This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          roWTIfTJRAg8bjN950zkLSm/NsDAiKZ3ZJZ67q9lIJ0=
Subject key identifier:   68:EA:7E:B2:EE:6D:E0:83:9C:86:F4:5C:27:93:C8:7E:23:21:54:AD
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1ABA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1ABA
Signing time:             Thu 04 Dec 2025 16:01:38 +0000
Manifest this update:     Thu 04 Dec 2025 16:01:36 +0000
Manifest next update:     Thu 11 Dec 2025 16:01:36 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: wk6gPY9ED2Ra0B4F9NVdamEUad3tNAMmZo1wL/zsMIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6842 (0x1aba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Dec  4 16:01:36 2025 GMT
            Not After : Dec 11 16:01:36 2025 GMT
        Subject: CN=6931b061-f750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:7a:b8:6c:09:fe:79:40:e8:dd:41:e4:79:
                    22:d7:dc:60:e0:83:2a:99:af:73:0a:89:b9:ba:94:
                    2b:a1:2b:ff:34:26:6f:01:aa:ac:28:8b:e9:4e:4c:
                    2f:ad:1c:af:7d:5b:9c:4e:ee:cf:a5:f4:3b:de:45:
                    51:13:15:df:10:21:7f:a3:09:51:a9:16:b4:5b:08:
                    48:3b:b7:aa:5a:bc:99:7c:3f:c1:86:63:0b:d6:79:
                    fe:e3:5c:a5:0b:ec:9b:77:c7:18:33:1b:6c:45:88:
                    a7:15:b3:54:ed:e5:26:ff:7d:f5:1f:44:df:8e:d8:
                    2f:c9:f9:20:91:7a:48:31:4a:1a:ae:bb:1a:67:3f:
                    e2:65:b8:78:d4:c0:d8:8a:44:de:d0:d4:2c:a9:3f:
                    67:d8:2c:e2:dd:a0:ff:ff:fd:53:e2:e7:6a:d3:9d:
                    f3:38:40:62:2b:67:80:df:43:b5:ab:ae:16:ab:31:
                    86:36:a5:90:66:7d:2e:78:1d:a5:1e:cd:6f:83:9b:
                    52:10:b2:62:d3:60:4c:40:e7:57:3f:bd:19:3b:6e:
                    72:f7:99:44:41:83:f4:5a:c4:5d:0e:b8:6e:f9:4a:
                    8f:35:d9:25:36:99:02:e8:1e:4f:bf:fc:92:8a:6c:
                    2d:c6:34:06:91:6c:47:fe:c6:b7:5a:02:60:32:6e:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EA:7E:B2:EE:6D:E0:83:9C:86:F4:5C:27:93:C8:7E:23:21:54:AD
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d0:30:34:34:37:90:c1:17:d4:b5:2d:c1:3d:55:a6:ad:2d:
         44:8a:eb:24:2a:08:55:e8:fe:0b:6a:63:98:81:78:42:49:51:
         2e:e7:3e:42:e8:9b:59:44:14:13:2d:1d:6c:db:4b:43:c8:9f:
         a7:05:39:b8:c6:ea:a5:a7:cd:0b:94:68:fd:a7:51:5d:f5:bd:
         6f:f7:b2:f2:a0:3b:10:5f:72:4e:77:c0:84:8b:16:2d:af:a8:
         b0:b7:fe:0e:bf:a5:2e:44:ba:ea:f5:ac:39:35:7d:39:ad:ef:
         af:df:9d:f9:7a:15:84:75:3f:c1:44:cb:e8:2a:68:20:ac:e3:
         75:df:bd:2f:6b:42:2a:11:f1:84:ed:21:df:01:0d:8e:05:ae:
         c5:bb:f9:46:30:d6:55:b3:32:7d:00:18:29:13:b4:d9:35:27:
         0f:6b:97:47:0a:39:96:5c:3f:c4:f8:75:af:eb:06:26:c0:e3:
         49:08:51:24:ce:9a:2f:ef:0d:44:08:1a:e7:20:34:fa:e0:fc:
         ef:ce:d1:b8:38:8e:22:4c:55:ff:bf:3e:04:8c:5e:4d:e8:84:
         55:34:1e:32:a6:53:a1:0e:5b:8b:a8:cc:d4:64:32:a6:e1:99:
         ca:3a:b2:d5:48:0c:9a:bc:12:e8:e4:15:7f:6a:7e:00:83:4b:
         55:0d:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:37 2025 by rpki-client