This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File:                     cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier:          zcbSQqraV92Q1LQ11MJkVxe23MXHgYWaWCOICggVj1I=
Subject key identifier:   9C:8C:12:B7:DF:AD:2F:56:3A:82:C2:0D:A8:29:AE:83:B5:F3:DD:DB
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer:       /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial:       1300
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number:          4813
Signing time:             Sat 06 Dec 2025 14:20:01 +0000
Manifest this update:     Sat 06 Dec 2025 14:20:00 +0000
Manifest next update:     Sat 13 Dec 2025 14:20:00 +0000
Files and hashes:         1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: F/k+bXz2WmEe34esqLMQBRqBlO0CDk5pJtYOVi+DyIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4864 (0x1300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
        Validity
            Not Before: Dec  6 14:20:00 2025 GMT
            Not After : Dec 13 14:20:00 2025 GMT
        Subject: CN=69343b90-3be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:61:cc:0b:db:ee:df:0c:00:7e:04:c3:90:
                    15:4e:ac:9e:b5:46:42:6a:28:82:92:c1:01:04:26:
                    98:08:d6:ba:6a:7d:e8:ce:d6:8f:bb:2d:01:9c:8e:
                    6c:d3:bb:98:7e:48:e4:6e:e8:5f:d5:10:9e:be:60:
                    2b:bd:7f:54:a1:a4:e1:93:9a:3e:05:ac:76:ef:17:
                    91:61:0c:9a:a8:26:35:79:fc:76:c6:74:03:78:f7:
                    a1:38:ad:3a:d5:11:cf:28:e2:54:19:e2:ad:b4:a3:
                    a3:9c:6d:ea:93:ef:4e:84:91:1f:4a:a2:20:c0:4b:
                    26:58:64:5b:41:5a:6a:40:a1:b8:96:db:2c:3b:9b:
                    43:67:ad:f1:a7:ec:95:77:86:b3:90:bd:2f:76:71:
                    0c:d8:0c:e9:4f:27:60:fb:e7:a0:70:6b:a1:1a:61:
                    c9:4d:5b:f5:e2:ee:d7:a7:32:28:b3:ce:c6:4e:30:
                    03:ac:11:97:2a:e5:dc:53:91:61:ca:5a:18:70:20:
                    f5:c9:15:4b:72:b1:a6:57:04:61:9c:13:69:8e:dd:
                    42:dc:fc:27:b5:5c:f3:cb:76:da:f4:ba:a6:bc:5a:
                    f6:16:ef:d9:0e:d8:45:92:4d:9b:ac:c8:0e:5e:54:
                    7c:30:9e:d0:99:35:df:7f:94:75:1a:f3:87:1d:55:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8C:12:B7:DF:AD:2F:56:3A:82:C2:0D:A8:29:AE:83:B5:F3:DD:DB
            X509v3 Authority Key Identifier:
                keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:87:f7:39:c5:6d:60:64:d2:02:91:46:f6:25:48:f2:19:
         65:e7:7e:21:6c:7e:4c:ee:17:bd:87:e3:31:12:8f:ae:f8:fd:
         a0:be:ca:25:c6:2d:dc:fc:21:3c:30:9c:bc:5f:57:1b:af:51:
         47:12:a4:22:eb:44:22:4a:c9:a3:35:11:a6:8e:38:7b:10:69:
         b6:46:99:50:c6:f1:20:44:35:92:37:90:db:53:dd:26:bc:bb:
         f0:ec:d6:62:90:d6:72:10:ed:16:60:02:70:fc:65:3c:0c:89:
         8f:b4:bf:3f:61:12:59:c5:74:25:2c:71:34:ad:11:4e:6f:7e:
         53:47:6f:31:ba:dd:2c:a1:0b:b2:e6:06:1c:ed:82:58:24:6d:
         a8:55:8c:15:77:b8:b6:9e:86:8c:79:ef:93:d7:4f:3d:ba:7e:
         2f:50:29:0a:97:ca:64:ba:13:1b:f6:11:36:3c:3f:6c:79:6d:
         11:f9:b7:1e:16:cd:5e:8b:45:d7:e1:30:07:3d:78:30:76:a0:
         d8:ba:df:24:8e:61:a1:a7:78:11:71:2c:b6:11:95:5f:8d:ba:
         8e:a6:11:29:e4:98:f2:58:e8:5e:79:e3:59:18:af:b1:80:90:
         55:bc:e5:96:0c:ba:16:f6:14:99:64:8a:e9:1d:57:f2:5e:8d:
         95:ee:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:21 2025 by rpki-client