This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
File:                     SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json)
Hash identifier:          14FR5Qf6r/lpn8VK2Ng5dUCxXM5afiO4Bc6dvdWmssw=
Subject key identifier:   0D:6E:F3:09:00:53:29:91:0D:6E:3E:E6:20:B0:FF:70:8A:B4:44:B3
Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52
Certificate issuer:       /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
Certificate serial:       0641
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
Manifest number:          0635
Signing time:             Sat 06 Dec 2025 21:37:43 +0000
Manifest this update:     Sat 06 Dec 2025 21:37:43 +0000
Manifest next update:     Sat 13 Dec 2025 21:37:43 +0000
Files and hashes:         1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: 0TH00sCIzrcpPLO7kt6dM6PxXU2iionQ1t0E329MLOA=)
                          2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl
                          rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601 (0x641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
        Validity
            Not Before: Dec  6 21:37:43 2025 GMT
            Not After : Dec 13 21:37:43 2025 GMT
        Subject: CN=6934a227-1774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:da:46:49:06:06:f4:df:14:44:fe:73:06:
                    0b:5c:c4:e7:cd:f0:e7:ae:28:2d:4a:49:09:ea:3b:
                    ad:ce:06:85:7e:e7:35:da:c8:17:cc:78:3d:5c:07:
                    14:04:d1:cb:5f:7c:a6:e0:48:46:c5:ed:1e:b1:67:
                    30:25:a7:00:3c:3e:79:3a:c5:60:3d:a4:ff:ac:ba:
                    33:d6:7b:2d:ea:27:a0:b8:86:2e:5f:a4:70:f7:d1:
                    12:fd:00:46:10:24:1b:71:f4:95:7a:7f:42:4a:17:
                    94:ac:93:01:0b:40:1b:0f:0e:fa:cf:ad:b8:b7:14:
                    7a:35:4f:8c:ef:bb:66:fe:de:a5:50:73:7a:3d:0e:
                    07:c9:d2:c1:be:00:85:96:5e:52:88:57:37:07:ea:
                    e2:07:3e:0f:52:a9:f6:17:90:fd:a3:4f:d3:6d:c0:
                    31:79:7f:c6:a5:fa:86:b4:0b:1f:eb:0a:78:d0:b3:
                    ab:c2:a2:2b:82:db:27:11:e6:03:fd:74:e4:71:67:
                    53:b3:4a:58:69:5e:89:35:fa:46:4b:e5:84:ea:0f:
                    32:6d:27:82:c9:ea:43:9c:bd:da:32:c1:31:de:b6:
                    77:df:35:bb:75:0a:28:41:75:1f:24:95:e6:fd:20:
                    26:c8:44:82:97:40:c2:e5:49:dc:1a:bd:a9:1c:6b:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:F3:09:00:53:29:91:0D:6E:3E:E6:20:B0:FF:70:8A:B4:44:B3
            X509v3 Authority Key Identifier:
                keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:11:f0:dc:4c:fd:6c:33:91:23:c8:53:3d:82:73:3c:98:
         95:c6:89:6a:eb:cc:76:2a:ec:4f:b8:56:21:25:9a:22:e9:1a:
         8e:b6:01:12:4b:49:e9:b9:02:72:91:a1:30:26:ba:05:5c:aa:
         9e:7b:19:25:3d:13:5d:40:ab:0f:05:c7:93:c1:46:5f:45:af:
         64:39:48:c7:c0:4a:59:ea:13:fd:5b:10:40:27:b4:df:26:7e:
         a9:f7:7f:de:3a:cb:9f:6f:2d:0c:4f:c7:86:1a:fa:12:c1:fa:
         5c:ef:09:f5:34:bc:57:04:b4:93:3e:44:19:6c:18:e7:ca:0b:
         52:3b:ff:34:59:1d:ed:d3:ec:4c:3b:60:a9:b5:e5:ef:8c:8f:
         6f:59:1a:ff:8a:bb:24:73:c6:47:aa:51:51:0e:8c:bf:a8:fc:
         28:af:b1:d3:c2:58:83:8e:d5:38:40:a4:98:2c:50:67:ca:5e:
         7c:84:95:06:70:54:20:da:55:87:66:07:57:53:85:29:bb:ec:
         81:52:bd:b2:03:7b:aa:93:17:6c:c7:d8:e6:8a:fe:6b:4e:61:
         fc:c5:17:55:79:03:8c:77:d4:2e:ae:03:6a:58:7d:dd:94:0d:
         16:ae:b5:c2:02:67:a9:06:f1:1f:58:32:55:d4:45:92:ba:75:
         fa:ba:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:48 2025 by rpki-client