This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
File:                     X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json)
Hash identifier:          uyf3sdQXaoxvQXqNPVWpEtDhXcDERjoMkwqgL64QFMI=
Subject key identifier:   04:D2:85:F3:EE:E1:2A:01:52:A2:0D:8C:0D:73:8D:ED:5F:18:D4:07
Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73
Certificate issuer:       /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
Certificate serial:       0B57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
Manifest number:          142F
Signing time:             Thu 04 Dec 2025 18:33:14 +0000
Manifest this update:     Thu 04 Dec 2025 18:33:13 +0000
Manifest next update:     Thu 11 Dec 2025 18:33:13 +0000
Files and hashes:         1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: Rew6spSVrwxoNeIgabFbjEJwEggH1IptroZolY2CkNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2903 (0xb57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
        Validity
            Not Before: Dec  4 18:33:13 2025 GMT
            Not After : Dec 11 18:33:13 2025 GMT
        Subject: CN=6931d3e9-4597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:19:e0:08:50:16:60:30:07:bc:06:76:4a:21:
                    9a:b2:9e:32:6d:d8:42:01:e8:5b:f8:d5:27:ba:3b:
                    f8:fe:43:e2:13:0b:30:77:fb:1a:a1:25:8d:17:37:
                    c8:7c:2e:f0:ed:e6:da:b6:a1:7c:cd:74:bd:ef:b9:
                    f1:f2:c4:10:66:05:3d:f6:66:ca:b9:c0:15:81:5f:
                    51:51:49:65:ee:5d:18:45:dd:61:27:f9:ef:bc:1d:
                    93:86:e7:5b:42:0f:3c:83:a2:a3:af:d3:93:71:41:
                    7b:31:e0:55:87:4a:0a:41:c0:f6:c0:e9:3a:9e:ea:
                    86:33:d5:a9:1e:85:70:ef:5a:3d:7d:bb:ab:ab:e2:
                    a1:ad:8b:b3:a4:b5:2c:87:a7:49:35:92:64:79:2a:
                    2f:53:ba:44:9b:ac:31:9e:c3:74:34:45:71:8d:20:
                    41:6d:b2:38:d6:77:f2:60:2e:ba:10:42:e5:d1:a6:
                    13:aa:f5:82:88:1e:01:eb:ed:9a:0d:fd:f8:61:aa:
                    91:f6:4c:66:36:69:32:cc:9f:04:01:95:91:3a:55:
                    93:c1:73:bf:de:fa:4e:83:02:fe:ac:43:ca:00:20:
                    12:49:0a:f1:6b:df:08:f1:8a:ea:ac:22:47:44:84:
                    48:a8:55:33:dd:6c:7d:ff:58:02:ae:9c:bf:88:58:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D2:85:F3:EE:E1:2A:01:52:A2:0D:8C:0D:73:8D:ED:5F:18:D4:07
            X509v3 Authority Key Identifier:
                keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a5:00:91:4a:94:7f:ae:98:4e:ef:14:13:1f:63:fa:00:26:
         52:4f:07:ff:7a:19:cf:c6:c4:f4:33:c3:2c:f5:5d:32:b4:f1:
         11:f5:0f:a5:11:dd:e7:0b:eb:1b:01:65:a2:49:c0:3c:8c:6b:
         cc:fd:ee:2b:b8:26:52:62:91:ed:f9:46:9d:22:2b:b1:5c:bd:
         83:b0:34:b5:6e:64:e4:fd:5b:17:a8:c9:a5:16:ef:89:17:eb:
         bb:ad:97:62:e7:4c:3f:e1:bc:29:33:88:6e:f8:c6:4e:71:52:
         2c:cd:da:ef:38:f4:c6:92:1a:5e:01:44:e5:63:97:9a:a0:4d:
         96:29:ad:9b:da:98:03:53:43:ce:65:2a:9f:36:24:67:e3:c5:
         99:57:ae:2e:bd:0b:21:a6:f8:d1:26:bb:98:be:1f:7f:60:01:
         02:2b:ba:ad:15:88:c8:59:87:97:02:78:46:e5:3f:5a:e1:f7:
         d5:53:6e:b1:d7:98:a9:55:02:5d:b9:db:11:9d:af:77:3b:80:
         03:5d:f3:5a:9e:93:44:4a:0c:8c:8e:fc:c6:ce:b7:35:a9:d1:
         53:8f:c1:22:48:9e:b0:6c:f4:4b:39:f0:93:10:92:56:1a:a0:
         b9:5c:05:ca:37:bb:9c:6c:3c:01:af:db:1c:19:1f:00:70:82:
         6b:8c:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:03:26 2025 by rpki-client