This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
File:                     x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json)
Hash identifier:          EtPoJDfMJIZcHNX6gQYVNM6CrOICrIkI0z7iyhb//eY=
Subject key identifier:   C3:6C:93:35:98:10:E2:33:DB:59:5F:66:95:49:8B:E6:DF:78:51:E0
Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E
Certificate issuer:       /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
Manifest number:          8B
Signing time:             Fri 05 Dec 2025 04:32:43 +0000
Manifest this update:     Fri 05 Dec 2025 04:32:42 +0000
Manifest next update:     Fri 12 Dec 2025 04:32:42 +0000
Files and hashes:         1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: fg2Qbb60HSU1k3UFmkvLrZumbj8yurDsyabV2ZAQBlU=)
                          2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: 39w+18fUPSiKVB8OhUL0ki9Bi8qUl1J3wP6kCBvBYqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl
                          rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E
        Validity
            Not Before: Dec  5 04:32:42 2025 GMT
            Not After : Dec 12 04:32:42 2025 GMT
        Subject: CN=6932606b-1575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:6f:fe:45:48:78:ac:59:c2:1d:0d:08:79:
                    93:bd:86:48:17:7d:4b:c5:ab:48:1c:3c:3f:da:05:
                    08:b6:e7:c0:26:94:f0:7a:1a:32:3f:3d:af:b5:68:
                    b0:33:be:af:51:3c:a5:0f:4c:40:ac:2f:06:d1:4c:
                    49:86:f5:6a:09:9a:3d:7e:07:ae:ba:d4:ce:9b:ab:
                    f7:89:c1:3b:6a:64:f3:53:31:dc:f5:ae:a7:a2:08:
                    11:18:38:89:57:4d:ef:d8:31:eb:2c:97:ee:66:60:
                    03:0c:a9:bf:0a:f0:8e:25:ef:3d:1c:ab:2d:2f:b4:
                    c5:fd:0a:af:c1:a5:a4:67:ff:44:ba:90:0f:16:52:
                    48:a6:f4:d1:74:19:01:86:83:1d:d1:7e:cf:2a:d2:
                    d0:14:0f:0b:6a:f6:dc:bc:28:5f:f0:fc:d6:3a:62:
                    47:96:02:51:f0:a6:32:bf:b3:49:1d:e1:96:d3:1e:
                    38:c0:f9:d4:fe:4e:63:20:65:fd:89:bd:98:d1:41:
                    67:13:7b:ed:b6:60:a1:9a:97:bb:42:3b:91:21:e6:
                    17:c4:ba:0b:38:8e:13:9a:9c:26:9e:15:8b:ca:48:
                    00:d4:86:05:82:c1:c5:45:60:10:8d:d8:ee:fe:53:
                    ba:7d:78:83:a7:4c:d9:8b:21:df:6d:9c:15:28:17:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:93:35:98:10:E2:33:DB:59:5F:66:95:49:8B:E6:DF:78:51:E0
            X509v3 Authority Key Identifier:
                keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:7f:40:31:b5:e0:c4:53:8d:9b:f7:9f:ea:ed:cb:61:d2:
         3c:87:b2:8d:d6:38:e1:e3:f6:1d:3b:33:c9:6f:f1:ff:0c:1e:
         2d:b4:3b:04:d6:85:c8:b5:a8:1c:9e:1a:c3:1a:81:4e:a6:0e:
         2c:f3:e7:12:14:f1:3d:a7:92:7d:2d:80:00:04:83:66:44:93:
         6c:ed:ff:f6:8d:07:cc:29:10:4c:e2:02:64:72:be:e4:ca:19:
         7e:57:7f:65:1d:24:c9:cb:15:32:ea:f2:32:34:05:fc:2a:e6:
         64:65:28:06:73:25:8d:7d:c4:28:59:70:79:15:b5:6e:21:3c:
         5b:c0:18:bf:32:8d:4b:fb:fa:9f:37:f9:a8:1f:4d:cb:de:7b:
         f5:a4:35:c2:b8:78:c1:84:a3:46:70:bf:c8:42:62:ad:15:ab:
         7f:da:0d:af:de:ab:01:42:13:69:53:b0:a3:d2:62:a8:6b:fc:
         55:c8:53:55:bd:10:8d:3e:b5:50:62:7c:1c:78:ec:47:9f:58:
         c2:9c:6f:a0:5a:ed:45:0f:5a:be:0f:e3:e8:8f:03:77:f0:45:
         b3:33:02:a6:5c:89:a2:1b:7d:c0:56:13:7d:46:c7:99:df:75:
         06:6c:06:16:26:6d:e6:fb:56:7c:1e:34:57:dd:b4:85:4f:8c:
         49:97:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:41 2025 by rpki-client