This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File:                     mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier:          /mhWE2MI3bbfI8cX11siUnEpMcSvYF+G061IGmVBLKQ=
Subject key identifier:   09:AF:D6:EF:9E:E0:DF:B9:0A:8F:42:F5:B7:70:37:2E:70:8E:AE:D3
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number:          030B
Signing time:             Sat 06 Dec 2025 23:43:25 +0000
Manifest this update:     Sat 06 Dec 2025 23:43:25 +0000
Manifest next update:     Sat 13 Dec 2025 23:43:25 +0000
Files and hashes:         1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: H+YlD371v5LbVbdfTW3QWXDh685cOJvOHFDar3ig5xU=)
                          2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=)
                          3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: Dec  6 23:43:25 2025 GMT
            Not After : Dec 13 23:43:25 2025 GMT
        Subject: CN=6934bf9d-b2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:6f:2c:17:b8:25:00:25:02:d2:7a:49:fc:
                    c6:28:08:8c:bc:2d:fa:30:29:ec:43:0a:f7:93:89:
                    a0:81:56:77:b9:10:3e:e4:47:9c:b6:5d:23:83:6b:
                    46:a1:fc:bb:a2:b7:1c:f8:3c:29:88:29:e1:07:15:
                    2d:d4:18:97:56:22:ed:5d:d9:38:f8:72:04:a5:a7:
                    24:21:66:5f:6f:0e:20:e1:f3:1d:3e:20:b6:09:2f:
                    67:a2:e3:48:02:2a:e2:57:10:a8:1b:eb:9d:ab:ad:
                    da:23:75:e6:13:3a:7c:4a:1f:09:b7:d9:1d:35:1c:
                    2d:0d:bf:8a:d3:0a:cc:cd:05:bb:03:ff:f1:be:3f:
                    cf:75:5b:82:d1:14:d9:08:32:b4:13:52:2e:9f:68:
                    af:e7:dc:75:86:c8:6f:07:8f:52:56:d5:1f:80:0a:
                    76:42:9d:01:60:34:e7:00:3c:bc:70:b4:96:9b:25:
                    9a:a5:1e:6b:61:9e:5d:9f:86:c5:02:27:13:b5:c8:
                    29:f4:7f:83:fa:74:28:24:62:2e:97:de:ac:78:0b:
                    0e:e4:a2:7b:de:63:f1:73:c9:09:63:21:4e:56:99:
                    bc:b6:c4:a3:5c:f1:fa:50:ef:49:41:8a:39:69:7c:
                    53:2a:96:d7:93:54:ec:a9:ae:59:da:59:da:da:ca:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AF:D6:EF:9E:E0:DF:B9:0A:8F:42:F5:B7:70:37:2E:70:8E:AE:D3
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:68:69:27:e1:f4:7d:cd:71:45:57:2e:2a:81:2d:1a:e5:
         56:a3:24:41:95:ce:58:03:bd:cb:99:f2:cf:29:59:3c:e4:94:
         ae:61:3f:98:b2:c9:76:59:f7:30:86:35:8b:59:2a:0c:98:29:
         7e:dd:87:62:ad:36:43:cd:56:f6:7d:59:ca:12:b4:fa:6f:bf:
         8a:4b:59:d6:a3:45:79:a2:33:46:ae:05:5b:9d:90:d8:1f:c2:
         ff:84:66:26:7e:5e:7e:6f:35:42:08:97:07:32:99:09:f8:08:
         27:1b:f4:5c:f9:77:28:54:88:2f:4a:74:44:6b:fe:9a:4f:08:
         d4:a3:b5:c8:cf:24:99:fc:76:27:ec:61:a9:2d:64:2d:08:90:
         00:e0:02:88:94:46:92:c3:b4:d2:6a:05:40:4a:d0:21:87:80:
         19:5b:1b:68:8d:d8:3e:b2:f9:40:c6:65:20:1b:78:ab:de:4c:
         68:39:7c:82:68:9d:8e:c3:4f:6b:40:02:c3:36:21:b9:4d:07:
         0f:f0:4b:1a:8a:df:8e:25:61:42:f1:4e:77:ea:07:c4:2c:0c:
         cf:e5:0f:85:7f:cf:4a:d8:7f:41:65:55:91:83:f1:f9:ed:01:
         5b:e0:d5:e9:dc:a0:69:72:46:58:e4:4b:2c:15:8b:df:a2:6a:
         cb:de:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:55 2025 by rpki-client