This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File:                     A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier:          YHyzrHziX4WdcLgA3WJq+n1GLFEcs8rvDfeh5YEVxFs=
Subject key identifier:   65:ED:C5:50:70:DF:A9:03:B2:97:D8:5E:21:CB:5C:98:85:46:CC:62
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer:       /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number:          0165
Signing time:             Fri 05 Dec 2025 02:09:59 +0000
Manifest this update:     Fri 05 Dec 2025 02:09:59 +0000
Manifest next update:     Fri 12 Dec 2025 02:09:58 +0000
Files and hashes:         1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: V0KQ+ul6CeQWlLKemiwJaw54GsmdJJ1f0S8vW/ZNgMo=)
                          2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: /F1r5TNvz5O+loAxtqvN6ua/Jk1sG70DsTCgwmr+C4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
        Validity
            Not Before: Dec  5 02:09:59 2025 GMT
            Not After : Dec 12 02:09:58 2025 GMT
        Subject: CN=69323ef7-2bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:f6:e4:46:42:b5:b9:97:f8:98:ec:27:12:
                    bf:f7:66:50:55:27:84:b5:9a:b8:cd:56:7c:26:4a:
                    56:7a:dd:ef:2a:14:08:7f:4e:af:80:a7:bc:0d:f1:
                    84:4e:7c:65:a6:13:ce:14:5e:08:50:60:73:86:90:
                    1b:33:22:e3:05:05:7e:1d:9f:16:e5:e1:57:1d:d5:
                    20:a7:9d:0f:7d:0b:14:01:bf:ea:8c:e2:6f:d6:6e:
                    09:6a:e1:79:9f:f8:e3:46:ba:33:65:e2:dd:30:65:
                    33:3c:37:72:a0:44:c3:b2:99:45:67:8a:b0:31:26:
                    37:e2:e4:82:a8:70:f1:eb:23:48:47:86:fc:6b:c6:
                    96:48:a4:bb:9f:01:83:80:0b:78:c3:1c:a0:2d:2e:
                    d9:78:8a:b2:cf:5f:5e:b8:34:8b:81:e0:ea:95:6b:
                    ed:36:3a:ad:bc:bd:45:5e:39:43:64:39:92:53:ab:
                    af:47:a6:e5:ea:67:5f:2b:c1:35:05:86:f7:ed:69:
                    5b:24:c0:17:3a:3d:9b:4c:f0:70:cb:f5:83:c5:62:
                    b5:ca:e4:3b:38:cf:eb:d9:37:ce:4e:91:e9:1c:42:
                    d9:26:20:e8:f5:96:ea:9f:2f:d3:1f:99:25:41:49:
                    39:d1:26:07:bc:8b:ce:11:1d:4c:87:18:58:46:83:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:ED:C5:50:70:DF:A9:03:B2:97:D8:5E:21:CB:5C:98:85:46:CC:62
            X509v3 Authority Key Identifier:
                keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:c2:0c:35:8d:03:eb:49:f0:bd:a2:3e:ff:e4:f3:96:0f:
         2d:1f:a9:51:13:76:14:e5:1f:8c:3b:ad:5a:b1:88:43:fd:f6:
         86:df:d1:a3:fd:17:dc:fb:7a:58:45:2b:44:7c:d6:1a:9a:a2:
         99:0d:68:07:d5:ad:b4:38:3b:5c:61:87:ac:2f:08:4a:b1:e4:
         e7:39:40:b7:e5:66:c4:d8:74:f3:f3:b8:ad:4e:f6:d9:1a:73:
         bd:c6:e8:38:3c:59:13:f0:32:6f:67:01:30:45:6a:53:d2:9c:
         14:f4:cc:d2:15:a6:55:06:79:a7:a8:01:d5:39:9a:da:b2:b5:
         97:c0:9f:47:86:58:f5:63:47:75:66:31:53:70:24:9c:84:d8:
         3f:24:73:e8:df:35:3d:51:f9:9f:17:34:20:bf:e3:73:cf:07:
         79:76:df:94:62:7e:3a:48:c3:b7:fe:ce:c3:c3:70:4d:f9:71:
         d3:b8:c3:c6:59:1c:ee:44:91:6f:2a:73:86:b8:b4:a5:26:89:
         90:5f:f6:86:e5:ac:cc:09:2f:53:4c:c8:c8:f8:25:1d:d7:65:
         6b:72:9d:3c:60:26:71:18:88:1e:00:b2:f6:b0:e9:3b:ac:06:
         02:90:6f:6a:5a:cf:a5:8a:11:97:b9:60:c3:95:4f:49:68:f8:
         ae:40:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:14 2025 by rpki-client