This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
File:                     1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json)
Hash identifier:          FU0GGwh+QFOu/UigXbh7t43LaOVajo2KCxaON62ANHg=
Subject key identifier:   4B:DF:48:5E:54:FB:E1:72:13:42:08:9E:E6:24:A5:96:AC:EB:4A:53
Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
Certificate issuer:       /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
Manifest number:          01E6
Signing time:             Fri 05 Dec 2025 01:15:06 +0000
Manifest this update:     Fri 05 Dec 2025 01:15:05 +0000
Manifest next update:     Fri 12 Dec 2025 01:15:05 +0000
Files and hashes:         1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: BUk81WpuZJnTPIwEV1H8HLILVWKHWLzYYsG26XYS5Os=)
                          2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=)
                          3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
                          rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
        Validity
            Not Before: Dec  5 01:15:05 2025 GMT
            Not After : Dec 12 01:15:05 2025 GMT
        Subject: CN=69323219-ca48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:ff:cf:65:d8:10:ff:a3:b3:7a:98:76:fc:
                    b6:69:42:0b:a9:db:47:a0:4f:3a:9d:97:1f:b9:af:
                    9d:01:f9:02:c7:c4:80:69:e7:ef:f3:a1:62:ea:43:
                    d3:6b:51:34:d2:e4:54:7e:17:83:09:14:ab:ea:c9:
                    b0:c7:23:b5:07:fc:40:57:46:42:dc:fe:34:b6:50:
                    19:0c:b8:fd:a3:66:c9:fe:58:1d:8d:af:f6:58:4b:
                    e6:86:b4:e7:61:66:cf:58:e7:ce:c2:a3:91:7c:75:
                    19:87:ce:27:05:cd:5c:57:67:be:ea:89:2b:cd:06:
                    76:8c:78:48:20:6f:8a:c0:c2:fa:cb:ce:da:d2:de:
                    9d:23:f5:08:7e:47:c6:c8:9b:46:a2:bc:f3:66:15:
                    50:42:ed:4b:2f:9b:61:d5:c5:32:61:2b:5d:09:16:
                    63:c5:8d:c4:fd:62:8d:e5:77:fd:a4:15:90:dc:5e:
                    bd:84:d7:c4:83:1d:32:5c:a8:3c:15:a2:08:a3:8e:
                    6a:f0:d6:c0:d5:5a:5b:83:6b:d7:1e:76:6c:03:19:
                    20:f6:d6:97:34:ac:fb:dc:5d:b5:59:6d:98:bd:17:
                    48:6b:c5:8a:1f:0c:5d:84:22:6f:c3:c1:56:e7:2f:
                    ee:cd:06:1f:7c:06:93:93:a0:87:57:1f:c4:7e:83:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:48:5E:54:FB:E1:72:13:42:08:9E:E6:24:A5:96:AC:EB:4A:53
            X509v3 Authority Key Identifier:
                keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:72:c0:d8:b6:bd:92:20:5a:67:78:c6:f0:6f:4b:73:4b:
         0f:96:b1:1c:2a:07:57:18:f8:1c:4b:40:1f:a2:66:4a:c6:62:
         d5:cc:6f:35:7b:79:7c:f8:2c:1b:8b:0d:c7:7c:3b:87:3f:07:
         9f:72:04:32:5d:ed:9c:c7:81:3b:48:60:0b:5c:a4:f3:38:9e:
         68:66:2b:c8:11:1c:7b:7a:4e:b9:6d:b1:4e:e5:5f:aa:60:d0:
         65:8c:b6:40:f8:60:3e:35:a4:81:91:75:73:d2:e0:af:01:a6:
         8b:60:11:d8:cc:51:16:bb:57:1b:bd:a6:07:d6:c1:a7:fc:e3:
         38:a3:ae:fe:55:c6:18:2b:7b:92:f8:19:24:da:5b:19:4f:ce:
         19:81:dd:56:a6:3a:cb:40:d9:6d:11:a2:4b:9a:b2:aa:9d:44:
         7a:d8:ae:41:bb:17:0e:f5:0d:06:0e:c3:dd:7d:56:f3:d3:1b:
         05:e5:40:93:b2:46:32:88:8a:4d:d4:81:d1:f5:68:13:77:7f:
         3b:08:a8:71:15:20:78:3f:af:85:97:5b:7e:42:fe:ab:ec:80:
         df:68:d5:d6:8e:93:d7:57:45:bf:73:00:b2:1a:c4:b4:9d:04:
         7d:64:02:7a:bf:66:22:4f:0f:ac:f1:41:a5:3b:a0:d6:b9:70:
         a5:5f:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:03 2025 by rpki-client