This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File:                     inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier:          ntKSq+bJaqsi8ECx5U//c35QU1krsz9E5oMeP6GAwkI=
Subject key identifier:   B7:DD:78:8A:81:E3:C9:63:6A:D7:91:4F:8D:7D:6B:06:18:49:53:07
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer:       /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial:       1C71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number:          1C51
Signing time:             Sat 06 Dec 2025 17:25:01 +0000
Manifest this update:     Sat 06 Dec 2025 17:25:00 +0000
Manifest next update:     Sat 13 Dec 2025 17:25:00 +0000
Files and hashes:         1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: +fAMf+mOZFdUWnB1IsfjbVm33dF+4aUWcjWD8eAhI1o=)
                          2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: o6WkVnegao9eXl1ICqje7+2NH5TzcF/tZEw0eYLoPdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
                          rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7281 (0x1c71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
        Validity
            Not Before: Dec  6 17:25:00 2025 GMT
            Not After : Dec 13 17:25:00 2025 GMT
        Subject: CN=693466ed-b4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:b6:bf:65:24:69:47:2e:61:1c:f2:2f:9f:
                    27:34:a1:85:77:66:42:9c:9f:c4:8b:1b:7a:96:1b:
                    f4:2a:2d:03:0d:26:4e:c4:55:87:81:c3:c3:64:15:
                    fa:fa:49:aa:51:29:de:78:b8:fa:ab:79:c4:86:9f:
                    07:ec:a6:35:c0:66:17:de:41:da:65:22:c3:ec:e1:
                    d6:ff:aa:eb:4e:e6:82:c8:4c:b0:1e:f8:9a:2d:67:
                    69:fc:bd:f1:1c:ec:c9:b8:ec:95:f5:11:86:43:84:
                    c6:16:72:fb:cc:3a:0f:00:b2:62:64:1a:c8:90:10:
                    84:e8:6c:df:3e:04:74:de:55:36:b7:08:96:eb:c8:
                    87:8c:ac:2b:14:fb:41:f2:2d:60:af:94:4c:ef:96:
                    be:0b:07:59:17:3f:cc:5b:34:e5:c4:45:a8:64:ee:
                    5b:c7:90:59:86:96:73:03:f6:55:51:4e:b0:a0:2c:
                    65:94:40:58:9b:8a:a3:df:94:77:b8:87:b6:89:63:
                    b4:67:c2:18:ed:5f:ca:47:90:d8:a2:78:30:b8:28:
                    d9:53:d3:96:5f:4d:4c:d6:bc:a1:9b:8f:19:82:19:
                    88:d7:41:fe:93:de:32:73:e0:e1:8a:1d:59:1c:01:
                    fa:62:d9:da:de:05:50:8c:46:4d:8b:2a:0e:e0:6f:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:78:8A:81:E3:C9:63:6A:D7:91:4F:8D:7D:6B:06:18:49:53:07
            X509v3 Authority Key Identifier:
                keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:7e:84:95:56:70:9b:24:70:b7:b5:ab:7d:d9:4a:b6:28:
         82:63:89:32:42:33:cc:69:07:1e:62:24:41:00:de:32:6d:39:
         fe:40:4c:71:d2:39:86:b4:3c:82:01:64:f4:93:42:65:44:e7:
         26:46:66:ab:38:e9:44:18:a5:0b:99:33:26:5b:fd:df:1c:56:
         bb:4d:4b:0b:a3:a2:37:0a:8f:16:7c:c8:25:4e:07:b5:c2:dc:
         45:dc:9b:eb:48:0b:28:a6:16:e3:fb:00:5b:77:04:38:46:41:
         9c:83:ab:5a:40:a5:b9:78:91:b8:99:5b:24:a4:8c:32:88:25:
         50:87:66:ae:f4:ad:2c:14:27:cd:22:20:4b:c4:af:fa:b8:f5:
         93:41:0f:48:0f:0f:0f:27:36:4f:cf:4d:41:47:2c:88:a8:ea:
         e2:ec:97:4e:06:d4:d5:09:d1:3b:4c:59:6c:a0:e8:07:37:d6:
         89:b6:98:4d:40:7a:a2:b4:fc:47:5f:95:32:e3:e8:6a:39:6f:
         0b:b0:87:a2:76:68:5b:cf:3d:7e:01:de:cc:fd:96:71:26:24:
         74:03:4b:d7:2e:d8:ea:e8:9c:d4:4a:8a:67:7d:eb:86:fa:18:
         9a:ac:ea:75:19:eb:eb:5c:ed:c4:50:c5:4d:38:5e:bb:05:f1:
         36:9f:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:08:30 2025 by rpki-client