This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File:                     B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier:          +Q84+1MDlYRL8FBy60PgnLGCUf/LLdsKb/T0kR6LmI0=
Subject key identifier:   2F:40:50:A4:CD:68:83:6C:2B:D5:14:1C:3E:D1:22:40:38:98:06:1D
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       091F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number:          08B4
Signing time:             Thu 04 Dec 2025 19:48:54 +0000
Manifest this update:     Thu 04 Dec 2025 19:48:53 +0000
Manifest next update:     Thu 11 Dec 2025 19:48:53 +0000
Files and hashes:         1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: Gjo20WH5v29DoBZvbA5OGraOhbUWp7Bzd/2YB6md5lQ=)
                          2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=)
                          3: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=)
                          4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=)
                          5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=)
                          6: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=)
                          7: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=)
                          8: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Dec  4 19:48:53 2025 GMT
            Not After : Dec 11 19:48:53 2025 GMT
        Subject: CN=6931e5a5-5859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:b3:6e:3f:2a:7c:80:8a:70:2b:75:c3:4e:
                    eb:67:61:25:a8:3b:0b:29:27:66:e6:2e:48:fe:a2:
                    b0:e5:84:cf:67:62:2a:0a:62:81:6d:98:4f:9c:02:
                    d8:1c:08:3d:73:e4:0e:19:f1:ad:95:b1:bb:e3:3c:
                    32:9b:fc:4e:1b:2a:bd:d6:c3:89:63:6d:ff:b7:2c:
                    df:89:17:9d:1a:ef:07:92:a1:6f:ef:90:ad:0e:9f:
                    3f:0f:49:02:59:4e:fa:e0:b7:a9:96:ed:41:bf:a2:
                    57:ae:18:dd:3c:ac:14:89:45:9c:e7:16:fa:56:31:
                    cc:88:b5:17:01:13:20:98:a7:f2:e5:45:21:07:a3:
                    e1:7e:53:ef:4e:7a:70:3f:80:55:aa:42:a3:6d:7f:
                    0a:b0:ea:45:6e:c9:3c:2f:e2:0e:fc:b4:2a:7e:6c:
                    36:d1:58:1c:9d:e6:07:a9:f6:9d:8e:24:3b:3e:56:
                    72:18:59:ae:c8:8a:82:69:4a:b8:24:22:3a:ce:76:
                    0f:24:93:fc:04:15:02:67:47:88:ea:0e:f0:50:7b:
                    fe:c8:d7:13:9b:a9:7e:f3:c9:67:cd:d8:31:7d:19:
                    28:14:a7:f5:80:b5:03:22:40:d1:38:87:8f:a6:db:
                    ee:32:a3:c7:ee:57:c2:8d:7a:55:29:47:17:ad:38:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:50:A4:CD:68:83:6C:2B:D5:14:1C:3E:D1:22:40:38:98:06:1D
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:19:94:f7:27:0f:4e:1f:1f:c0:ac:74:ef:1e:2c:e3:be:3f:
         dd:ac:a8:f3:8f:74:42:01:db:60:9e:87:a7:d2:95:01:16:d7:
         a8:3b:56:25:77:09:ce:ab:cb:2e:c9:6f:d0:c2:97:99:4b:77:
         16:8d:e9:67:6c:ae:39:5d:07:de:da:a3:48:a1:eb:ed:4e:ed:
         a4:0a:32:72:9f:18:18:30:76:7c:8f:69:b6:13:1b:41:88:7a:
         08:4b:49:9a:ff:1f:33:9c:a6:b2:14:80:5c:a7:c0:4c:88:88:
         59:40:26:47:cb:8a:9d:d8:93:3e:c0:75:7b:84:cf:06:a6:04:
         cf:e7:5d:80:c1:01:1c:51:7a:fc:ad:3c:d0:c8:41:df:8d:fb:
         72:5d:23:c6:84:4e:de:f0:29:51:de:20:23:70:7b:0c:52:a0:
         f5:3a:1d:ba:a7:49:c0:e9:2e:1d:23:b5:b4:13:7a:b0:65:a5:
         44:68:d8:f2:27:31:50:5f:dd:5b:10:c9:53:73:15:3c:e5:79:
         89:e1:65:7c:83:42:76:75:6a:1b:9d:82:8d:d2:3a:bd:84:ae:
         95:e7:18:51:b0:d5:b0:c4:40:97:44:7a:2f:3b:9f:ea:96:75:
         e3:47:09:58:71:88:90:9f:42:1a:98:ab:23:64:52:dc:c8:2f:
         a4:01:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:21 2025 by rpki-client