This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File:                     79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier:          /qwHMbrobjySnlBpeKdxTDXL8UXT+hgTYq561NAXeEg=
Subject key identifier:   4A:89:CB:81:E8:9F:B4:1F:94:42:5A:DB:B5:EA:57:D7:4D:12:C2:A6
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer:       /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial:       06E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number:          06DF
Signing time:             Sat 06 Dec 2025 20:57:44 +0000
Manifest this update:     Sat 06 Dec 2025 20:57:43 +0000
Manifest next update:     Sat 13 Dec 2025 20:57:43 +0000
Files and hashes:         1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: qMtPSaRMyZO+yFWEmL30zYM7qa34cYWGjeE/IEXS87U=)
                          2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: gf+XHv/B7y9fMOtlEsCMLfQ4eU62pqLRv/z7H7sAxg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
                          rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1765 (0x6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
        Validity
            Not Before: Dec  6 20:57:43 2025 GMT
            Not After : Dec 13 20:57:43 2025 GMT
        Subject: CN=693498c8-3118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:76:de:8c:b9:45:f7:b6:79:8f:69:40:be:
                    94:a7:d7:f5:7c:0e:2b:02:22:82:97:fb:f4:90:05:
                    ff:6c:25:be:3a:e8:69:b0:0e:cf:1f:0d:ed:a8:6c:
                    c5:b0:5f:37:67:e2:c8:87:ae:28:ab:81:0f:1c:82:
                    42:da:66:43:44:6d:f4:7a:a3:52:19:11:90:4c:b9:
                    eb:e6:b7:db:62:1b:4b:b5:a3:bf:1f:a5:2c:9a:c4:
                    c7:fc:a0:3d:39:11:62:08:41:18:17:2b:32:9e:b1:
                    76:72:e9:b7:59:f8:8f:cc:79:ff:4e:98:e9:45:bd:
                    21:dd:d0:cd:d7:34:70:e5:89:5e:2c:eb:fd:c2:d8:
                    e4:62:d2:02:97:6d:bd:23:2d:61:37:71:a0:ca:49:
                    92:75:bf:14:68:50:7d:59:e5:e8:61:91:89:a1:3d:
                    ec:e5:b3:37:db:95:65:33:92:e3:fd:13:69:53:cb:
                    22:20:23:a9:ab:e1:e6:8a:a4:94:a3:2e:8a:52:59:
                    2b:5a:72:43:1c:d4:40:76:8b:7f:21:98:95:16:bd:
                    0d:1a:17:ad:1f:50:52:63:bb:17:27:b6:9f:df:0a:
                    8e:16:a6:91:27:52:aa:70:ae:27:be:dc:01:bc:7f:
                    a2:4f:90:89:d1:0f:44:4f:cb:b3:d3:d6:9e:72:a3:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:CB:81:E8:9F:B4:1F:94:42:5A:DB:B5:EA:57:D7:4D:12:C2:A6
            X509v3 Authority Key Identifier:
                keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fd:ef:d9:11:ee:71:27:b2:fd:83:97:23:4d:ba:00:30:be:
         d2:fa:93:55:4c:43:36:a8:d5:05:53:51:3b:79:95:c7:6a:df:
         f2:da:96:06:6d:83:d2:67:27:c9:66:a5:15:29:c8:80:44:6b:
         38:0c:5a:2b:09:f2:d5:5d:7b:f1:77:7c:dc:36:a3:13:44:d9:
         1c:c7:69:49:3c:6c:8b:02:ef:a4:28:79:7d:9a:2d:6b:46:fe:
         30:57:93:d3:23:9c:1c:35:a2:a2:08:29:69:9f:62:7d:61:00:
         85:cc:45:dd:da:b2:12:82:15:d1:16:d3:14:57:ad:fd:82:3f:
         92:bc:ba:ca:35:d2:42:e1:7f:80:8d:f6:04:03:ab:e3:43:12:
         1d:06:de:79:d1:7c:96:c1:c5:2f:8d:b8:58:7b:a8:eb:34:f8:
         04:ad:3f:0e:6b:4d:e8:57:5f:f2:fd:1b:a8:e7:18:e6:29:d3:
         4b:cb:ae:db:a9:37:50:58:d6:f3:6c:bc:ef:ba:04:75:7e:3d:
         ef:a7:d7:11:a9:29:c1:8d:d9:a5:49:d4:5e:f9:e6:81:96:c9:
         61:f9:e1:ce:6d:02:82:e0:0c:f1:1d:e1:8a:11:7f:c4:de:92:
         9f:29:f4:07:3f:89:44:7f:8b:e4:45:88:87:6e:c7:60:3f:64:
         44:b1:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:53:56 2025 by rpki-client