This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File:                     IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier:          FD1/5RkvJQhfWJOktUGhuxwYkSfA5gIcAIJCwHEB6x8=
Subject key identifier:   9B:AF:E3:80:A9:28:46:0D:05:FE:8C:BD:14:AF:60:89:30:58:15:16
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       0371
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number:          036A
Signing time:             Thu 04 Dec 2025 23:19:31 +0000
Manifest this update:     Thu 04 Dec 2025 23:19:31 +0000
Manifest next update:     Thu 11 Dec 2025 23:19:31 +0000
Files and hashes:         1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: o9lgwZ++qGpXfn1Pd5odTk0mcmnYnbgh7zHQVRVBLoc=)
                          2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
        Validity
            Not Before: Dec  4 23:19:31 2025 GMT
            Not After : Dec 11 23:19:31 2025 GMT
        Subject: CN=69321703-a9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:b2:32:54:47:c4:3f:aa:f5:1c:92:19:89:
                    cc:ef:1c:55:aa:88:02:e0:8c:04:af:03:4f:ae:c1:
                    83:ff:15:fe:d7:0a:08:c0:09:b7:99:40:38:07:12:
                    76:01:0c:fa:dc:18:23:c9:18:1e:d3:40:5c:9e:8d:
                    64:04:97:ed:8f:a8:63:e0:ab:2e:3e:f3:80:cc:5c:
                    07:a3:76:fc:24:ce:f6:2b:97:31:f8:23:e0:b4:32:
                    5d:07:71:e1:83:ed:ea:98:cd:a7:19:dd:2e:a9:8b:
                    6f:a1:1a:a6:8c:de:f2:b9:4f:b2:32:fa:49:8d:34:
                    4c:63:38:8c:fe:91:cb:3b:aa:cb:c3:d1:02:08:e5:
                    53:f0:e5:7a:f0:e0:1c:ea:6b:a6:b3:ee:10:9e:52:
                    9e:1c:c2:46:e3:16:65:09:e1:6e:99:43:41:7a:4c:
                    cc:b4:eb:82:66:10:45:90:9a:04:26:57:00:44:db:
                    1d:fa:94:74:7e:a7:9a:88:a5:aa:33:37:57:50:11:
                    12:46:55:31:b3:de:9d:af:7f:ae:c5:49:15:d2:fc:
                    c3:d1:1b:3a:3b:f4:4c:ab:30:92:6a:06:da:e1:21:
                    f3:d4:ca:14:5a:8c:51:5e:45:8d:95:e8:a1:11:80:
                    21:dc:da:00:8a:7b:9c:63:82:bf:e5:44:83:56:40:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:E3:80:A9:28:46:0D:05:FE:8C:BD:14:AF:60:89:30:58:15:16
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:f5:dd:d1:82:27:8a:97:5d:b3:8e:3f:c5:ee:b3:f2:0d:
         9b:c4:74:8b:c8:d0:b2:a3:c1:6d:59:c5:fb:08:e7:29:c1:da:
         9d:8b:a0:eb:ea:43:4c:68:39:ba:34:68:8b:ab:3d:fb:21:c4:
         5c:8f:d9:e5:c4:da:dc:16:97:cf:08:bf:37:c3:22:15:2e:56:
         27:90:7e:82:bc:d4:72:11:4d:0f:10:a2:5d:67:e4:46:ea:9f:
         50:52:7f:43:25:2d:78:2c:44:07:bd:71:df:68:4e:88:3b:55:
         df:66:81:2c:4f:b1:fe:81:e3:60:92:99:46:35:96:f0:fc:f0:
         9c:36:5e:93:c8:d3:10:da:47:10:eb:f2:28:ae:47:87:9a:82:
         2b:f3:eb:49:b3:d1:c7:1a:3d:35:8d:19:a0:8d:50:64:a9:21:
         47:28:7a:e8:d5:e8:3e:6c:70:59:7e:c3:b3:7c:b6:8b:55:64:
         c5:9e:af:00:8f:c4:61:42:d3:0e:14:1b:de:1b:df:dc:cd:49:
         8b:17:bd:64:00:f0:f5:c9:1a:05:a0:e4:fb:e4:fb:7d:e1:c9:
         3e:ea:f4:97:ef:f5:e7:40:f6:14:4f:33:6e:d4:e2:f9:30:52:
         da:89:0f:0b:5b:01:00:b1:67:94:f9:0a:f7:6c:bf:6b:61:72:
         20:1c:7b:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG
RjFEQjY2NzUwHhcNMjUxMjA0MjMxOTMxWhcNMjUxMjExMjMxOTMxWjAYMRYwFAYD
VQQDEw02OTMyMTcwMy1hOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zeyMlRHxD+q9RySGYnM7xxVqogC4IwErwNPrsGD/xX+1woIwAm3mUA4BxJ2
AQz63BgjyRge00Bcno1kBJftj6hj4KsuPvOAzFwHo3b8JM72K5cx+CPgtDJdB3Hh
g+3qmM2nGd0uqYtvoRqmjN7yuU+yMvpJjTRMYziM/pHLO6rLw9ECCOVT8OV68OAc
6mums+4QnlKeHMJG4xZlCeFumUNBekzMtOuCZhBFkJoEJlcARNsd+pR0fqeaiKWq
MzdXUBESRlUxs96dr3+uxUkV0vzD0Rs6O/RMqzCSagba4SHz1MoUWoxRXkWNleih
EYAh3NoAinucY4K/5USDVkDmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuv44Cp
KEYNBf6MvRSvYIkwWBUWMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0
RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL
VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/bvXd0YInipdds44/xe6z8g2bxHSLyNCyo8FtWcX7COcpwdqdi6Dr
6kNMaDm6NGiLqz37IcRcj9nlxNrcFpfPCL83wyIVLlYnkH6CvNRyEU0PEKJdZ+RG
6p9QUn9DJS14LEQHvXHfaE6IO1XfZoEsT7H+geNgkplGNZbw/PCcNl6TyNMQ2kcQ
6/IorkeHmoIr8+tJs9HHGj01jRmgjVBkqSFHKHro1eg+bHBZfsOzfLaLVWTFnq8A
j8RhQtMOFBveG9/czUmLF71kAPD1yRoFoOT75Pt94ck+6vSX7/XnQPYUTzNu1OL5
MFLaiQ8LWwEAsWeU+Qr3bL9rYXIgHHtu
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:17 2025 by rpki-client