This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File:                     -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier:          UuG4rxbyYjq7nxEoBbOpfjdQ/3X07dtKXnxvlAlcnE4=
Subject key identifier:   BD:24:10:BC:9F:FD:46:74:24:FB:36:53:FC:19:3E:91:3E:F4:57:66
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer:       /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number:          010E
Signing time:             Fri 05 Dec 2025 03:04:04 +0000
Manifest this update:     Fri 05 Dec 2025 03:04:03 +0000
Manifest next update:     Fri 12 Dec 2025 03:04:03 +0000
Files and hashes:         1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: Nq5KPRVWLJ1m93NJpYYNdEQnz0LU6uhKNcdL47EquDc=)
                          2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: sQR4OxxnRQelaQye41JzM/+/uoADouWx9n3P5u34eoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
                          rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
        Validity
            Not Before: Dec  5 03:04:03 2025 GMT
            Not After : Dec 12 03:04:03 2025 GMT
        Subject: CN=69324ba4-e35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:dc:fe:e3:bc:29:f5:6d:bd:03:ab:3c:ca:
                    27:60:1c:0c:2d:4d:ce:2d:1b:8a:f3:84:de:c0:d3:
                    d8:d5:d5:ec:b1:2a:d2:a6:5b:b4:02:d7:db:d5:34:
                    a6:86:35:26:05:4b:1d:40:74:aa:f4:0e:e1:a7:ec:
                    d3:e4:7e:1d:9a:f8:ee:04:47:d2:95:c7:d0:08:6a:
                    d6:2b:20:18:01:c2:10:78:07:1d:2a:01:7f:20:78:
                    68:c5:8c:3f:02:cd:b2:5d:24:a8:82:81:90:4b:98:
                    62:c8:23:cd:bf:ae:4c:97:de:37:83:ae:fc:cf:21:
                    d0:fe:e0:fd:a2:a8:8d:e3:41:01:f4:65:af:6a:23:
                    d3:55:4a:b7:a8:f0:3f:34:87:77:a1:41:db:7e:ad:
                    65:16:46:e1:65:f3:15:f0:8d:f3:8c:a7:10:c0:89:
                    e6:a5:30:1b:71:ba:2e:ee:19:27:b9:e9:23:b6:20:
                    ec:5e:36:4f:ba:c9:9f:b6:1e:7c:76:1a:78:fe:89:
                    91:9f:e6:e5:14:2e:ed:eb:8b:f6:94:b0:ba:21:03:
                    5c:c0:9f:2a:56:2a:92:11:6f:15:4c:a5:dc:42:c5:
                    4c:54:88:14:7e:11:70:c7:01:be:e3:8d:64:2e:4c:
                    b5:d4:eb:be:64:bb:11:e8:f9:94:b6:d8:b5:08:05:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:10:BC:9F:FD:46:74:24:FB:36:53:FC:19:3E:91:3E:F4:57:66
            X509v3 Authority Key Identifier:
                keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:db:f0:6a:a7:2d:35:a6:06:ac:5b:e9:0f:64:cd:f5:e6:82:
         cd:f8:fb:bd:03:18:44:f8:1c:83:86:fb:68:7b:92:49:02:ee:
         2e:69:d5:7d:db:5f:88:6a:33:98:64:1a:b9:f4:13:17:5d:f1:
         8f:e0:dc:d6:b4:ba:84:01:92:04:2e:8f:99:0f:94:12:cb:1d:
         a7:bf:47:b7:c9:63:9e:0a:6e:5a:71:84:cc:10:e8:e5:42:be:
         a6:d4:43:92:7a:b0:10:69:c0:20:d2:05:3f:bb:b7:68:18:95:
         b4:e4:f4:8a:67:e2:a9:44:34:88:e8:b3:95:ab:58:85:51:a1:
         17:a1:76:58:43:1f:88:e0:b1:88:e2:a6:32:00:14:c5:3b:92:
         0d:2d:b4:e6:df:a8:47:ed:b3:5b:06:50:82:d1:ae:c6:e6:46:
         71:25:db:78:40:f3:7b:d4:c6:be:0e:3f:31:91:c4:41:ed:f4:
         03:64:83:4c:7d:5f:5f:19:a1:7a:8b:1e:5d:13:a5:c1:a0:ba:
         2d:2d:a6:c7:5b:cd:c7:87:54:67:67:25:7f:89:5b:32:4a:72:
         65:9d:2c:d7:fb:c1:a1:b8:e2:65:38:e1:ae:67:61:85:3c:10:
         93:bf:69:06:8c:5a:e1:0d:b4:36:bc:9b:db:17:a4:a5:d5:63:
         5e:5b:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:34 2025 by rpki-client