This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
File:                     rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json)
Hash identifier:          tqbcFTTtmKz7vZ9BGea0V4yDDK4jUosMr6tshS6/H5Q=
Subject key identifier:   8F:7B:D3:28:C1:71:17:D0:E8:F2:BE:3C:DC:46:06:E0:FC:7F:1A:D3
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Certificate issuer:       /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial:       0B44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
Manifest number:          0B39
Signing time:             Thu 04 Dec 2025 18:35:52 +0000
Manifest this update:     Thu 04 Dec 2025 18:35:51 +0000
Manifest next update:     Thu 11 Dec 2025 18:35:51 +0000
Files and hashes:         1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: OCqmFgX5a13jSjNKt3zKBaKnjbv1MqsuAle0atRIm9I=)
                          2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: TavcsNbKSaSDXkcGP72u+jTcP48G3Su8SEY/uwppPwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
        Validity
            Not Before: Dec  4 18:35:51 2025 GMT
            Not After : Dec 11 18:35:51 2025 GMT
        Subject: CN=6931d488-aed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:33:98:f1:fb:49:71:5f:06:d2:94:b5:28:
                    3e:d2:42:e9:13:1f:7f:a1:b9:77:fa:34:95:9e:05:
                    73:f0:59:71:c8:3d:df:1b:83:66:dc:96:ed:b9:b5:
                    c7:df:0e:4f:7f:6a:68:00:4f:a3:95:54:4f:73:87:
                    46:bc:88:07:a0:60:c2:75:da:be:dc:ac:ee:52:90:
                    9c:61:af:c9:b7:33:76:c7:55:71:c4:04:a6:6f:e0:
                    29:83:e6:01:b8:dc:ce:3e:12:64:e8:41:34:dc:39:
                    35:1a:08:f7:13:39:5e:9e:7b:c4:e5:df:2c:39:c8:
                    cc:99:c0:7c:2c:7e:45:f1:e3:ee:53:10:20:1a:5f:
                    b4:8b:b3:db:71:7f:ce:5b:f9:8f:8e:a2:a8:f5:0c:
                    4a:84:ca:d0:50:59:3f:f6:ef:91:44:55:ae:ec:51:
                    c6:4d:39:3e:cc:44:5a:cc:b2:0e:97:15:2f:55:d8:
                    83:97:d7:4a:f7:5e:37:95:27:bc:fe:df:27:88:9a:
                    83:78:b1:f6:3f:7f:34:d8:d0:9b:9f:fe:13:dd:04:
                    66:ac:35:21:71:16:a3:c9:1b:ad:2f:3b:45:ae:19:
                    dd:06:f5:ce:e6:b0:6d:45:ca:34:ea:c7:61:41:55:
                    b0:66:39:50:d4:84:39:69:7a:f5:0f:b0:14:ec:df:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7B:D3:28:C1:71:17:D0:E8:F2:BE:3C:DC:46:06:E0:FC:7F:1A:D3
            X509v3 Authority Key Identifier:
                keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:40:4c:5a:b7:be:32:70:66:3d:00:7a:ec:ff:eb:5b:7d:89:
         32:90:c2:42:68:41:69:38:dd:23:46:7e:fb:84:65:1a:fe:44:
         66:37:5c:12:47:56:a3:ef:9c:33:39:6c:51:32:c0:8a:28:c6:
         a9:6c:80:65:c7:10:2e:49:81:ce:ed:7d:41:7b:0c:8f:41:5b:
         06:3c:c8:82:e9:a5:be:9b:32:4d:fe:ab:18:85:0e:1c:bb:a1:
         12:58:7e:56:a7:71:91:af:b0:5c:3b:5d:df:62:c5:f0:76:42:
         00:23:00:5a:ab:6a:eb:19:29:b4:1e:0d:38:f6:cb:0b:7c:fa:
         f8:60:be:06:d3:a2:e6:ec:b6:d6:8d:b0:0d:2e:dc:f8:91:ad:
         6e:90:d5:4e:bc:fd:62:df:5b:90:69:40:90:2b:94:9a:10:a9:
         5e:1c:9d:b5:f0:2a:57:90:e2:4a:cb:80:6e:a4:2f:e0:76:9e:
         a9:ba:93:08:e4:27:d7:09:f2:71:7b:86:ed:f8:17:2e:3a:a2:
         a7:1b:04:d8:c9:0f:0e:48:48:18:86:9c:13:f4:85:9f:d9:b5:
         48:e8:41:9b:73:a3:c0:dc:7b:c6:bf:ad:34:9c:d0:55:13:5a:
         a5:08:4c:bc:f0:77:45:20:5d:ec:1c:a9:be:77:dd:45:9b:4a:
         a0:9e:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:35 2025 by rpki-client