This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
File:                     _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json)
Hash identifier:          yLSCzlGB4zRwgRn3Y4GINn9/FsxJ9t/mo0NfRjJlF0E=
Subject key identifier:   3A:EA:81:C5:99:C4:9B:22:FA:7D:16:3C:B9:38:A8:0B:3E:40:34:10
Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
Certificate issuer:       /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
Manifest number:          02F2
Signing time:             Thu 04 Dec 2025 23:37:25 +0000
Manifest this update:     Thu 04 Dec 2025 23:37:24 +0000
Manifest next update:     Thu 11 Dec 2025 23:37:24 +0000
Files and hashes:         1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: n3WxqJQeCURkztutvwNva5sIKj286K2dtSl6kBYrsw4=)
                          2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: ZYQF+B8J3kvs5xBRsxJyyeizflCtkKmYQojiW1ynZsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
                          rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
        Validity
            Not Before: Dec  4 23:37:24 2025 GMT
            Not After : Dec 11 23:37:24 2025 GMT
        Subject: CN=69321b35-dc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:59:d5:b9:04:a1:6c:44:59:52:53:8b:69:
                    66:1f:8e:40:27:ba:9b:16:1f:93:2e:3e:e5:7c:db:
                    20:07:34:32:3b:3a:b7:02:44:13:90:80:9e:18:22:
                    07:3b:28:37:41:8c:f8:13:34:67:b4:d3:54:e9:da:
                    17:b7:49:35:6c:7b:28:05:17:5e:a9:9c:a6:c3:27:
                    c8:f4:ae:05:5c:dd:00:61:2d:02:a6:bf:5b:a1:b6:
                    5c:7d:d2:2a:3d:59:ce:d1:4c:5b:c5:25:56:63:e3:
                    c5:86:d9:ff:d8:13:c6:9e:68:f3:95:66:48:8d:11:
                    93:0c:03:69:23:6f:16:37:d3:2b:b3:a4:ec:a9:0a:
                    ea:57:c1:91:63:88:25:3c:84:43:45:c2:a8:f4:24:
                    55:6f:24:0e:d4:e0:cb:5a:af:c1:2a:7c:6f:8f:aa:
                    82:a9:e1:7b:53:9f:1c:54:29:d2:7b:0c:07:ec:37:
                    31:49:99:73:4e:ac:d1:e0:94:e8:65:cc:6e:c2:5f:
                    2d:31:ac:6f:01:09:aa:95:28:28:41:3b:e1:eb:98:
                    d0:b8:5d:e6:bc:2a:be:87:e7:64:1c:77:1b:ca:6c:
                    c5:46:17:1c:1a:7b:79:b7:45:d7:33:e5:b0:b1:c0:
                    ef:28:e9:e8:dc:9e:5d:d0:e3:54:30:8b:f6:1b:25:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EA:81:C5:99:C4:9B:22:FA:7D:16:3C:B9:38:A8:0B:3E:40:34:10
            X509v3 Authority Key Identifier:
                keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:01:c4:0e:86:28:ba:5f:2c:dc:44:65:49:10:9b:60:0e:85:
         b4:ce:2a:62:a2:9d:bc:89:8c:ba:8d:7c:10:8e:1c:e9:5a:03:
         42:e6:f0:80:46:2d:8a:3a:5c:8a:cc:48:71:9c:18:2c:97:ed:
         61:73:59:8c:45:95:36:3b:8a:bc:c7:15:9e:71:8f:f6:5c:ff:
         b9:97:d9:21:53:f0:1a:0d:a7:2b:3c:96:78:35:bb:43:0d:51:
         69:11:97:b6:f3:9a:64:a2:c2:95:86:c9:69:49:d9:20:f5:8a:
         65:a2:fb:e4:7c:d2:cc:94:22:a4:80:91:cf:e6:4c:45:22:04:
         44:ed:5d:24:26:8b:e7:76:9d:7d:22:a3:0f:c9:13:0d:3e:77:
         01:84:a4:35:d3:ae:d2:43:dd:5c:df:43:70:80:6e:ae:63:42:
         0f:02:17:ba:50:23:34:55:14:7d:d5:7e:c4:2c:81:b5:b5:60:
         6a:a5:94:6f:bd:8e:ea:3a:cd:3d:f6:d2:a9:a0:f2:5f:97:37:
         f8:f2:b1:cd:74:c9:48:a8:89:30:46:89:47:ac:36:8e:d9:f2:
         fb:a9:65:6e:0e:d3:34:ae:d0:94:98:8c:b0:c4:5a:e1:d8:01:
         96:8c:95:af:e8:41:fa:d1:84:31:7a:63:40:ea:17:f5:53:d3:
         77:31:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:49 2025 by rpki-client