This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File:                     v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier:          YMOnoGse/797ayS/YsFdTwvtF9WOMaigg69J/2ONvBE=
Subject key identifier:   90:DF:98:01:A0:A9:D0:AB:83:E9:61:62:9A:2C:55:79:49:99:8A:13
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer:       /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number:          F5
Signing time:             Fri 05 Dec 2025 03:14:59 +0000
Manifest this update:     Fri 05 Dec 2025 03:14:58 +0000
Manifest next update:     Fri 12 Dec 2025 03:14:58 +0000
Files and hashes:         1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: ZYC7mDcF8neUsHSBj4ijGzKWoY/7Cs6SOsb7qBDLJbg=)
                          2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
                          rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
        Validity
            Not Before: Dec  5 03:14:58 2025 GMT
            Not After : Dec 12 03:14:58 2025 GMT
        Subject: CN=69324e32-886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:e4:69:27:1a:0f:4b:54:c5:98:f0:8b:06:
                    85:8d:40:92:15:57:a0:4e:8a:a0:9b:27:05:d2:b4:
                    80:f9:15:36:76:9b:f1:af:4e:f7:fb:89:0e:11:95:
                    92:cb:15:42:70:be:80:ad:31:37:13:5d:67:ac:86:
                    cc:21:2d:b6:c5:ad:0c:af:88:25:30:ed:a6:7f:9f:
                    85:37:3d:6c:5a:39:31:bd:ac:3c:ef:52:41:91:48:
                    b2:dd:8e:39:10:52:c4:38:c9:dd:39:c6:ea:f3:3e:
                    cc:70:ec:21:29:e8:60:db:a2:63:d2:24:4e:08:66:
                    57:fc:2f:c8:25:36:e9:07:47:ca:64:7b:e8:53:a8:
                    a4:ce:3e:2f:0b:41:4b:1d:07:e2:07:fd:8f:01:7b:
                    e4:07:02:48:36:b0:bf:1a:1e:ba:09:50:f6:6b:e3:
                    dd:92:34:21:a6:05:8a:f0:d9:e4:75:6a:2f:22:88:
                    5b:65:1f:f0:05:55:3a:1b:64:21:82:50:17:fd:10:
                    9a:a7:33:2c:b4:03:cc:ce:33:98:a0:22:18:a0:01:
                    70:6c:60:06:7d:1f:2c:77:d2:c9:2b:9d:95:d2:73:
                    3a:18:89:81:c4:4f:7e:9c:c5:d3:b8:34:91:3d:dc:
                    b1:92:5b:bb:93:69:f4:c5:e2:8a:95:9f:93:da:78:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DF:98:01:A0:A9:D0:AB:83:E9:61:62:9A:2C:55:79:49:99:8A:13
            X509v3 Authority Key Identifier:
                keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:9b:08:8a:c6:c2:68:7e:c2:4a:59:58:42:1b:8d:82:55:
         15:70:28:4f:05:ca:ba:95:7c:bb:85:9a:ba:f2:b0:fb:a2:07:
         a5:5d:53:0a:4b:72:8d:5d:00:94:56:80:34:70:73:13:a4:a3:
         79:0c:e6:51:cd:b8:d8:42:d9:b6:e4:5b:b7:91:d9:61:6b:59:
         5b:17:b6:37:22:37:7b:54:ac:fe:96:53:9f:61:9e:e2:3d:3e:
         d8:5a:78:fa:f2:3a:58:06:40:a3:7f:8b:38:7f:7d:f0:72:e7:
         f2:11:fa:e8:a3:65:70:84:0b:8f:7d:e9:60:7f:60:60:91:58:
         13:c6:df:1f:f9:67:21:3f:55:7a:ba:4f:ed:d7:1e:d5:5b:73:
         9a:e2:f2:aa:36:3d:91:fb:19:23:66:db:4d:ae:5c:5b:d1:4e:
         b6:83:6a:60:65:59:74:c1:87:ef:c9:1c:b1:97:b8:39:f7:9c:
         42:5e:6c:48:94:54:87:1c:1c:87:7d:7b:39:f0:d3:bc:37:98:
         47:46:cb:b7:ce:f6:b7:30:e0:74:83:71:59:cf:cd:bf:c2:bb:
         98:43:09:87:ab:20:20:4f:16:0a:f6:47:db:6e:2d:58:d8:41:
         52:e2:58:1d:b2:51:00:d0:11:c2:02:98:b1:f1:25:d0:57:0f:
         5d:bd:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:22 2025 by rpki-client