This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
File:                     IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json)
Hash identifier:          RKjN2syC6r0aWQJDOra0w2TTkbNpcVYe/R5QQ00dZl8=
Subject key identifier:   7F:EA:F5:9A:DC:F5:F4:BD:80:25:CD:00:2F:85:72:EB:FB:A2:15:2C
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Certificate issuer:       /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial:       0552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
Manifest number:          054B
Signing time:             Sat 06 Dec 2025 22:13:13 +0000
Manifest this update:     Sat 06 Dec 2025 22:13:13 +0000
Manifest next update:     Sat 13 Dec 2025 22:13:12 +0000
Files and hashes:         1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: yhPgHMU7yvmtUDY6KFlY6pAbuRK+zBzAACcmRtSuWtM=)
                          2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: WpqCjTjP9KCfjNLt14+mScZN2fCuV4hnCNhQMCWaA5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
        Validity
            Not Before: Dec  6 22:13:13 2025 GMT
            Not After : Dec 13 22:13:12 2025 GMT
        Subject: CN=6934aa79-ffe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:b9:90:ca:f0:70:03:eb:41:cf:08:09:3a:
                    56:dd:26:1c:92:ef:79:c3:22:6d:ad:03:62:3d:ca:
                    70:77:b0:47:25:85:6d:e6:30:e8:4d:48:40:be:19:
                    67:a9:d6:8b:52:b3:20:9f:21:a8:f9:49:3a:72:81:
                    be:c6:fe:ac:e9:39:e5:db:14:a9:1e:8c:3f:e3:74:
                    5d:4a:d0:88:74:56:53:fb:6b:ca:3b:11:0d:d7:8b:
                    a8:2b:01:52:0a:bb:f8:72:f1:04:33:a5:40:f7:af:
                    41:f0:7f:79:42:91:b2:20:c7:5f:1a:55:58:7c:47:
                    6f:ef:20:f2:9a:a5:de:b1:d3:14:28:94:7b:d6:f9:
                    df:d1:6f:54:81:30:45:a5:c8:f4:15:9f:70:bf:f3:
                    2e:94:9a:61:d7:7f:6e:87:a9:2e:0d:3e:8f:1b:e5:
                    57:9b:61:bd:c7:85:7b:38:07:c7:5f:95:95:00:30:
                    ac:f0:5b:f2:3b:1b:ae:25:25:86:e9:e7:f8:22:2d:
                    32:6e:31:eb:de:9e:cd:74:22:17:2c:8b:3b:11:b6:
                    2d:2a:55:89:40:be:f3:44:d9:a4:d7:6c:e5:5c:be:
                    b4:86:91:78:d3:33:ac:78:22:7e:d8:a5:c0:3e:73:
                    03:fe:43:33:e9:6b:cc:a4:e2:c7:60:2e:9e:32:bc:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:F5:9A:DC:F5:F4:BD:80:25:CD:00:2F:85:72:EB:FB:A2:15:2C
            X509v3 Authority Key Identifier:
                keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:46:72:79:b4:65:ad:3b:38:dc:dc:b5:da:51:d0:2b:2f:91:
         97:13:46:9f:00:85:e1:88:ea:36:63:ab:e0:9d:69:78:a5:77:
         af:3d:6d:4c:cd:cf:49:2a:0d:16:26:f3:ed:a9:5c:53:a6:34:
         3d:31:94:d8:46:8a:ba:62:cd:bd:21:05:89:a8:9d:3b:17:a1:
         d3:a9:47:ce:c4:0c:dd:e1:cd:ff:30:e5:16:c0:de:05:4c:f5:
         d7:ac:18:53:03:ba:b3:38:f0:eb:41:25:c8:d2:a1:23:b5:67:
         15:15:e7:20:3c:c3:8c:01:90:87:a9:c5:e5:d9:a9:92:90:26:
         24:b4:dc:93:54:5f:06:5c:f7:b3:cb:23:31:e1:e8:af:07:10:
         e0:98:10:f0:29:20:b4:03:8b:9b:30:da:36:34:7a:a9:6c:d6:
         e7:c6:6e:b0:b7:cd:f1:ba:14:9c:66:28:4a:49:0a:fc:32:e7:
         79:8a:61:7c:52:d8:91:97:16:41:b0:b4:f8:82:82:aa:07:7b:
         20:8f:6b:76:e9:cf:7c:a9:52:18:be:1c:c7:b2:4b:ed:4c:c6:
         2b:cc:44:f5:ee:68:a1:57:0f:02:20:ff:54:a5:ee:9b:ea:71:
         f3:8a:6e:7b:dc:93:a7:72:1d:1d:2d:81:c5:7f:45:f2:ca:3d:
         1f:ec:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:10 2025 by rpki-client