This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File:                     p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier:          wQKrUmZoMPJKX81Kac2IcIogto+ULkkHfJb4pSUImuA=
Subject key identifier:   09:A3:DC:D6:01:4E:B6:31:EE:A3:33:BE:E0:78:81:41:4B:14:26:A5
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer:       /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number:          0105
Signing time:             Fri 05 Dec 2025 03:06:01 +0000
Manifest this update:     Fri 05 Dec 2025 03:06:01 +0000
Manifest next update:     Fri 12 Dec 2025 03:06:01 +0000
Files and hashes:         1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: d93U1rfcyJMYibyp3mbYIMnw3ZqmwiBx28CuUrI62Do=)
                          2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
        Validity
            Not Before: Dec  5 03:06:01 2025 GMT
            Not After : Dec 12 03:06:01 2025 GMT
        Subject: CN=69324c19-d792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:02:d3:fb:db:36:d0:e2:8e:fa:1a:d5:b3:57:
                    d6:d4:4d:5e:a0:4f:6e:a0:a5:ff:ea:d9:e9:a6:c9:
                    eb:6a:9b:39:d9:22:4f:72:3a:31:30:08:14:ae:9f:
                    fb:d6:9d:43:75:52:94:0d:29:25:71:eb:da:98:0e:
                    3d:d5:34:cd:8c:83:b6:a4:7c:38:12:af:27:b7:c9:
                    97:f2:49:a4:9e:6d:53:85:3e:49:52:5a:d9:e1:d9:
                    a3:ec:95:8a:59:0e:8f:d2:d1:6b:f8:0f:63:9c:82:
                    93:1a:13:71:24:f9:4e:a0:76:83:0e:99:62:b1:ef:
                    ba:7e:95:64:3c:af:31:df:0c:c3:e0:03:55:49:b3:
                    cd:f0:e1:0d:b5:1a:46:0c:28:57:d7:47:17:16:8d:
                    eb:41:d7:0d:06:2c:46:bf:31:fb:e5:52:96:44:a9:
                    5a:85:22:a0:65:5f:b0:49:a9:93:4a:97:07:12:14:
                    56:67:8e:4d:6c:40:97:92:a4:8c:02:86:f1:0f:2c:
                    65:c1:e5:46:e0:60:98:14:21:30:d8:c8:c2:02:3d:
                    28:dc:df:e4:95:a7:0f:f9:dd:35:6e:e9:0d:07:65:
                    4b:fc:63:6c:c0:b2:b1:37:6f:1d:02:cc:7f:4a:83:
                    29:06:e3:16:9e:d1:a8:39:d7:e6:f3:2b:47:09:07:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:DC:D6:01:4E:B6:31:EE:A3:33:BE:E0:78:81:41:4B:14:26:A5
            X509v3 Authority Key Identifier:
                keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:b2:57:13:42:3e:6d:bf:be:42:fa:cb:6e:b6:d6:9a:b6:
         fc:2a:42:d3:83:09:4f:55:62:24:74:27:f3:b1:4f:4d:ed:9c:
         f6:b9:78:cd:cc:ad:8e:06:1c:93:d0:ef:3c:b3:75:19:a5:b2:
         ca:55:cf:3d:77:77:bf:88:2b:fe:61:e6:c0:4c:21:64:75:e8:
         ee:c6:66:6d:1a:ca:d0:30:e0:12:ab:b7:4a:8b:db:29:2a:fd:
         0d:20:1a:88:24:98:59:30:3d:24:e3:a3:91:07:97:9a:00:34:
         01:ba:be:10:3b:ab:6a:de:1a:67:5a:fd:4d:3f:35:10:24:d3:
         74:c5:cd:74:6d:4c:b4:d1:94:37:4e:dd:e3:1b:68:e8:b3:d2:
         72:0b:9e:f6:11:74:8b:61:c2:8c:7a:cd:95:f0:78:f8:ac:35:
         90:14:e6:17:87:0a:29:b6:15:9f:a7:00:72:1b:ce:13:73:fc:
         4c:45:b8:5f:ea:92:1b:a8:87:ee:fb:72:7b:ba:12:a2:a9:8d:
         06:9d:8c:10:9e:7f:06:73:3f:ad:14:74:5e:50:8d:53:6e:f6:
         6f:14:c5:0a:31:53:7e:d0:9f:fb:c6:a8:64:6b:f2:14:d2:c8:
         4c:ae:19:56:e5:f9:8f:0c:aa:b6:97:90:54:f1:74:8c:7c:81:
         37:3e:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:35:47 2025 by rpki-client