This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
File:                     MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json)
Hash identifier:          t7iqm7gi8lAKXsHzjyZyQ/ShabfkdUY2CV022+RviX8=
Subject key identifier:   39:8D:CF:44:52:F9:F0:FF:87:9E:F5:88:1F:DD:F4:58:1A:BC:31:65
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Certificate issuer:       /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
Manifest number:          F2
Signing time:             Fri 05 Dec 2025 03:20:30 +0000
Manifest this update:     Fri 05 Dec 2025 03:20:29 +0000
Manifest next update:     Fri 12 Dec 2025 03:20:29 +0000
Files and hashes:         1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 8re9o6qd0F7usSIXcnWbOsfUkHj5ee1O3ohtryz/pu0=)
                          2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
        Validity
            Not Before: Dec  5 03:20:29 2025 GMT
            Not After : Dec 12 03:20:29 2025 GMT
        Subject: CN=69324f7d-676b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:f0:88:a7:41:bc:e3:0e:2e:1f:76:c6:9c:
                    82:8b:aa:76:cf:ca:3d:ad:14:17:4d:06:43:4d:dc:
                    b2:1f:63:51:52:19:22:ef:f3:7f:b9:f7:c5:98:27:
                    c0:83:62:2f:07:c8:19:d6:ee:82:14:5e:a3:02:9b:
                    1b:20:66:7e:56:7f:a2:dc:e8:47:b5:e7:8c:ce:2e:
                    a3:c8:29:cc:5f:26:3f:79:d7:e7:ed:e2:31:c6:16:
                    64:6f:c1:e1:6b:0e:ba:ff:ac:09:e6:23:dd:c0:41:
                    eb:8d:9f:2e:6f:b8:b5:e7:c1:20:88:b3:59:62:ec:
                    f5:2a:aa:14:04:65:2a:b8:36:21:48:6a:03:57:b0:
                    74:44:f6:30:e4:78:c6:cf:a9:3c:ea:b7:c6:87:a9:
                    84:67:18:7f:5a:a5:f8:2f:c4:1d:77:06:0e:c4:13:
                    41:45:1d:74:b5:fc:93:16:fe:99:47:78:cd:e6:0e:
                    d5:84:1b:c4:a5:62:00:4d:c1:24:2b:e7:ed:a3:60:
                    57:a4:ec:a8:02:52:f8:ec:f2:e5:48:64:48:69:54:
                    14:1f:b2:a1:ff:6d:ba:ac:40:0d:e5:04:f0:e7:79:
                    26:ed:e6:79:2f:c0:12:5d:c5:c5:59:2f:15:8b:0d:
                    73:de:45:52:7e:46:15:f6:10:80:c9:c0:80:f3:44:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:CF:44:52:F9:F0:FF:87:9E:F5:88:1F:DD:F4:58:1A:BC:31:65
            X509v3 Authority Key Identifier:
                keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:98:1e:aa:02:02:21:07:51:9d:58:b8:39:24:28:6c:3f:47:
         4b:86:0a:bf:f0:04:6b:a3:86:94:4e:d3:7d:bb:98:2b:9c:a3:
         95:2e:86:7c:a5:d0:49:e5:4b:c7:d2:c0:3e:d9:c2:a0:73:cb:
         ef:8a:6a:76:f6:bf:f2:03:d0:81:27:ad:ce:57:4e:34:5b:95:
         c8:f0:c4:6d:e9:c4:83:6d:75:1c:ef:6c:8c:5f:b8:ab:14:b9:
         68:60:c8:5c:a2:11:9b:25:38:b7:3c:16:e4:6d:28:ec:05:68:
         76:6f:02:90:68:5c:63:a5:33:cd:da:26:c3:0e:dc:58:12:76:
         d9:94:cb:e5:0e:8a:85:13:2c:2e:68:5b:9f:42:9a:22:50:b9:
         00:0b:0a:1e:14:4b:9f:2e:6e:1a:aa:fe:d0:f1:f8:e6:6a:60:
         0a:ef:ad:79:7c:e8:46:30:6b:f7:18:bf:f2:78:9e:c0:99:c7:
         ba:ed:0e:dd:e0:ac:95:39:cb:51:1c:5a:96:ee:dd:9a:31:fd:
         63:39:0a:18:28:43:4b:5e:b7:79:12:e8:9c:bc:4f:a9:95:4c:
         12:0f:5d:22:3a:16:9b:a5:17:78:c3:fa:b3:79:ce:68:68:3c:
         25:d7:a2:bf:d5:56:8c:5a:e6:1f:b2:aa:bf:9b:e6:f7:d2:c8:
         64:62:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:45:39 2025 by rpki-client