This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
File:                     99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json)
Hash identifier:          QRTCMHdy6Qml9rLx818QSaOsWciM6Ls8wd2z7/noB4A=
Subject key identifier:   77:4B:65:D3:86:6D:53:C7:37:11:EA:DC:AE:B6:01:0F:8C:C9:23:84
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Certificate issuer:       /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
Manifest number:          50
Signing time:             Fri 05 Dec 2025 05:07:30 +0000
Manifest this update:     Fri 05 Dec 2025 05:07:30 +0000
Manifest next update:     Fri 12 Dec 2025 05:07:30 +0000
Files and hashes:         1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: +MvHpwO9lKMH1rHpS5UO6yvkRpHz0pOCJBP/Y2WaSCE=)
                          2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
        Validity
            Not Before: Dec  5 05:07:30 2025 GMT
            Not After : Dec 12 05:07:30 2025 GMT
        Subject: CN=69326892-33af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:5b:8f:2a:6a:4b:6d:57:36:5d:f3:62:4d:
                    02:70:cf:54:bd:0a:be:1d:49:62:fc:a3:14:1d:d5:
                    7f:c5:94:7f:db:b4:6f:e9:b0:0a:98:46:e4:c3:0c:
                    6c:a8:f4:4d:9f:7a:54:b1:b8:39:68:72:e8:09:6c:
                    07:0a:c6:c6:e2:7c:46:55:e5:73:e8:e0:bc:47:47:
                    de:20:6f:7f:8d:06:48:b1:6c:69:44:f0:de:b5:0f:
                    49:60:3e:3f:34:2b:03:9b:39:5e:a4:d0:e6:91:23:
                    80:13:3a:58:f9:37:8a:d3:49:ef:52:b9:60:42:4d:
                    fd:ce:f0:5d:35:dc:00:d4:06:35:6d:d3:b9:b2:4d:
                    d5:2f:8e:e3:d5:5a:a9:22:20:b1:f4:2b:08:3a:41:
                    30:08:c0:47:0a:f3:86:ea:5c:23:a0:a1:d8:ca:43:
                    cf:0e:ac:e7:d0:a1:fc:a0:83:0b:bc:3d:d0:20:70:
                    83:7b:8e:07:56:09:eb:c6:f3:c5:2b:ad:e0:88:ff:
                    40:f4:19:8c:5a:7c:40:5b:dc:de:57:a3:c9:32:13:
                    ed:8e:81:59:13:ad:8d:ef:33:37:71:fb:5e:f8:43:
                    c0:76:c4:22:cc:36:25:72:35:d4:e0:88:49:23:99:
                    c4:c8:2b:54:33:7f:3c:2d:ec:1b:47:f5:69:37:f1:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:65:D3:86:6D:53:C7:37:11:EA:DC:AE:B6:01:0F:8C:C9:23:84
            X509v3 Authority Key Identifier:
                keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:70:11:74:b1:d3:53:c1:52:37:99:ca:b3:01:72:5d:e1:a0:
         c7:1f:65:a6:08:d6:b6:28:99:a0:f0:db:c4:af:c2:05:d6:9a:
         b9:11:57:18:3b:e6:71:47:64:c9:23:46:fc:2d:2d:5e:80:82:
         f7:81:c5:cf:2b:c7:ed:5b:c4:96:1a:61:80:b1:64:8a:87:f4:
         10:2e:bb:a3:e4:a1:68:39:f5:04:76:08:08:5e:72:ea:07:b4:
         51:d2:62:57:2d:4c:94:85:0d:7f:65:a8:ee:fe:3c:d4:eb:4b:
         ff:11:62:2a:d6:c2:83:37:a6:f0:43:e6:92:b9:ef:84:1e:7b:
         5b:84:f6:34:27:68:f7:22:a8:af:11:4b:d9:d2:dc:79:f7:74:
         a0:5b:78:a9:45:c6:21:0a:d5:88:d4:01:fc:c0:85:ad:f9:1d:
         4b:0c:28:f0:24:6e:75:33:fa:31:e9:dd:ec:62:89:4f:3e:98:
         d5:9f:ea:20:fa:88:06:c3:a3:f5:f0:e2:be:8a:a9:55:6b:e0:
         dc:12:71:34:35:95:a4:8a:7e:17:54:26:84:3b:bd:b8:3e:40:
         38:58:b1:6e:98:06:f0:e6:d6:52:39:28:e0:1a:b6:40:d8:d3:
         b9:85:53:7b:f7:b2:0d:ae:52:62:45:f7:67:1a:07:09:a1:f5:
         e9:e1:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:24:34 2025 by rpki-client