This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
File:                     l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json)
Hash identifier:          T1Qty0AbzMQAZWL6FOj0eEaBaDULbqeP8IU2PLFmekg=
Subject key identifier:   4D:40:EA:32:B0:67:9E:FE:F8:D8:3E:B7:D3:E8:8C:6A:FC:C6:04:69
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Certificate issuer:       /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
Manifest number:          71
Signing time:             Fri 05 Dec 2025 04:47:54 +0000
Manifest this update:     Fri 05 Dec 2025 04:47:54 +0000
Manifest next update:     Fri 12 Dec 2025 04:47:54 +0000
Files and hashes:         1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: S+4/aJj28qJniTF8wgrhmdhMGHBVwYJFf2Svjcadpi8=)
                          2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=)
                          3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=)
                          4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=)
                          5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
                          rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
        Validity
            Not Before: Dec  5 04:47:54 2025 GMT
            Not After : Dec 12 04:47:54 2025 GMT
        Subject: CN=693263fa-745f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:38:38:32:52:de:b7:cc:2c:60:7f:b5:ff:
                    29:44:e6:e2:01:94:42:87:c7:23:1a:72:f5:3a:c1:
                    55:aa:0c:86:7f:b8:4b:a1:34:1b:e0:43:2e:5d:b7:
                    3f:4f:30:1c:80:42:77:7f:fb:50:ec:a3:34:fb:d1:
                    0c:1b:0b:f0:28:5c:9b:bf:33:52:aa:f2:57:48:bd:
                    dd:e9:1d:07:4c:f4:14:2a:e4:2e:d7:aa:52:5f:29:
                    95:b8:33:4c:1c:16:79:c6:82:75:91:5e:f5:36:5e:
                    b0:d1:3b:dc:28:17:41:09:04:bf:7b:68:4f:32:ec:
                    e3:66:e6:dd:3b:2f:5c:00:4f:05:aa:2c:61:9f:51:
                    d9:e3:c5:02:83:fb:bc:c2:00:e8:c6:1b:f3:a5:be:
                    ca:0f:19:16:68:e2:f0:38:19:83:52:2c:1d:62:22:
                    bc:e8:6a:78:d9:58:8f:36:c2:89:0d:64:a1:c9:4c:
                    08:19:9b:b4:7f:ab:7f:7f:6b:ef:70:40:b7:4c:8b:
                    b6:b8:3f:e1:55:d5:b8:6e:16:7e:0a:c2:a7:12:45:
                    62:01:5d:a3:59:4e:5f:83:ff:60:3d:f1:3f:3f:90:
                    98:ca:95:ce:2d:94:c0:19:2d:68:a8:62:7b:25:cc:
                    18:15:11:b8:f8:29:b8:28:6d:36:54:0b:62:3d:67:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:40:EA:32:B0:67:9E:FE:F8:D8:3E:B7:D3:E8:8C:6A:FC:C6:04:69
            X509v3 Authority Key Identifier:
                keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:b1:6a:f5:03:4f:38:1a:91:b9:03:51:20:ef:18:aa:62:
         7f:ca:17:d2:a7:45:79:c1:3c:65:0f:da:92:b5:97:14:61:54:
         00:93:e5:1c:35:8e:d0:c4:e2:d7:e8:72:83:b3:7f:8e:16:ae:
         47:4d:d3:02:5b:8a:cd:b1:84:13:22:aa:fc:0a:ba:d6:53:a1:
         bd:05:87:62:60:5f:ac:d3:33:96:fa:62:d1:aa:fe:1f:02:68:
         eb:f0:cd:02:6a:fb:8e:71:a3:55:10:53:19:50:7f:8f:ae:a2:
         a4:61:d6:8e:a9:45:47:91:3e:43:5a:1a:53:4c:c4:70:ae:33:
         a9:98:6a:c9:94:e2:1d:fe:be:f3:4a:74:8a:4b:73:39:11:20:
         94:83:83:70:b7:d2:aa:6a:69:a7:a7:ac:54:4b:da:4d:9a:6c:
         ca:4f:dc:04:d6:d0:34:68:22:0d:ed:70:a7:e2:23:e7:e7:fb:
         a0:8f:04:91:e6:9e:7d:91:8c:95:5d:34:8e:ac:d5:ff:b4:af:
         21:f4:53:42:e0:bc:4d:9f:c2:e7:90:1b:bf:6d:38:db:26:35:
         87:c1:f3:58:f5:d5:fc:55:5e:5c:ef:6f:4f:f3:80:25:27:66:
         0b:d8:30:9c:b3:63:c3:cd:ef:a4:3c:0f:e0:0d:c6:40:78:17:
         51:54:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:17:31 2025 by rpki-client