08 2025 GMT
        Subject: CN=6934469c-5fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:cc:cc:da:4b:07:97:48:05:45:da:a8:90:
                    fa:79:dc:3d:55:9f:8d:81:f9:8a:6f:8f:cd:6d:72:
                    6b:0b:bd:b2:62:b6:af:38:7d:af:5a:b9:57:7e:d2:
                    05:1a:85:f3:b4:55:4e:96:a0:eb:a4:b0:58:26:1e:
                    5e:86:f5:30:d6:ee:cd:09:78:b2:56:37:9d:3b:47:
                    e0:22:49:18:66:c6:e0:1d:c1:13:19:ab:4a:4b:31:
                    34:e0:20:f7:15:1f:66:1f:cf:2d:f4:ac:e5:13:e4:
                    34:75:bd:e8:28:15:e9:d2:f5:b4:7e:32:59:fc:22:
                    af:01:dc:5f:68:1a:4b:7e:66:69:d2:90:5d:e6:f5:
                    b2:ed:c4:3d:7d:8c:49:67:d7:52:e8:41:92:97:4b:
                    f7:8a:cf:62:e3:76:bd:41:e5:f1:5b:36:bd:9d:a0:
                    f9:08:28:a1:21:7b:c2:16:8c:ea:62:fe:1e:06:e9:
                    e1:6a:30:36:60:b8:cb:bf:34:4e:8a:2f:17:71:a1:
                    a4:0c:7c:8d:13:4e:c3:06:0f:c1:c2:3e:4f:fa:6e:
                    74:d5:df:64:7b:c8:0e:c9:f3:d2:8e:09:f2:09:8c:
                    87:73:ed:2c:e0:be:25:4b:f3:f8:bc:bc:15:42:0b:
                    b3:51:c2:36:cc:26:7b:76:76:de:12:fe:7e:50:71:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:33:E1:C8:BC:B9:17:51:F2:30:C3:2D:68:3A:77:97:92:1D:86
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:47:bc:8d:68:26:e1:76:d0:16:77:f5:d9:32:19:74:0f:30:
         20:81:a8:d5:3d:a1:98:2a:c5:56:43:5e:96:24:48:62:4c:66:
         73:e3:cc:51:3a:93:62:4a:61:cb:52:82:d8:ed:54:f5:50:a0:
         e0:51:b1:34:b7:13:7d:ae:bf:57:c0:e4:bb:0a:ca:5e:9d:e7:
         ed:30:bc:eb:a9:2d:04:a7:44:1a:df:11:12:b2:02:e0:67:6b:
         90:8d:9a:f9:6b:3a:46:41:3d:b7:b5:ac:b0:eb:e3:e3:97:0b:
         93:7f:c2:71:b8:fa:f3:2a:53:60:a8:59:12:84:dc:f7:42:c9:
         2b:2e:e9:7b:40:ff:ae:94:88:c3:b5:25:8d:ae:82:ae:6b:1f:
         3a:c5:b9:e8:ba:ec:d8:d2:c2:51:d8:1f:93:e7:81:b6:c5:bc:
         8c:35:39:9b:81:ae:aa:bb:7b:b8:f4:52:b4:3d:67:5b:93:61:
         f2:ca:39:e1:a2:55:72:b6:be:27:d1:b5:8e:6e:6a:5d:85:e2:
         84:0d:19:4b:24:e4:2b:0c:cd:3b:92:0b:b4:94:81:61:79:c3:
         d3:e0:cc:33:33:3e:a2:43:6b:df:18:bf:4e:d5:25:07:39:0a:
         27:57:c4:ac:bd:86:6c:9c:75:89:2b:db:b1:02:58:79:6c:11:
         57:4b:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:19:45 2025 by rpki-client