This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
File:                     _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json)
Hash identifier:          I94rCnXjJRmz4vMD2uNrKjJRmwW4m3O2yrj+qLAGbN8=
Subject key identifier:   34:2B:A2:B6:EC:B7:16:E8:02:94:8C:56:95:01:FF:D4:39:4B:5B:2E
Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Certificate issuer:       /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
Manifest number:          6B
Signing time:             Fri 05 Dec 2025 04:50:19 +0000
Manifest this update:     Fri 05 Dec 2025 04:50:18 +0000
Manifest next update:     Fri 12 Dec 2025 04:50:18 +0000
Files and hashes:         1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: JtrAg5Hf5fwRxXlm8cJ+tE6xuEwg4YE/730w81tbzIY=)
                          2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
        Validity
            Not Before: Dec  5 04:50:18 2025 GMT
            Not After : Dec 12 04:50:18 2025 GMT
        Subject: CN=6932648b-3d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:41:98:62:95:d9:b2:46:cc:cf:96:ec:64:6a:
                    37:b6:2d:e8:dc:b9:e3:84:bf:e9:5a:c7:b4:f8:a9:
                    c4:e8:2c:3b:a0:80:61:47:49:3a:e3:bb:6d:00:f2:
                    0d:f2:00:b6:cd:7f:af:01:c6:75:25:52:35:1b:4e:
                    4d:7a:00:ba:59:fd:c5:b4:f9:9a:d2:11:fd:d1:05:
                    8b:ee:1a:62:91:40:34:0a:90:86:56:fd:1a:eb:ea:
                    49:17:1f:76:be:c1:c8:c9:f2:60:1c:f4:5a:38:c5:
                    c5:ed:51:6d:91:a0:d5:6a:c9:2e:57:84:88:c5:72:
                    da:4a:7b:d5:e7:76:dd:30:13:c9:b9:47:f5:04:fe:
                    a7:9a:04:d3:88:65:f2:e9:3b:c3:50:cf:0f:ee:68:
                    1d:89:79:4f:a8:1f:42:54:39:f5:c4:1b:08:da:6c:
                    ff:bc:c0:41:ee:ca:7a:78:69:97:18:41:62:f4:41:
                    17:8d:11:92:3e:10:c1:a9:05:2c:85:24:01:39:9b:
                    2d:e8:0b:37:e0:d9:1b:31:30:41:d1:ff:b3:1b:b5:
                    97:34:84:70:a5:01:34:ea:ab:48:2f:85:b1:64:19:
                    f6:27:db:16:9f:0c:f7:73:38:ef:8b:dd:58:f7:1d:
                    4b:79:07:db:21:c8:cd:17:94:c6:f9:f6:07:06:59:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2B:A2:B6:EC:B7:16:E8:02:94:8C:56:95:01:FF:D4:39:4B:5B:2E
            X509v3 Authority Key Identifier:
                keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b8:20:0d:af:ca:3a:f0:08:c8:4f:4b:1f:18:3b:65:8f:7a:
         76:83:60:07:dd:c2:58:3e:a1:a1:d1:1c:a5:80:de:69:1a:43:
         8a:22:85:71:60:28:ec:3c:2b:f3:15:16:58:82:d7:8a:e8:d7:
         1c:47:ab:07:9b:61:f3:0b:b3:61:7f:df:e8:5b:c1:12:2a:05:
         a4:e7:7b:5d:f5:a8:99:04:93:25:ee:a4:54:a8:85:48:7c:82:
         79:60:18:92:4f:6c:24:96:a3:63:ca:db:83:b2:20:5d:9e:e6:
         3c:b5:a0:a6:de:8a:5c:6f:35:e2:29:eb:d0:77:5a:7e:35:88:
         90:82:16:4f:02:b5:95:82:1f:7f:a4:57:66:d2:72:92:f5:1d:
         4c:e5:ed:de:86:24:ab:3f:d4:1b:69:66:d4:a1:55:2b:76:2f:
         0d:fd:be:eb:46:e5:93:db:5d:7e:c3:56:d6:62:9e:17:6f:9b:
         54:b5:7f:31:62:e3:2d:e4:ad:d3:7c:2e:fd:7c:89:b5:b5:96:
         af:b6:bb:24:96:0e:7d:48:75:92:b1:39:8a:38:2d:22:52:66:
         3c:60:85:56:66:52:20:86:e1:3c:50:83:23:4f:2b:a4:34:bc:
         78:b8:eb:79:eb:bf:ad:53:31:82:7f:9a:56:ac:2c:c1:be:fd:
         29:84:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:51 2025 by rpki-client