This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft
File:                     76QjuvW_0YkxbmUDHozq9aP_oUs.mft (raw, json)
Hash identifier:          GseVFWnHFFMcdE+CwMN0b2/M3QYt2rmdXcrXcyDwORk=
Subject key identifier:   31:B7:42:A1:F4:E1:4F:BB:1E:56:AC:8C:39:BC:84:2F:FB:A1:AB:7F
Authority key identifier: EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B
Certificate issuer:       /CN=A91F264C/serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft
Manifest number:          86
Signing time:             Fri 05 Dec 2025 04:38:54 +0000
Manifest this update:     Fri 05 Dec 2025 04:38:53 +0000
Manifest next update:     Fri 12 Dec 2025 04:38:53 +0000
Files and hashes:         1: 76QjuvW_0YkxbmUDHozq9aP_oUs.crl (hash: orSu8vGTwHIeI8TKlowAlrgil7LBPTncUn0ZRJc/hnQ=)
                          2: DB5AB9A0195A11F081485C3AC4F9AE02.roa (hash: m59M0ncJUCK36ckQ6/eIEjMQn3u/pmDKVn3V21psl70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl
                          rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F264C, serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B
        Validity
            Not Before: Dec  5 04:38:53 2025 GMT
            Not After : Dec 12 04:38:53 2025 GMT
        Subject: CN=693261dd-0c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:b9:23:6d:34:8d:f7:90:ea:3b:02:ce:2a:
                    b7:4c:ea:d6:21:7b:df:86:d0:5c:dd:46:e2:9a:c1:
                    90:21:b3:b1:f0:5b:26:73:74:75:7a:e6:c7:79:ac:
                    0a:41:c3:8b:65:75:e9:61:ef:33:f0:2a:12:45:ea:
                    b4:bc:1d:c8:d1:bf:b4:5f:f3:12:e3:a2:19:84:e8:
                    23:83:a7:bd:92:ac:50:eb:93:8c:62:56:ed:49:35:
                    a5:fe:68:0e:cd:25:28:21:61:43:36:24:e5:5f:d3:
                    4f:5f:9c:6e:83:ce:18:ae:b8:45:31:70:cf:b2:ef:
                    98:18:0b:cb:ac:56:4f:eb:fa:07:06:df:65:7e:90:
                    16:37:16:34:fa:f6:e4:59:41:bc:02:d1:6f:d8:2d:
                    20:b7:e2:f2:b7:57:7d:d9:a6:8d:7a:15:d4:e1:e0:
                    d2:79:8f:9f:06:b7:61:db:75:4b:e0:17:d2:c3:e1:
                    dc:45:df:7c:f6:0c:e1:29:3a:44:2a:25:87:f3:18:
                    c3:16:91:14:41:98:56:c3:74:8f:8d:96:03:a0:42:
                    6b:d4:1f:47:2f:70:ea:d3:fe:2f:9a:e3:13:98:2d:
                    f8:7f:1d:05:d3:05:ac:ae:25:f7:ad:74:2a:93:cb:
                    d1:6e:8b:69:05:5f:1c:f3:8a:eb:8f:51:64:de:30:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:42:A1:F4:E1:4F:BB:1E:56:AC:8C:39:BC:84:2F:FB:A1:AB:7F
            X509v3 Authority Key Identifier:
                keyid:EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:fc:3b:e1:0c:1b:fa:c8:61:df:66:4b:78:8b:cf:21:51:
         27:bd:e7:45:0a:5b:62:02:10:f7:92:e3:a0:79:e4:2a:68:3a:
         9c:52:c8:63:9d:41:47:11:00:29:d6:b0:6a:9e:5e:54:0a:e6:
         55:6b:1c:aa:89:73:c7:e6:c3:47:74:cd:d7:c9:4d:4b:6d:04:
         ee:93:5a:df:45:7c:54:42:e3:80:a1:b1:69:04:1f:c0:68:1f:
         21:68:65:b9:1b:b5:35:9f:fc:c2:7c:7e:1e:60:7c:0d:1c:5a:
         b1:97:8c:4d:4c:c9:b5:1c:7d:1b:61:e3:e8:c3:1b:ae:63:94:
         38:e7:cd:a9:70:82:23:32:8f:2d:32:52:ea:4f:2c:df:de:8b:
         71:13:23:e0:16:f1:96:c7:1d:39:fa:cf:7c:dc:6a:71:e1:1c:
         6f:7a:be:5c:da:a1:f7:fe:08:51:95:f4:9b:ae:47:76:a9:02:
         c3:08:46:82:9f:83:ca:26:90:c2:be:46:3e:2b:f0:a0:f0:15:
         6a:e8:30:5d:0c:28:5b:09:5c:37:a9:4e:eb:91:e6:86:59:ed:
         4c:60:bd:90:4d:70:33:63:2b:db:10:5a:94:9e:06:55:38:4b:
         77:8b:c9:7b:84:d7:b5:84:29:a5:95:7e:a5:bf:08:4f:0f:65:
         87:d6:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:26 2025 by rpki-client