This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File:                     AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier:          A4GuLrclul/YzdjcoCWAw4OdFZESIwLX2UGmZf2PzvY=
Subject key identifier:   B4:14:C7:75:B3:97:E3:F3:1E:C7:B4:69:CC:44:61:4B:09:08:17:B6
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer:       /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number:          0237
Signing time:             Fri 05 Dec 2025 00:15:33 +0000
Manifest this update:     Fri 05 Dec 2025 00:15:32 +0000
Manifest next update:     Fri 12 Dec 2025 00:15:32 +0000
Files and hashes:         1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: vuJgsKb7+E17k2e1v1vI1X/1HAm7rbhxYiv0Smq61hU=)
                          2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
        Validity
            Not Before: Dec  5 00:15:32 2025 GMT
            Not After : Dec 12 00:15:32 2025 GMT
        Subject: CN=69322425-ab40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d7:0f:3a:b6:dc:14:8a:ed:86:42:bc:25:3a:
                    d8:fb:e1:98:ec:c8:1b:8a:e6:00:eb:f3:6d:37:2f:
                    8d:73:67:98:0b:6d:b3:33:bf:9b:2f:dd:20:54:2b:
                    2c:80:e6:a4:19:9f:50:3f:59:ed:7a:61:a0:27:29:
                    55:44:e4:f0:d6:21:a8:dd:f2:21:7d:1e:3a:0d:d5:
                    c3:2b:00:3a:33:40:4b:3d:30:ec:10:6a:50:8f:86:
                    01:2b:6f:39:ad:95:79:2b:2e:db:53:6b:c3:b0:fd:
                    07:c2:0a:15:b4:94:c5:9d:dc:fc:20:86:28:f7:eb:
                    60:6c:c0:0b:dc:68:22:d9:5b:db:93:07:ed:47:1e:
                    eb:54:e9:a9:df:5f:8f:c6:64:f0:94:63:62:f4:b6:
                    62:f3:0d:b8:13:c9:d4:e2:7b:ba:f6:06:46:43:ab:
                    02:8d:e4:41:d3:27:4c:01:5e:3f:12:3a:10:ee:3c:
                    8c:b8:37:4c:45:b9:5d:43:9e:9a:60:40:82:0b:a9:
                    20:ae:61:04:60:19:b2:80:e6:a3:32:15:78:ff:c3:
                    67:5e:34:fd:54:19:45:72:59:31:b2:4d:08:20:32:
                    de:59:8d:cf:83:dc:92:08:c9:55:d0:2d:81:bc:14:
                    7c:9f:74:40:37:77:de:e4:df:e1:61:79:94:63:2b:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:14:C7:75:B3:97:E3:F3:1E:C7:B4:69:CC:44:61:4B:09:08:17:B6
            X509v3 Authority Key Identifier:
                keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ee:22:3c:7c:23:8b:6b:3a:78:12:b6:1b:59:c3:61:8e:95:
         e7:eb:d9:2a:00:8e:a2:ac:3e:fd:b8:2d:2d:36:33:25:52:ee:
         b9:de:43:25:58:2e:67:88:57:a8:fb:34:ee:27:ba:2c:a8:48:
         b2:bd:81:5b:eb:0d:60:a7:47:9c:25:c9:09:83:89:9f:ec:b6:
         0a:df:a8:eb:c1:b8:65:3f:22:2b:d0:7c:bb:3d:10:b3:e8:68:
         89:43:da:a9:06:d6:a8:87:3a:f3:9f:82:2c:c8:5c:a7:a2:cb:
         f9:43:ab:4a:5b:e8:f3:62:d4:b7:99:e0:8e:95:7f:bc:98:03:
         1a:59:4c:70:f3:43:36:2b:d4:a5:22:8b:28:3d:ad:d1:4e:14:
         8c:c2:c5:80:ae:5d:f5:41:f3:dd:d3:d4:1e:1a:1d:df:f2:97:
         78:64:e1:6e:0a:b9:4e:d0:39:28:12:db:13:37:d9:0b:4f:13:
         ed:ea:3c:1f:59:cb:0a:a2:28:9e:3c:63:10:e6:20:44:ed:ee:
         61:1e:1c:2b:4c:54:06:09:6e:b5:e0:97:3c:6e:bf:cd:9a:c6:
         7a:10:2f:7c:05:22:6c:31:3b:4e:39:99:2d:c9:f2:e2:e5:cb:
         15:49:1d:ef:c4:0e:ca:73:c8:0d:6e:fe:d5:30:e0:cd:59:55:
         e0:ba:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:26:33 2025 by rpki-client