This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
File:                     SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json)
Hash identifier:          fJDoXxphG6LvFXKjWaort2wbet+SEMQ3TMgTLwNEsr8=
Subject key identifier:   98:62:ED:87:5D:D8:40:D8:63:0B:E4:A2:D2:E0:82:B8:47:45:8F:48
Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
Certificate issuer:       /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Certificate serial:       202E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
Manifest number:          2021
Signing time:             Sat 06 Dec 2025 15:41:11 +0000
Manifest this update:     Sat 06 Dec 2025 15:41:11 +0000
Manifest next update:     Sat 13 Dec 2025 15:41:11 +0000
Files and hashes:         1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: LRrM0mlgfzpXSzvFhd8zoErHk/S5BFT2aHTRVKXW+NI=)
                          2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: X+fXZ0PrCkpU/Zz2pOrb1G2WQInc8FuVJwsYYh/w08g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
                          rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8238 (0x202e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
        Validity
            Not Before: Dec  6 15:41:11 2025 GMT
            Not After : Dec 13 15:41:11 2025 GMT
        Subject: CN=69344e97-ad16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:a9:63:e8:5d:cd:16:3c:f1:14:06:e2:96:
                    ae:3b:12:4c:94:2d:7d:f3:f0:3f:2a:b0:d6:42:c4:
                    c8:0a:48:09:c2:4f:ba:25:01:d8:99:c7:00:ea:4e:
                    96:d6:65:29:0a:67:f6:e3:5c:48:f7:a2:f7:6d:6b:
                    e9:a0:17:c2:bc:82:4f:0d:3d:81:b2:de:cb:85:e2:
                    20:32:af:b5:ab:8f:8c:c3:48:06:11:61:d1:c2:87:
                    b9:0b:f6:77:17:c9:25:55:58:ae:16:e1:51:23:27:
                    e7:ec:ce:9f:67:bf:3f:8b:f0:c2:01:88:da:06:d3:
                    91:78:70:3d:70:98:af:90:3b:2b:32:4c:fc:3f:cf:
                    40:e4:7b:89:dc:f5:22:96:af:f9:05:69:9f:a9:45:
                    27:8b:87:dd:02:64:54:e6:54:2d:7a:d4:11:30:43:
                    31:83:38:f4:d9:37:cd:9f:e1:dc:12:59:cc:0d:4f:
                    9f:c7:8c:b2:7d:b9:fe:99:fd:61:bd:8f:6c:0e:d3:
                    6f:88:29:14:ed:10:31:94:14:9c:ce:ce:cc:86:d5:
                    68:b7:e2:dd:5f:f0:c7:6b:8b:40:51:8f:01:4a:db:
                    2f:86:47:32:bc:18:c5:b0:e3:ee:6e:74:f0:0b:29:
                    70:0a:1d:64:5d:5e:b1:ef:cd:e3:5b:ec:e2:24:c1:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:62:ED:87:5D:D8:40:D8:63:0B:E4:A2:D2:E0:82:B8:47:45:8F:48
            X509v3 Authority Key Identifier:
                keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:a8:d9:9d:4a:cb:26:30:bb:3e:79:80:5e:e2:d6:8e:59:
         ea:53:ea:da:e8:3a:28:da:bd:1a:cb:b7:cd:f4:98:3d:82:74:
         98:99:d2:f5:15:f8:d8:1b:c1:69:c2:49:eb:3e:15:22:39:86:
         84:f7:dd:ef:c2:6c:6d:fb:5e:8e:e5:a6:4e:15:7e:57:f7:27:
         bf:b7:7d:6f:94:df:3a:95:72:21:a3:f7:d3:d6:c1:17:0a:27:
         89:ef:d6:dc:df:ed:fb:87:19:ca:73:90:70:54:7e:c0:f5:e7:
         b1:ed:23:a3:1c:72:a2:90:bb:4b:12:f2:91:d2:78:4d:7c:b3:
         86:5c:3c:a0:f3:37:d0:ee:84:0e:c0:22:f4:aa:01:48:6f:ca:
         26:f3:c3:30:c2:48:a6:91:70:bc:70:b3:1e:1e:57:b7:fa:e3:
         d2:0d:17:68:a0:b8:7b:ed:4b:bf:53:2e:9e:b0:30:f3:23:2b:
         1f:d5:4b:cc:05:a7:41:79:40:f5:23:3a:1c:c4:a2:0a:c4:70:
         09:e0:15:a2:b8:08:05:ef:6b:2c:ef:41:64:9d:3c:ec:54:d2:
         02:a9:21:c3:da:69:1f:ad:b7:06:36:9f:be:6c:b0:54:f3:13:
         79:38:04:7c:0b:47:d2:b5:ce:81:a5:80:5c:42:35:6a:fc:6f:
         1c:75:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:36 2025 by rpki-client