This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File:                     Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier:          SJkUaawqYOtReijdUBNw9QGeMDlMT8BhbLhRY7R+67c=
Subject key identifier:   E5:CB:D0:B1:D9:7D:3A:F5:DA:96:26:D3:10:6B:0F:DC:49:97:00:9E
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer:       /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial:       0514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number:          04E7
Signing time:             Thu 04 Dec 2025 22:26:13 +0000
Manifest this update:     Thu 04 Dec 2025 22:26:12 +0000
Manifest next update:     Thu 11 Dec 2025 22:26:12 +0000
Files and hashes:         1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: Zi/BqRuXCV3xW5KsMm8IutcSq8JJ0Cayxds74x7rTZ4=)
                          2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=)
                          3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: jhSTY2DYnMEsMBx0x/zPRVJM0gPx3FVGm0Ptw4y3rcw=)
                          4: 213E93FE8E0B11F088E57287C4F9AE02.roa (hash: XvQlmCL/lUe7ZYDky8HxuV3wqFx2+yxYoZ/we9Jj4bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
        Validity
            Not Before: Dec  4 22:26:12 2025 GMT
            Not After : Dec 11 22:26:12 2025 GMT
        Subject: CN=69320a84-31d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:0b:bc:6c:51:6c:a0:96:23:73:54:c6:3d:
                    c1:34:b3:1b:a7:de:ba:be:07:38:52:63:45:80:a8:
                    ad:e4:5e:ae:7a:f0:c6:3e:6d:54:61:bd:1b:54:be:
                    40:c6:a1:0e:0f:e3:b7:3d:a9:d7:f2:8d:c1:4d:a2:
                    db:57:d0:5c:22:04:e9:08:70:35:0d:67:ae:e5:5b:
                    40:ed:2c:49:0b:39:a5:f3:ba:22:69:a0:92:94:13:
                    7c:3f:69:3f:db:fc:be:ca:79:ff:d9:07:55:5f:40:
                    9b:f9:59:ba:93:28:1d:a5:24:c4:3f:30:11:1d:aa:
                    e1:2a:4e:65:b4:14:1f:ef:6e:18:0c:71:f8:46:e7:
                    93:54:c5:1f:87:d5:c2:68:8c:c6:64:50:14:12:8e:
                    38:b3:62:90:7a:f3:77:95:9d:1b:fb:4c:2f:9e:5a:
                    80:06:6c:84:c4:26:16:ed:60:f2:9a:15:eb:46:7e:
                    a2:fc:20:b8:94:b8:e8:41:33:91:fc:63:c9:6c:fd:
                    76:03:0f:86:bd:e2:03:91:0f:52:7f:c2:d1:cd:69:
                    ad:95:0d:a1:11:75:af:80:8a:f0:ee:5e:95:79:a5:
                    c4:b7:4d:43:b8:6a:9f:f9:45:43:1f:ed:28:f3:d0:
                    6d:f8:56:e2:a5:30:54:44:53:92:82:23:bb:f8:da:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CB:D0:B1:D9:7D:3A:F5:DA:96:26:D3:10:6B:0F:DC:49:97:00:9E
            X509v3 Authority Key Identifier:
                keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:e0:f4:96:62:10:44:f6:d8:23:bf:96:3f:5f:c9:0e:84:
         6c:ff:2c:a6:5a:96:e8:9b:0f:bc:82:3b:ab:4a:56:b6:27:dd:
         80:59:d0:4e:55:84:2d:f6:a2:d9:99:89:c5:9b:52:ba:d5:d0:
         f6:7f:dd:fd:45:33:84:42:7a:81:df:4e:18:b4:2d:67:d7:76:
         1b:ca:97:c8:c4:bc:9c:dd:72:ad:a3:19:01:51:fd:5e:2e:ab:
         7a:82:1e:29:cc:c2:b1:35:61:8f:e6:e5:9f:ac:a5:b4:6c:df:
         02:53:d1:c2:48:1d:d5:50:cc:e9:13:ac:d0:18:d5:a1:b8:da:
         4c:1e:92:19:a2:a4:ed:06:b8:15:3e:11:f9:d0:37:a5:20:56:
         98:a5:ce:2d:7c:90:70:cd:dc:6f:0b:7c:aa:2c:07:f7:6a:4d:
         0c:18:60:5f:43:58:45:78:69:98:f7:d7:5f:5c:f3:d4:fc:c3:
         96:07:79:f4:a7:86:37:74:0f:c2:9a:f8:79:99:d9:3d:56:74:
         a5:a4:60:b2:8d:a2:a5:a5:9e:6f:33:45:1b:f3:18:8a:31:4c:
         8b:97:1e:30:5a:79:9c:f6:16:5d:d9:6f:76:da:b1:2c:e5:25:
         fa:57:7d:03:63:40:5e:89:7a:35:7d:e2:03:22:31:dc:38:10:
         a1:d7:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:45 2025 by rpki-client