This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
File:                     MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json)
Hash identifier:          lbBjyYx7KUGaVtlx1xdXp3dsknoqf4vxovr38V+ZclY=
Subject key identifier:   AA:0A:80:C6:A5:CF:74:10:9D:AD:8A:91:EB:23:66:15:2D:DA:2B:90
Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
Certificate issuer:       /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
Manifest number:          014E
Signing time:             Sun 07 Dec 2025 02:34:39 +0000
Manifest this update:     Sun 07 Dec 2025 02:34:38 +0000
Manifest next update:     Sun 14 Dec 2025 02:34:38 +0000
Files and hashes:         1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: OJOXbHjnYiUr2BC5crjFGPChvZ8hXppfQWqyU6sdfzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
        Validity
            Not Before: Dec  7 02:34:38 2025 GMT
            Not After : Dec 14 02:34:38 2025 GMT
        Subject: CN=6934e7bf-b508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:35:19:a8:26:50:68:c2:3b:33:58:0a:85:
                    aa:96:7a:f7:d1:3b:e2:28:6f:ac:15:d6:bc:3e:40:
                    db:35:d3:fc:a9:5a:3a:80:a7:9e:d5:56:53:b0:8c:
                    c2:d0:c2:7f:8f:bd:95:82:ff:08:83:ff:50:70:15:
                    e5:c2:f6:f4:95:d5:96:83:38:df:54:de:e3:00:f8:
                    5a:9e:73:c4:af:50:d4:28:d5:d6:b8:33:87:54:eb:
                    07:5c:8e:8f:6c:28:0e:41:0b:71:8b:db:a0:d3:91:
                    5c:20:66:08:59:79:de:68:4a:64:a8:b2:63:96:c3:
                    f3:ee:62:e3:7c:e9:47:33:bd:29:19:78:3d:31:44:
                    03:c5:f1:f0:41:e9:f8:23:59:a7:09:82:de:cb:6a:
                    84:d6:28:6f:8c:f0:66:28:bf:f0:9a:2f:1b:eb:2d:
                    f5:ff:5e:37:d0:7d:7e:0a:fe:fa:15:aa:79:9c:33:
                    bc:e5:ea:20:d7:14:4e:4e:a2:43:2f:71:87:b4:ed:
                    31:21:1f:41:81:f1:88:ab:6e:80:ab:93:5b:5d:9e:
                    50:64:ac:16:e5:5b:70:74:36:90:34:2d:67:ee:c0:
                    74:12:c3:7a:36:62:7c:62:46:19:fc:31:b0:12:d0:
                    ef:0a:8b:6e:05:6f:38:a5:30:6d:59:c8:04:14:f4:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:80:C6:A5:CF:74:10:9D:AD:8A:91:EB:23:66:15:2D:DA:2B:90
            X509v3 Authority Key Identifier:
                keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:3d:da:94:c0:20:7f:e6:53:d8:56:09:84:70:cc:ff:f0:
         ea:15:89:80:d3:1c:50:a5:1f:d7:63:15:3a:07:a9:47:4e:98:
         b3:d3:f1:3a:ad:a9:da:80:20:d9:7b:2b:33:db:ed:dd:ac:fa:
         d7:67:88:4d:73:12:7c:40:8e:54:77:f4:44:0e:0e:6f:c8:0f:
         4d:58:db:e1:c4:3b:55:ca:87:3d:0e:51:57:45:ec:fe:ce:9a:
         fa:86:3c:99:e5:cd:5e:11:26:63:1f:dc:c8:64:72:33:6b:bc:
         88:82:e3:7a:fe:d1:cd:7e:09:a1:5b:87:d0:15:78:f8:98:15:
         5c:e4:9e:33:ca:9e:5c:06:c5:96:fe:bc:a7:37:09:90:e7:d6:
         bc:e9:4c:04:11:36:80:ab:a5:ce:03:78:a0:6a:fb:cb:e3:7c:
         82:2f:91:9f:ba:22:cd:6f:6d:a6:1d:7d:3a:11:c3:95:48:e2:
         b9:54:62:36:3d:57:3c:ec:1a:0d:60:eb:31:5c:32:bb:dd:8f:
         8a:4b:d8:9e:d3:49:7b:8f:89:65:26:ba:ec:b0:99:d2:d6:84:
         53:77:23:a2:35:74:90:e1:15:8a:70:97:30:5f:ee:50:82:13:
         8b:11:73:bd:dc:50:e5:62:9c:d2:b1:b1:16:bd:2f:f1:72:42:
         b1:1b:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:06 2025 by rpki-client