This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
File:                     cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json)
Hash identifier:          nNepgnGwU1WUJIVFlkciYf8KHfxIhSIp3JxbKwsMlKE=
Subject key identifier:   58:EF:79:4F:AF:AC:76:50:7D:BD:80:C8:27:3C:74:D8:07:AF:21:D4
Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
Certificate issuer:       /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
Manifest number:          01F0
Signing time:             Fri 05 Dec 2025 00:52:54 +0000
Manifest this update:     Fri 05 Dec 2025 00:52:54 +0000
Manifest next update:     Fri 12 Dec 2025 00:52:54 +0000
Files and hashes:         1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: 8mmg+/HB5ppe2upYI2Zne/3tndzVj1efzJfVDg8GwTk=)
                          2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
        Validity
            Not Before: Dec  5 00:52:54 2025 GMT
            Not After : Dec 12 00:52:54 2025 GMT
        Subject: CN=69322ce6-02dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:30:8e:51:63:48:30:85:25:7d:77:72:a6:
                    27:9c:fa:80:df:79:f4:46:8b:1c:1e:a9:d9:6e:37:
                    94:1f:73:9c:08:8b:04:8f:a1:22:13:1a:08:ce:e6:
                    01:25:e2:35:f1:07:a8:75:10:35:fd:39:9a:18:35:
                    d2:33:fa:33:29:27:e4:63:f1:2e:1f:8b:3a:11:64:
                    a2:81:4a:16:fc:9f:05:68:0d:1e:85:3c:e8:e0:1e:
                    27:dc:20:b8:30:3b:d6:d3:c7:22:cf:81:aa:4c:2d:
                    01:31:5c:dc:3d:a1:71:b8:37:c6:70:7d:60:30:10:
                    28:50:31:7d:0e:35:4d:9b:ac:20:4d:14:ef:67:22:
                    9e:df:4c:26:47:06:86:fb:d5:eb:7d:1d:6e:c7:f2:
                    fb:3d:98:16:3f:8c:f6:43:b8:64:c2:06:77:6a:a8:
                    97:a2:56:04:b6:56:46:76:f0:a2:59:28:c7:ad:bd:
                    a0:7f:a8:28:81:56:92:ff:0d:4e:22:cc:9b:e3:29:
                    ac:f9:52:2f:03:23:53:c5:e1:d0:6c:4a:6f:5a:07:
                    0e:c6:ca:2a:c5:5b:59:fa:d9:22:28:e4:81:de:92:
                    69:d1:0a:79:76:ae:ba:cf:7b:cd:e5:63:6e:b2:37:
                    44:f8:b7:01:70:44:63:00:fd:ce:37:ed:43:1e:9b:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:79:4F:AF:AC:76:50:7D:BD:80:C8:27:3C:74:D8:07:AF:21:D4
            X509v3 Authority Key Identifier:
                keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:1e:74:6b:7d:7d:93:a7:6d:59:5b:55:9e:1c:76:1c:a7:
         e5:7d:19:8b:a6:ed:ab:05:23:d1:06:05:62:97:07:d4:23:2b:
         4e:de:49:99:bb:9e:c1:c3:f3:d6:d7:fa:7b:9d:31:79:a3:dd:
         5d:f3:b7:26:e2:cd:3f:16:8d:54:53:2c:b4:c9:01:ad:bc:94:
         d0:93:47:00:3f:28:76:a8:26:cf:aa:57:19:ef:99:90:61:24:
         2d:6c:a7:06:e6:93:ff:f9:0a:22:3e:06:de:86:d4:cf:18:8b:
         cb:c4:a9:64:76:94:6f:62:de:4e:02:4e:77:f1:6c:4a:a0:46:
         36:07:0a:6b:c9:45:95:2a:0a:d2:94:12:5b:6f:7a:39:ab:dc:
         94:04:aa:bc:27:f2:4e:24:2d:7f:f9:32:69:62:d0:e1:53:b5:
         37:5f:74:c2:3a:c8:76:5c:67:8b:cc:69:e2:95:11:97:33:15:
         6a:f1:ab:59:c3:f7:f2:0d:58:fb:1e:53:d2:11:4e:67:0d:aa:
         b4:b6:2c:23:30:ad:3c:cf:7f:12:09:11:75:8d:d5:9e:5d:f2:
         03:73:55:94:1a:9c:80:e9:ff:13:93:f1:6f:e7:cb:df:de:93:
         08:4e:2e:a2:13:9f:25:b5:b2:98:16:06:54:de:82:42:57:08:
         09:85:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:43:32 2025 by rpki-client