This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          n9Lj0EaaM60UlhbLgI6p0qB3wR0TSvGEQ5O3Np+ofrk=
Subject key identifier:   83:7B:54:93:E8:AB:D6:98:95:94:01:06:07:23:DC:03:83:CB:BB:D5
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       0840
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          0837
Signing time:             Sat 06 Dec 2025 19:53:58 +0000
Manifest this update:     Sat 06 Dec 2025 19:53:57 +0000
Manifest next update:     Sat 13 Dec 2025 19:53:57 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: qTrpnoor3Wfy08SHr3VIocNmdN0vuBU57+IhdgwqBFk=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112 (0x840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Dec  6 19:53:57 2025 GMT
            Not After : Dec 13 19:53:57 2025 GMT
        Subject: CN=693489d6-0cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:56:a5:02:00:c6:2e:be:5e:6a:8b:f6:b0:
                    bf:8e:e3:c9:43:4b:79:3a:b3:16:f4:95:45:34:af:
                    4e:4a:fb:91:41:ec:e6:dd:2d:6b:fc:b7:a6:23:79:
                    69:bf:26:65:9b:29:98:c2:11:99:69:cd:de:2f:e0:
                    b7:c8:a1:1b:d1:59:ab:31:67:05:6c:a8:d8:e3:3f:
                    68:61:7e:c4:a1:fe:83:64:e0:fa:be:6c:5e:94:0d:
                    5f:86:35:5e:20:97:13:1d:d2:a9:c7:83:ab:5f:e2:
                    26:73:12:ac:bb:7d:d4:e9:7d:e8:97:df:d6:a2:76:
                    95:be:34:12:13:cf:8e:2b:23:f6:d0:4a:48:ab:cb:
                    cc:f2:60:aa:4a:24:8e:ba:0a:2f:3f:04:31:5e:6a:
                    64:6a:39:df:60:b9:c6:b6:7b:50:9c:c6:95:14:24:
                    36:f8:5e:8e:f9:23:37:4f:d4:bd:87:47:b0:79:16:
                    84:a3:21:03:47:8c:a4:f2:c7:de:74:68:22:7c:a0:
                    32:5f:30:d7:d8:a3:db:4c:1c:1b:40:ab:30:a8:84:
                    a2:d0:c6:22:44:c4:00:3b:61:9e:08:c1:e9:75:8b:
                    31:5a:46:f2:0d:80:91:6f:f7:c0:c7:47:a1:39:a1:
                    1a:e0:45:5d:0d:12:93:d8:bd:a7:2d:7f:00:15:2e:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7B:54:93:E8:AB:D6:98:95:94:01:06:07:23:DC:03:83:CB:BB:D5
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:00:6b:66:ab:b6:ee:51:ce:a1:ec:85:ef:f7:4d:a3:52:cf:
         32:3f:08:12:70:2d:3b:80:e5:cc:3b:98:bc:c4:76:30:24:33:
         d0:69:a6:c8:32:78:a2:b3:5e:f9:84:19:ba:89:9c:4c:d6:dc:
         83:35:d3:88:68:17:c6:33:2a:0d:c9:12:6f:87:99:e8:e3:2b:
         3d:8c:b7:f1:41:2e:f6:73:99:af:54:a7:ce:2a:4a:e0:e7:41:
         92:f8:3f:81:ee:4f:0c:62:02:a9:0b:93:89:3b:51:74:79:46:
         5a:0b:66:78:e0:40:e8:cf:68:85:7d:af:95:16:6a:35:65:60:
         ad:f6:2f:bf:11:fe:ea:77:b4:a2:11:78:c1:cd:47:92:dd:92:
         74:8d:29:81:27:33:05:8e:f0:29:7a:3a:35:94:47:b7:3b:cd:
         78:a4:5d:37:ee:23:e7:91:bb:72:fa:18:19:6f:63:7a:04:ec:
         e3:90:3f:21:c7:f6:d9:b6:18:b6:77:86:e9:a8:a7:1d:24:be:
         24:6f:82:82:9f:e4:48:b6:ed:0e:a8:4a:22:ac:e7:22:91:78:
         3c:ed:a2:b3:8d:be:5c:66:f2:18:73:82:71:57:78:a6:3e:85:
         7f:7d:05:c6:5d:e5:96:a6:cc:60:06:cf:ff:89:41:91:97:2c:
         d7:9b:40:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD
MTgzQTEyNjYwHhcNMjUxMjA2MTk1MzU3WhcNMjUxMjEzMTk1MzU3WjAYMRYwFAYD
VQQDEw02OTM0ODlkNi0wY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiNWpQIAxi6+XmqL9rC/juPJQ0t5OrMW9JVFNK9OSvuRQezm3S1r/LemI3lp
vyZlmymYwhGZac3eL+C3yKEb0VmrMWcFbKjY4z9oYX7Eof6DZOD6vmxelA1fhjVe
IJcTHdKpx4OrX+ImcxKsu33U6X3ol9/WonaVvjQSE8+OKyP20EpIq8vM8mCqSiSO
ugovPwQxXmpkajnfYLnGtntQnMaVFCQ2+F6O+SM3T9S9h0eweRaEoyEDR4yk8sfe
dGgifKAyXzDX2KPbTBwbQKswqISi0MYiRMQAO2GeCMHpdYsxWkbyDYCRb/fAx0eh
OaEa4EVdDRKT2L2nLX8AFS5wzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN7VJPo
q9aYlZQBBgcj3AODy7vVMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx
ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH
YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmAGtmq7buUc6h7IXv902jUs8yPwgScC07gOXMO5i8xHYwJDPQaabI
Mniis175hBm6iZxM1tyDNdOIaBfGMyoNyRJvh5no4ys9jLfxQS72c5mvVKfOKkrg
50GS+D+B7k8MYgKpC5OJO1F0eUZaC2Z44EDoz2iFfa+VFmo1ZWCt9i+/Ef7qd7Si
EXjBzUeS3ZJ0jSmBJzMFjvApejo1lEe3O814pF037iPnkbty+hgZb2N6BOzjkD8h
x/bZthi2d4bpqKcdJL4kb4KCn+RItu0OqEoirOcikXg87aKzjb5cZvIYc4JxV3im
PoV/fQXGXeWWpsxgBs//iUGRlyzXm0Dg
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:43 2025 by rpki-client