This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
File:                     Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json)
Hash identifier:          FZFVvvHZlbJVHHb3/RO6tdiAhZ7FSL5AabRUfpOs2WE=
Subject key identifier:   0D:22:59:BF:48:1E:C5:14:D3:4F:84:2E:89:D7:6B:7F:73:94:C6:56
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
Manifest number:          E0
Signing time:             Fri 05 Dec 2025 03:34:39 +0000
Manifest this update:     Fri 05 Dec 2025 03:34:38 +0000
Manifest next update:     Fri 12 Dec 2025 03:34:38 +0000
Files and hashes:         1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: F4cqpPDsdDqEti0M28c6z5bslaG19qbW4N96AO3JlLQ=)
                          2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=)
                          3: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: vaEXmxxOCfh4t7B3q+8C9by77OCY+clJhF+kP80doZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Dec  5 03:34:38 2025 GMT
            Not After : Dec 12 03:34:38 2025 GMT
        Subject: CN=693252ce-cdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:15:b9:27:77:0b:fd:bb:e5:00:f3:17:09:
                    3c:11:5c:3e:06:7b:4b:1e:15:08:32:f4:bb:d2:46:
                    1a:b6:62:b6:ff:2e:83:dd:a6:65:fc:01:62:91:72:
                    c5:34:5d:96:1b:5e:01:07:90:5c:95:de:fc:e1:95:
                    20:68:6b:c1:77:52:b1:5b:51:00:9f:80:91:c7:8e:
                    21:51:a3:d4:26:8a:de:a3:96:0a:f2:67:9d:a3:9d:
                    94:c6:2b:86:66:0d:1d:02:8f:54:51:59:6a:ef:9e:
                    c0:2e:89:08:33:1a:2f:ce:18:ee:4e:39:4e:09:60:
                    67:1b:79:a5:41:df:2a:93:5a:72:49:95:bc:c8:35:
                    73:43:3d:7a:88:64:c4:b0:58:1d:ae:ad:34:d4:55:
                    ee:07:18:62:d9:74:7d:11:26:3a:92:e8:1e:29:0e:
                    00:e0:8e:ff:1a:e0:22:18:03:01:9e:7e:12:fc:12:
                    4e:64:dd:82:c7:79:17:ef:b4:40:0b:a8:d9:e1:ee:
                    6d:4e:e2:62:70:8f:a1:d5:71:1f:0b:ea:c9:c3:45:
                    f3:6b:4c:9f:66:30:6f:76:b3:03:48:c5:a7:05:92:
                    fa:45:a6:b4:7c:10:6d:a7:10:8e:58:93:f2:26:21:
                    58:f3:96:7c:06:8d:16:b4:a6:3f:ab:85:7e:93:8c:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:22:59:BF:48:1E:C5:14:D3:4F:84:2E:89:D7:6B:7F:73:94:C6:56
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:a5:f8:a1:38:a0:00:8a:bd:b7:3b:13:6a:7d:f0:54:f3:
         59:17:27:68:53:07:9b:78:2d:61:47:8f:75:88:ea:94:ba:db:
         43:18:32:54:d1:0d:28:ea:46:62:81:f2:48:ba:ad:b7:ed:d1:
         20:cc:fb:7b:af:90:4c:c3:3a:fc:42:a5:e0:6c:58:9b:91:36:
         df:18:a2:ad:71:5a:26:3b:ce:2d:94:20:42:a3:20:7c:68:ca:
         06:56:92:d7:27:12:a2:e8:15:c6:d0:b5:1f:4f:4f:c9:c6:75:
         d7:91:3b:12:1b:3b:a8:c0:5e:aa:65:1e:ed:c8:62:c6:3c:f1:
         ac:d3:45:5e:21:7c:ff:db:ea:d7:52:48:c1:6f:49:5f:67:e2:
         3d:b8:a1:46:70:8b:16:a9:2d:4c:da:91:9f:c2:47:2a:68:33:
         19:74:6a:d5:bb:15:b3:bc:b2:ba:7f:37:dc:62:a5:e1:db:3e:
         05:8f:83:ae:5b:8d:fa:ca:5c:56:5c:c8:a1:3b:d5:a3:dd:e9:
         75:fd:06:8b:ff:5a:4c:7b:3b:2f:37:db:bf:a9:c5:27:41:58:
         4f:c7:41:e9:fc:9d:5d:04:05:54:3c:35:c7:87:36:b2:77:b8:
         4e:a5:01:8b:d5:61:65:d8:c0:e9:5b:0b:6f:d5:99:23:22:e5:
         09:f5:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:48 2025 by rpki-client