This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
File:                     a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json)
Hash identifier:          7LvjZYrh8QcEpgnMbBYfouSy7LE1sZoYm8JX3MyvzjY=
Subject key identifier:   D0:74:04:54:D2:A3:43:FD:AB:CB:B8:23:93:B7:67:5B:24:14:37:82
Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F
Certificate issuer:       /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
Certificate serial:       081C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
Manifest number:          0817
Signing time:             Thu 04 Dec 2025 19:59:01 +0000
Manifest this update:     Thu 04 Dec 2025 19:59:01 +0000
Manifest next update:     Thu 11 Dec 2025 19:59:01 +0000
Files and hashes:         1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: HRHTUcpz3HevMWD4yD+E1XdjcMOFV2SM1RbFq0lZs7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
        Validity
            Not Before: Dec  4 19:59:01 2025 GMT
            Not After : Dec 11 19:59:01 2025 GMT
        Subject: CN=6931e805-a97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:ea:f9:bc:18:76:ec:f5:65:c7:eb:1f:69:
                    3b:01:9a:14:ad:cc:a3:46:51:fd:11:1c:bd:89:19:
                    a3:37:be:79:98:0e:e7:aa:37:41:8f:08:57:5b:28:
                    98:f8:92:87:04:45:06:8a:54:55:b8:31:a4:7f:dd:
                    d6:4b:a2:3b:60:66:cd:52:ba:63:a4:4b:78:8b:b5:
                    b7:b1:9a:e5:7e:c7:4e:43:65:d5:3a:ce:3f:5a:da:
                    45:e9:58:13:2b:6d:99:d7:a4:87:5f:4e:78:79:51:
                    65:96:82:3d:6e:cc:33:07:f3:21:d2:b9:c3:42:b1:
                    9b:f4:82:64:08:7c:86:eb:5e:18:49:60:d4:2e:cb:
                    b9:b1:d9:7d:63:cd:e4:68:28:70:03:65:06:46:8f:
                    82:51:ff:36:57:c3:d9:69:c6:92:22:fc:d6:ae:98:
                    90:15:45:2c:e3:b5:cd:02:b9:5a:b2:a1:d3:66:59:
                    be:3c:9a:e5:95:1e:88:80:11:ef:43:a3:e2:fb:87:
                    bd:f7:ec:d4:30:1e:7e:6b:46:21:c2:0f:23:3c:2f:
                    91:4f:a8:0c:36:d3:24:54:5b:ba:63:32:00:cd:ff:
                    b3:7d:63:b3:9f:4a:13:d6:25:c3:25:27:47:67:cb:
                    ec:66:5d:d0:b2:25:93:8e:53:f2:e7:30:3d:88:3f:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:04:54:D2:A3:43:FD:AB:CB:B8:23:93:B7:67:5B:24:14:37:82
            X509v3 Authority Key Identifier:
                keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:fb:91:4c:07:21:d3:10:d0:44:29:4e:fd:6e:3b:cb:7d:
         db:95:ac:45:de:ac:41:2c:4a:55:ae:dd:2c:ed:3d:c1:99:d8:
         5d:d6:1d:47:eb:68:47:17:48:fa:54:05:74:5d:1e:4b:62:6d:
         56:cf:e0:4f:d0:ee:f8:7e:aa:2a:07:17:88:6d:7a:3d:91:b7:
         33:d0:9d:d9:08:c7:da:c3:28:1c:6a:3d:ed:34:d0:01:c6:ce:
         fc:a1:c5:da:b2:dd:66:06:24:a8:19:3e:ac:b3:b5:2b:ba:e5:
         87:9d:51:4b:ae:8c:07:be:69:dd:c0:ab:c1:12:b8:ba:bf:df:
         8b:09:6d:5f:af:76:8e:af:99:7d:08:7f:2f:a3:1a:05:fa:dd:
         6f:66:08:71:c1:14:8c:e1:5a:54:8d:f2:1d:66:00:e3:7c:be:
         d3:9a:f4:f3:cb:c0:f2:a4:67:7c:25:33:9d:d6:f2:6f:89:01:
         a0:20:50:a4:4c:fc:db:5d:3c:c7:2e:7a:ff:2c:e7:a2:f9:af:
         a0:e0:41:ce:82:d9:9a:4a:71:35:3a:d6:31:22:12:26:dd:0d:
         30:5e:d3:2f:1c:96:a3:5e:8f:03:ac:67:33:7c:80:e0:6b:a0:
         d1:4e:50:d3:17:f6:58:1a:8a:91:73:4e:e2:33:cd:a6:f0:83:
         e6:1f:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:20:49 2025 by rpki-client