This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File:                     MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier:          jupFPmALVH5pS83mhwnw6/B6+C3aWhg+NnYtC6Q4T/o=
Subject key identifier:   FD:7A:9D:13:B7:7A:C8:49:39:83:38:0B:80:4E:68:14:F9:BA:70:38
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer:       /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial:       1E1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number:          1DFA
Signing time:             Thu 04 Dec 2025 15:51:50 +0000
Manifest this update:     Thu 04 Dec 2025 15:51:49 +0000
Manifest next update:     Thu 11 Dec 2025 15:51:49 +0000
Files and hashes:         1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: fjo1jqC4x7Z2aRZHaUaP1TR5x9e1sfGBjkrLG8NlE9Y=)
                          2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: b0wxpwf8/vaYEOZtGJIbQgPEprx6ejeXyxzSbeJ8WVc=)
                          3: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=)
                          4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7711 (0x1e1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
        Validity
            Not Before: Dec  4 15:51:49 2025 GMT
            Not After : Dec 11 15:51:49 2025 GMT
        Subject: CN=6931ae15-37d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:86:55:48:a6:a7:74:6c:06:8c:3a:df:20:
                    ed:ef:d0:c7:32:30:6d:5f:87:74:33:28:3e:7d:f5:
                    71:85:b8:6b:6a:e2:98:d8:dd:fa:8e:70:16:3c:60:
                    67:c9:03:95:e2:e9:fa:5d:e4:20:66:da:30:1f:25:
                    4e:6c:15:8a:b4:25:7c:13:70:d6:9f:97:f2:25:02:
                    39:3e:58:2d:61:23:a3:c0:60:77:ae:28:99:ab:76:
                    46:db:98:c3:67:da:84:9b:cb:a3:a7:ce:80:cd:1c:
                    83:56:a7:b2:54:86:84:46:81:65:1d:fb:ad:56:1d:
                    9a:0d:76:c3:69:cf:82:c4:78:c5:a2:36:de:a2:5a:
                    8e:ad:d0:27:8b:4d:92:61:64:2d:d1:3e:21:8e:43:
                    1d:d7:66:de:9e:da:ef:84:2c:99:1e:cc:e6:0a:59:
                    7c:e3:39:0f:4c:ec:cf:6b:c8:cd:27:fa:fc:f2:bc:
                    ef:1a:44:d5:6a:c5:59:9c:7d:9b:20:83:82:81:ba:
                    10:6b:d2:44:08:fb:73:2e:de:0d:2f:49:3b:09:04:
                    c6:bd:06:9b:d4:ac:f1:5d:0c:97:84:74:aa:e2:1f:
                    9b:8a:03:47:fe:86:8f:a4:d1:df:23:a1:66:79:b2:
                    f3:6b:ab:76:e4:c2:08:a9:f3:d0:8a:c5:73:22:c3:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7A:9D:13:B7:7A:C8:49:39:83:38:0B:80:4E:68:14:F9:BA:70:38
            X509v3 Authority Key Identifier:
                keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:19:0e:b8:2e:f4:4c:7f:cd:91:89:39:8a:df:3d:cb:cb:
         7d:8c:bc:36:d3:82:ce:f5:6c:51:ce:79:88:4a:67:52:56:eb:
         d4:62:14:3e:9f:66:b5:d2:2c:bb:8a:c8:d1:81:45:fe:fa:a8:
         86:14:8d:e9:39:dc:23:42:f6:d8:c4:6b:df:dc:c2:3b:7e:88:
         a7:49:da:bc:e6:94:31:0f:6c:a2:ff:a2:b6:40:6e:f6:c3:bd:
         74:61:39:2c:44:08:05:e4:1a:81:09:95:17:e0:a0:0b:6f:db:
         99:d4:2b:b2:02:6f:0a:a8:0a:4e:c2:e3:2d:00:fb:cb:81:bc:
         4d:70:c1:a4:38:85:d2:ff:22:b0:fe:dd:56:54:bf:9d:15:bc:
         f1:17:d1:61:6f:66:30:8d:65:a8:51:5b:aa:b6:10:c7:14:ff:
         41:1f:61:d2:fe:12:43:4e:8b:85:53:ad:24:2c:88:d6:e6:e7:
         e8:dd:41:96:db:a7:38:1a:a0:63:31:c8:70:58:59:e3:f4:d1:
         d3:5c:e3:7d:27:1d:96:29:19:5a:d3:71:83:c4:55:6f:0b:4c:
         99:46:2e:6e:d3:75:71:38:db:40:6d:b3:16:99:06:b5:f3:1f:
         60:07:11:01:8f:6d:5b:08:a5:5b:5e:95:66:10:77:32:76:fb:
         6e:9f:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:18 2025 by rpki-client