This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
File:                     sc_l-mpxIskE6xEO8agpgPw9-ko.mft (raw, json)
Hash identifier:          RGohBDVCiEWYEbkj6qMLIa/Wqoa4X8dvE5BHpgNCTwU=
Subject key identifier:   D6:D1:BC:8B:42:E6:93:2E:EF:3F:37:76:89:5F:BA:B0:33:3E:94:8D
Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A
Certificate issuer:       /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A
Certificate serial:       06E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
Manifest number:          06DD
Signing time:             Sat 06 Dec 2025 20:57:38 +0000
Manifest this update:     Sat 06 Dec 2025 20:57:37 +0000
Manifest next update:     Sat 13 Dec 2025 20:57:37 +0000
Files and hashes:         1: sc_l-mpxIskE6xEO8agpgPw9-ko.crl (hash: l8SyTgZp56OEOWvg3icwOYLE72VqIiIoOYtl9xBrZ2Y=)
                          2: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (hash: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl
                          rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E75B7, serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A
        Validity
            Not Before: Dec  6 20:57:37 2025 GMT
            Not After : Dec 13 20:57:37 2025 GMT
        Subject: CN=693498c1-a773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:0a:2e:43:7a:22:ca:10:5e:ec:15:24:12:
                    cd:b7:e0:87:1f:bb:c9:ef:9d:6a:52:a5:2f:9d:e8:
                    24:7e:f9:1e:3f:0a:20:01:52:34:88:82:f7:60:90:
                    27:9d:3b:cd:a1:f3:c9:ba:28:79:6e:bb:e0:c4:5c:
                    06:e8:b0:2f:34:25:b1:2b:b7:f1:89:53:f7:d3:0c:
                    01:80:b8:98:6b:b8:e2:71:94:ea:15:d6:42:a7:75:
                    62:bb:c1:26:9f:2b:32:cf:98:f4:48:23:40:fe:db:
                    b0:1b:d4:2e:7e:4f:55:a8:f3:a4:67:60:db:ef:6a:
                    cf:57:b3:d5:c0:d2:f9:7d:a7:2b:70:06:13:a5:69:
                    6c:17:4d:dc:d2:f4:0a:83:d4:37:ba:4a:ba:8f:56:
                    b0:14:0c:b7:fb:52:3c:9b:ea:56:11:b0:ca:21:54:
                    bb:2d:8c:0b:8e:00:50:f2:2f:21:7f:02:a2:a3:a5:
                    6c:2d:18:4e:47:37:f3:12:e5:48:c0:42:47:de:3b:
                    a8:61:06:48:ea:df:7e:66:06:30:1d:14:d9:35:7e:
                    05:91:c2:e9:43:b2:25:26:a9:4c:2a:4d:46:71:6a:
                    51:07:eb:9d:0b:9d:15:03:4b:f0:1b:9f:47:ce:92:
                    28:91:60:f8:31:1d:b8:36:52:ff:30:ed:cb:94:0d:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D1:BC:8B:42:E6:93:2E:EF:3F:37:76:89:5F:BA:B0:33:3E:94:8D
            X509v3 Authority Key Identifier:
                keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:76:dc:76:04:91:72:81:f8:a7:f9:35:8a:a0:79:3e:3c:
         55:53:f2:f9:a4:8d:50:d4:ea:ff:92:7e:32:13:f7:8a:8c:62:
         17:a0:39:52:68:38:9e:2c:44:d2:1c:42:ec:4c:14:8d:9a:d5:
         a9:7b:81:46:5e:fa:d4:89:82:6d:d1:45:da:dd:42:e6:82:63:
         d0:25:cf:26:e7:a8:52:f3:46:15:63:f7:55:47:7b:60:50:c7:
         17:76:eb:23:3c:38:a5:8e:90:20:c1:6b:37:52:ef:4c:51:af:
         c1:aa:36:69:02:5f:a3:90:1d:d0:7d:a5:fe:e3:c3:6b:e9:db:
         d0:0d:7c:cc:ea:b7:62:6f:20:4f:c1:3f:9d:b1:74:28:f2:82:
         38:3c:c5:72:01:1d:8e:5b:65:2e:41:d4:ff:f6:41:b6:45:1b:
         e3:1c:21:8f:b9:31:20:60:cb:7f:0c:a4:57:a6:7f:33:ed:06:
         83:7e:ce:74:c5:00:02:11:bb:51:00:49:9d:f6:8f:a9:16:4f:
         56:b0:87:8b:ce:f8:26:06:ac:b5:7e:90:be:16:c3:1e:d0:e5:
         e8:22:76:b3:cc:61:fe:a0:ed:77:e5:71:b1:c1:ca:b4:bd:85:
         f5:95:fa:9a:82:46:09:ea:79:61:ad:24:37:db:7f:8e:9f:77:
         5d:28:41:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1QjcxMTAvBgNVBAUTKEIxQ0ZFNUZBNkE3MTIyQzkwNEVCMTEwRUYxQTgyOTgw
RkMzREZBNEEwHhcNMjUxMjA2MjA1NzM3WhcNMjUxMjEzMjA1NzM3WjAYMRYwFAYD
VQQDEw02OTM0OThjMS1hNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMYKLkN6IsoQXuwVJBLNt+CHH7vJ751qUqUvnegkfvkePwogAVI0iIL3YJAn
nTvNofPJuih5brvgxFwG6LAvNCWxK7fxiVP30wwBgLiYa7jicZTqFdZCp3Viu8Em
nysyz5j0SCNA/tuwG9Qufk9VqPOkZ2Db72rPV7PVwNL5facrcAYTpWlsF03c0vQK
g9Q3ukq6j1awFAy3+1I8m+pWEbDKIVS7LYwLjgBQ8i8hfwKio6VsLRhORzfzEuVI
wEJH3juoYQZI6t9+ZgYwHRTZNX4FkcLpQ7IlJqlMKk1GcWpRB+udC50VA0vwG59H
zpIokWD4MR24NlL/MO3LlA3M7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbRvItC
5pMu7z83dolfurAzPpSNMB8GA1UdIwQYMBaAFLHP5fpqcSLJBOsRDvGoKYD8PfpK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzVCNy83RkVENUUxRTc2
MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElza0U2eEVPOGFncGdQdzkt
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NjX2wtbXB4SXNrRTZ4RU84YWdwZ1B3OS1rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzVCNy83RkVENUUxRTc2MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElz
a0U2eEVPOGFncGdQdzkta28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSo3bcdgSRcoH4p/k1iqB5PjxVU/L5pI1Q1Or/kn4yE/eKjGIXoDlS
aDieLETSHELsTBSNmtWpe4FGXvrUiYJt0UXa3ULmgmPQJc8m56hS80YVY/dVR3tg
UMcXdusjPDiljpAgwWs3Uu9MUa/BqjZpAl+jkB3QfaX+48Nr6dvQDXzM6rdibyBP
wT+dsXQo8oI4PMVyAR2OW2UuQdT/9kG2RRvjHCGPuTEgYMt/DKRXpn8z7QaDfs50
xQACEbtRAEmd9o+pFk9WsIeLzvgmBqy1fpC+FsMe0OXoInazzGH+oO135XGxwcq0
vYX1lfqagkYJ6nlhrSQ323+On3ddKEEL
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:28:10 2025 by rpki-client