This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          pJm5NHLz+tJpOflgncq7bD74qj/TnazcftwXbgBif40=
Subject key identifier:   05:16:27:75:CF:35:AE:35:B5:5B:F6:27:5F:78:0F:7A:14:D1:1B:DE
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       09E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          09DB
Signing time:             Sat 06 Dec 2025 19:08:33 +0000
Manifest this update:     Sat 06 Dec 2025 19:08:32 +0000
Manifest next update:     Sat 13 Dec 2025 19:08:32 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: X7JJWwmKu1Rje5Gu7DtfBXaX20PldKmzq1ukkKKaNSw=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2531 (0x9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: Dec  6 19:08:32 2025 GMT
            Not After : Dec 13 19:08:32 2025 GMT
        Subject: CN=69347f31-8702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:05:46:72:b2:93:bd:40:73:60:b6:30:36:
                    a9:42:09:70:83:13:f7:18:c9:47:89:19:82:78:ed:
                    d5:fb:d4:5a:18:7b:50:2d:85:a3:2b:7c:ee:ae:b1:
                    7b:a8:f6:eb:03:59:cc:80:f7:42:24:3d:63:af:e2:
                    43:98:fd:99:39:19:5f:cc:55:22:9a:91:89:91:4d:
                    5d:4a:25:0f:69:83:9e:ff:33:8a:2d:f1:9c:1c:cd:
                    34:4b:b1:48:38:12:cb:5a:b5:6c:8e:fe:98:67:1a:
                    8d:bc:68:57:a9:28:f0:99:50:65:dd:95:84:f6:ff:
                    a0:9b:11:c4:30:1e:22:43:55:70:c8:5e:bf:d8:ab:
                    f2:37:c7:be:fd:8b:21:e7:a7:a4:58:18:30:c4:8e:
                    be:d3:d2:6c:81:13:16:05:2b:eb:16:af:47:6c:d2:
                    20:8d:36:c9:41:51:b1:b9:c4:a6:69:4a:66:d5:6b:
                    8b:84:f7:74:9d:cc:08:d7:81:72:f5:7c:2c:62:97:
                    cf:30:42:47:e1:69:47:5d:de:e6:06:fe:f0:6d:d7:
                    2f:4e:07:0c:c8:6c:af:d6:17:27:84:fd:80:b6:f5:
                    35:4e:bf:dd:cd:cc:ef:57:f7:a9:bc:91:10:0f:b3:
                    b9:45:ad:e0:7b:23:91:a8:10:83:36:e1:13:25:29:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:27:75:CF:35:AE:35:B5:5B:F6:27:5F:78:0F:7A:14:D1:1B:DE
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:be:e0:f3:39:40:3d:3b:94:73:e3:b1:b9:7c:90:67:ab:
         29:a6:50:d2:89:2b:4c:34:e3:f4:1b:3a:44:6b:29:9c:dd:44:
         62:c1:5b:fc:01:f1:86:9b:c5:7c:b1:57:7b:4f:a2:67:77:aa:
         a3:0d:a3:33:86:7d:9b:1d:6b:cc:30:d1:63:6a:28:c4:02:e4:
         87:c3:b6:23:b3:c3:5a:a5:e5:f1:2f:51:16:9b:1c:e1:56:84:
         20:34:96:b8:8f:aa:95:64:31:ee:50:7a:23:7f:37:de:43:3b:
         c7:df:75:5f:66:a5:78:71:1c:75:e0:fa:54:6e:8b:79:ab:63:
         ff:c3:33:85:28:62:12:7c:56:e4:62:16:e0:55:0a:3e:b2:4f:
         38:8f:16:ac:b8:94:4b:bd:e0:7b:67:af:26:3f:a6:48:16:73:
         fb:06:67:c7:de:fd:ff:d6:30:da:b8:3b:ea:1b:07:94:53:c4:
         1b:72:9c:0b:6c:94:da:7e:9b:1c:0e:22:d7:70:7f:75:b5:a0:
         09:b3:d8:24:04:99:1f:9f:33:9f:c4:28:07:b4:d0:33:e4:8e:
         95:cb:b4:f5:72:85:8e:f2:02:8c:15:66:d4:01:ed:72:03:bc:
         19:da:89:89:57:15:d1:24:aa:b7:e8:58:76:a0:54:22:32:a9:
         19:23:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:39:25 2025 by rpki-client