This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File:                     _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier:          rfnzOmxtMRyyVcgXFLMFhLnCYWwy8ngquz76tdxl1eU=
Subject key identifier:   9F:82:6D:0E:2B:65:BA:EF:DC:04:B9:CF:14:98:0F:FD:7E:38:40:53
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer:       /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number:          46
Signing time:             Fri 05 Dec 2025 05:15:07 +0000
Manifest this update:     Fri 05 Dec 2025 05:15:06 +0000
Manifest next update:     Fri 12 Dec 2025 05:15:06 +0000
Files and hashes:         1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: /4lCdvDMqSemZML6De432Vi13tshpGwmyyLHKN2iEbM=)
                          2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
        Validity
            Not Before: Dec  5 05:15:06 2025 GMT
            Not After : Dec 12 05:15:06 2025 GMT
        Subject: CN=69326a5a-4ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:1e:14:a3:05:1d:ab:04:d7:c8:ab:5d:83:
                    35:c0:30:d0:20:0d:30:ae:05:5e:f1:b9:e5:5e:8c:
                    cc:3b:1e:47:7a:d5:7d:37:0a:26:04:5f:72:ed:d0:
                    d8:a6:09:be:72:31:27:d4:21:af:31:3c:f5:21:25:
                    c5:f7:6c:19:88:7e:87:21:3a:93:76:bb:58:e5:34:
                    7d:a3:96:3c:d6:31:6a:d1:59:8d:14:b3:7f:65:85:
                    87:d0:6f:0f:3a:18:6f:dc:23:30:a9:6d:cd:27:d2:
                    60:ca:ce:7d:7a:57:07:67:84:b1:ec:ab:ad:76:ea:
                    fa:cd:ef:5a:2d:ff:cc:6e:ad:19:0b:09:1d:e3:6c:
                    2c:43:e2:c0:f7:e5:eb:fe:76:09:43:47:f3:e4:68:
                    06:97:f1:c6:46:b6:28:7f:53:b0:af:c1:19:e2:10:
                    d1:b7:9f:64:5b:8f:f6:e1:07:2c:85:85:08:f3:6f:
                    01:60:76:1b:e7:59:68:48:37:8c:50:71:75:9b:48:
                    7c:e7:3b:e1:0a:55:76:52:c2:53:04:41:bc:04:c0:
                    ac:48:d5:6a:60:2d:41:8a:72:5f:10:15:9b:06:07:
                    f8:11:1e:c8:cb:10:8b:31:8b:27:10:69:93:8b:f6:
                    8f:a5:b5:3d:d6:5f:a5:be:e9:1f:fe:a6:5f:31:16:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:6D:0E:2B:65:BA:EF:DC:04:B9:CF:14:98:0F:FD:7E:38:40:53
            X509v3 Authority Key Identifier:
                keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:36:7a:02:14:1b:8a:3a:63:0c:ac:05:d0:0a:9e:18:b6:
         9e:a2:7b:72:7b:97:b3:1f:40:1a:41:ab:bf:65:2c:ce:c3:4b:
         42:c4:8a:32:f6:00:e7:65:a1:47:e0:02:45:4c:49:34:77:4a:
         69:86:6e:4c:65:a2:fd:0d:65:e8:e7:6f:39:84:4b:69:53:a9:
         39:7f:75:71:eb:b6:80:f0:bb:a2:e9:2c:cf:64:79:f3:c2:2b:
         05:9d:ce:33:9f:19:67:7f:d5:95:d7:a1:72:3e:99:12:02:3c:
         a1:6a:f9:7b:fb:23:99:e5:cb:29:da:f3:b3:e5:48:8d:00:cd:
         f2:f6:df:30:e1:fa:fa:f0:c9:ed:13:1e:74:42:ec:96:00:b2:
         e8:09:fb:05:3e:67:9d:4b:e6:0e:b6:26:5b:c6:10:04:ba:be:
         75:94:48:f9:0c:5a:d9:f9:7d:3c:4b:24:c9:73:3b:b9:73:4d:
         06:22:26:ed:70:af:7f:44:10:1c:58:71:49:0c:4c:86:ec:c4:
         08:45:58:e4:00:50:1d:2b:72:8d:02:1d:c2:c7:a2:6d:f1:c9:
         65:1c:c6:30:5b:39:bc:eb:ad:9e:04:da:c3:08:eb:81:26:b9:
         e0:00:c2:52:f8:ca:c3:30:5e:71:e2:2d:e7:4c:ac:20:43:eb:
         db:c6:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:00:57 2025 by rpki-client