This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
File:                     SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json)
Hash identifier:          BjnNtkgR1QXDef2bjyiK954lXmSLrKaUCGoVK57R+7g=
Subject key identifier:   72:E0:FA:9A:2A:8A:10:5C:63:A6:F9:38:10:BC:1F:AF:08:85:64:19
Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5
Certificate issuer:       /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
Certificate serial:       084F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
Manifest number:          083B
Signing time:             Thu 04 Dec 2025 19:56:17 +0000
Manifest this update:     Thu 04 Dec 2025 19:56:16 +0000
Manifest next update:     Thu 11 Dec 2025 19:56:16 +0000
Files and hashes:         1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: R8aGzURFKAeG783jO8F1MCyBQIWfz1N013EQAwSp4Fk=)
                          2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: 945IwSRQpquR63B4O0BtV6nqh3ke3gGQ6coFK1lAOcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2127 (0x84f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
        Validity
            Not Before: Dec  4 19:56:16 2025 GMT
            Not After : Dec 11 19:56:16 2025 GMT
        Subject: CN=6931e760-fb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:8c:a0:56:4b:61:a5:2e:fc:0e:96:cf:b5:
                    08:11:e8:df:6a:d6:22:88:c2:ec:48:3b:f5:20:0e:
                    6a:22:1e:43:ba:74:01:cb:84:a9:d6:c1:79:35:1f:
                    6e:20:69:c1:4c:38:f7:81:33:1e:44:f6:32:e7:3d:
                    8c:a2:d2:aa:08:a0:37:ed:cd:c0:8e:17:41:52:d0:
                    cf:70:b6:d9:e7:16:eb:51:5e:14:4d:2f:de:81:26:
                    2d:61:89:dc:d4:cb:4f:07:70:a2:2c:2b:bb:7d:7b:
                    ef:e3:64:af:67:a0:ee:a9:db:44:85:a3:b7:33:b9:
                    b2:44:06:ae:d1:cc:8e:48:12:44:db:00:6e:09:dc:
                    a1:3e:81:15:9a:dc:a6:f3:83:a6:2f:da:62:ae:68:
                    c5:a5:2c:09:7d:7e:08:af:1b:26:6a:04:31:1f:fb:
                    a5:79:9b:3c:1d:c8:96:01:94:05:3a:09:7d:46:7e:
                    8a:3a:e7:13:89:70:9a:a8:a9:e3:c0:f6:9e:61:25:
                    28:25:e0:57:d9:2e:cb:e0:d2:a3:fe:71:1b:dc:4f:
                    99:9b:0c:cc:4a:23:e4:8a:eb:31:f7:f5:92:9e:e3:
                    a7:c0:00:75:dc:31:63:24:57:7b:94:45:e5:4a:bf:
                    d7:35:26:8b:60:0b:e7:38:97:9a:fc:f5:37:7a:9d:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E0:FA:9A:2A:8A:10:5C:63:A6:F9:38:10:BC:1F:AF:08:85:64:19
            X509v3 Authority Key Identifier:
                keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:78:73:60:ad:d5:ab:e4:4c:8d:96:79:c3:18:d4:af:e5:ba:
         e7:d2:35:f2:98:b8:48:85:51:56:1e:01:a4:4e:6e:95:24:54:
         6e:7a:58:8c:d5:8e:49:1b:6b:67:0b:8a:36:ab:d9:b9:ef:f1:
         3b:bd:12:24:12:01:a8:8b:d2:c3:f7:10:0d:e7:a5:83:a7:3a:
         28:56:e1:69:04:19:f3:3d:fa:9b:5b:de:70:09:d9:8d:bf:9e:
         46:5b:aa:d1:dd:1a:2d:08:c6:4d:41:0f:1e:df:4b:7e:db:96:
         87:ce:66:2b:68:a9:a8:eb:8e:24:d1:59:0b:83:53:ca:cc:08:
         fd:b9:cd:61:fc:90:73:f7:49:68:f4:a4:2d:cd:13:a5:57:75:
         86:30:cd:60:08:62:e4:9a:fd:ab:59:c6:34:26:36:a8:c0:a2:
         f3:14:32:a5:35:d7:25:12:fe:f3:00:91:dc:c5:88:5c:54:a2:
         79:ea:13:db:b7:9d:3e:21:6c:82:3e:28:fd:f9:f0:43:5d:f5:
         b4:b2:2d:24:f1:0c:09:d5:55:d2:cc:61:2e:d6:f1:1d:46:36:
         58:ce:f2:12:d4:a4:13:59:48:05:33:e0:04:c7:51:e9:7d:6f:
         ec:02:bd:d7:14:7d:ad:65:e7:d5:69:df:45:6f:af:05:3a:c6:
         a5:2a:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:21 2025 by rpki-client