This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
File:                     I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json)
Hash identifier:          AR5cCAG/C25dNdA2FlhysZA7UYjSGCafXBFhpwjHVxQ=
Subject key identifier:   B5:87:99:EB:8F:C7:94:BB:79:12:C8:2E:DE:40:BA:55:74:0D:84:5F
Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
Certificate issuer:       /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Certificate serial:       195B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
Manifest number:          194F
Signing time:             Sat 06 Dec 2025 16:03:16 +0000
Manifest this update:     Sat 06 Dec 2025 16:03:15 +0000
Manifest next update:     Sat 13 Dec 2025 16:03:15 +0000
Files and hashes:         1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: CpXW0DlAD9fO7GaQrGQ5J+6LX6jvE7fKPD32kAB1SGE=)
                          2: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=)
                          3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
                          rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6491 (0x195b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
        Validity
            Not Before: Dec  6 16:03:15 2025 GMT
            Not After : Dec 13 16:03:15 2025 GMT
        Subject: CN=693453c3-f099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:18:59:44:27:f3:60:04:66:83:65:03:58:
                    46:88:9d:21:b0:98:fd:72:81:6b:f1:70:fe:27:21:
                    2d:c3:95:50:e3:1f:a6:db:53:e2:21:7c:a6:57:90:
                    9f:24:fa:93:2d:45:ee:cb:65:e8:90:a6:3e:00:77:
                    33:26:e8:dc:31:2f:d2:cf:3a:81:34:5c:d4:c6:46:
                    04:b3:b7:00:7b:98:8a:08:45:62:28:0f:c0:72:00:
                    2c:62:94:3e:13:14:f4:aa:af:1f:d5:ac:69:66:cb:
                    a6:c5:6d:5b:5e:56:6e:5d:f5:cc:b0:90:17:c7:e2:
                    da:6d:32:83:56:ea:73:d4:68:5a:14:39:1b:6e:8c:
                    ae:b3:5a:31:2e:c6:ff:74:49:27:7d:90:39:e2:05:
                    45:57:9f:26:07:5d:aa:0b:a4:05:ec:82:14:6b:9b:
                    d9:8d:4e:ea:6f:17:6b:07:14:92:f4:45:47:3c:81:
                    97:e6:47:ac:50:1d:36:14:59:3d:61:be:42:f6:e9:
                    b1:66:e6:3f:07:e4:ff:dc:08:11:1a:03:36:f2:e8:
                    cd:2a:00:d4:81:96:ca:0d:69:c0:10:4b:be:67:bc:
                    9f:80:bf:8c:0d:da:24:a7:31:15:59:ef:b1:51:f9:
                    86:cd:af:64:67:ac:a4:ce:11:f7:f1:b1:b3:91:7e:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:87:99:EB:8F:C7:94:BB:79:12:C8:2E:DE:40:BA:55:74:0D:84:5F
            X509v3 Authority Key Identifier:
                keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:92:e8:09:d3:09:07:ca:fa:78:bb:73:86:e4:bf:1b:48:c1:
         f6:60:a1:1c:d5:a2:7f:5a:07:5d:6a:3c:bd:5d:6a:3d:a1:8b:
         7f:cf:fd:bd:46:3d:cf:1e:9b:6a:fa:75:94:04:1a:bb:ff:1e:
         21:73:c2:e2:78:29:0c:24:e2:11:b9:cf:08:7d:c7:df:8f:26:
         1d:f0:e2:17:fc:c2:9b:4f:1f:b7:3d:8b:98:c0:26:5f:05:7c:
         ef:0d:ea:2f:6e:7d:86:c0:2e:aa:a0:45:46:0e:38:c5:5f:f9:
         3d:7e:2e:70:21:bc:3b:ce:70:ef:03:dd:be:0f:9e:3c:87:ba:
         f8:05:d2:df:84:12:b7:7d:6f:91:ba:29:0d:c2:95:79:7b:df:
         77:80:82:97:6a:fc:1c:a7:20:d1:e0:cb:51:69:ba:50:ef:40:
         9e:f2:ba:bf:e5:0a:69:db:5d:6a:07:5d:9d:33:42:19:ea:a3:
         7f:46:48:ca:9b:a5:32:04:16:88:bd:b2:2b:80:a2:99:8a:d3:
         0b:4b:c8:0f:65:82:7c:4d:d4:3f:e9:70:c3:4f:d0:84:4a:71:
         2a:5e:41:22:a2:db:50:ee:bc:58:e5:c0:d3:24:74:5b:d3:61:
         d5:f0:a4:df:b7:77:95:69:8b:fb:67:ab:b0:a0:3a:d0:4f:7e:
         15:e3:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:32 2025 by rpki-client