This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File:                     asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier:          dUw5AuEn7myf7RwR1AiisaXROo4feiVbdpAeeiE+50A=
Subject key identifier:   9B:42:57:FB:E8:3B:83:B4:B6:39:79:29:33:A6:FD:54:2F:C1:3E:08
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer:       /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial:       10B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number:          10AC
Signing time:             Sat 06 Dec 2025 16:49:56 +0000
Manifest this update:     Sat 06 Dec 2025 16:49:55 +0000
Manifest next update:     Sat 13 Dec 2025 16:49:55 +0000
Files and hashes:         1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: tyML51CJsezWA1241bc/NI/h3lXtNubBZdALkMtQlYM=)
                          2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4276 (0x10b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
        Validity
            Not Before: Dec  6 16:49:55 2025 GMT
            Not After : Dec 13 16:49:55 2025 GMT
        Subject: CN=69345eb4-8704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:be:a6:65:53:fb:dd:7e:c8:a6:9e:16:06:30:
                    0f:d0:c4:c9:ca:d1:e5:16:d0:c8:2d:af:4a:b7:24:
                    fc:1c:52:b8:be:ed:c0:7b:95:e9:13:f0:e6:ae:9e:
                    a9:d5:af:67:2a:56:71:c3:d0:86:f6:9b:78:a3:36:
                    d4:e3:ce:40:3f:45:d5:5e:f0:6c:27:03:9e:53:54:
                    2c:06:5c:4d:a6:29:76:a8:5c:75:cf:56:c4:5f:24:
                    24:b3:e1:24:1d:b4:06:d2:37:e5:5c:24:19:3a:af:
                    44:be:1d:6d:2e:9f:7e:be:7d:6f:a2:a6:e9:e5:66:
                    91:e2:b7:ca:b5:01:e1:99:cc:1d:c4:55:17:71:89:
                    5b:c0:11:4e:38:37:39:8d:d9:5e:b0:13:2a:d9:bc:
                    26:b8:77:95:a8:a9:dc:35:f3:cd:5e:6e:5d:69:db:
                    c0:72:7d:d8:e4:27:a5:ab:20:ea:85:7f:4f:6f:06:
                    b0:3f:33:92:f4:fe:19:3e:5e:3d:92:0a:6b:56:4f:
                    c8:e0:13:00:3b:c1:60:5a:0b:6c:9e:50:34:73:7b:
                    bc:d5:e3:8b:ce:ed:46:9f:3e:55:6a:af:e1:f4:44:
                    fd:01:a0:7a:14:9b:c5:d8:77:60:87:6c:12:be:94:
                    bb:dc:99:fa:da:bd:c2:de:f4:c5:42:79:af:d8:7b:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:42:57:FB:E8:3B:83:B4:B6:39:79:29:33:A6:FD:54:2F:C1:3E:08
            X509v3 Authority Key Identifier:
                keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:4e:ad:d2:71:9d:2e:88:4b:17:b9:56:fa:37:cc:63:4b:
         f2:96:cd:26:19:99:54:b2:7d:1e:f5:45:63:87:c7:d1:5a:d0:
         2c:42:7b:49:2e:92:5c:ca:05:5c:03:f6:d3:5b:6b:d7:4d:60:
         cd:0b:10:6f:60:87:50:20:80:74:53:60:c1:7f:55:a9:9f:2f:
         c3:7a:50:f8:05:af:5d:60:e5:4f:26:07:bd:65:06:9f:5b:32:
         2b:08:8b:3a:f4:0b:5e:63:ea:41:dd:e5:62:ce:12:01:c6:5a:
         2d:0e:ed:67:64:cc:eb:5c:da:7b:06:f7:43:66:39:b6:bd:4e:
         49:3f:47:35:e2:58:d7:04:30:cd:ec:b9:5b:88:c3:12:24:89:
         a6:9b:19:0e:a9:35:2d:ce:94:97:20:12:4b:e2:1b:00:76:b8:
         b2:c5:f7:11:df:43:72:fc:79:68:54:7e:09:08:4a:4e:1d:d9:
         98:7c:50:a2:07:25:2c:01:d4:bb:0f:33:e3:d6:65:5f:f1:07:
         ef:dc:72:57:58:38:13:67:0f:1c:a0:78:33:27:4f:78:b8:06:
         83:f7:fb:44:d1:70:d8:5f:b9:5a:9f:6a:e9:9a:21:5e:20:56:
         c8:14:ea:f8:f9:96:e8:bf:96:69:4b:8c:0a:5b:d3:00:7a:7c:
         ea:9d:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:17 2025 by rpki-client