This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
File:                     F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json)
Hash identifier:          2XZ5+wIJuBw3+QClwUmrfG2r8AIbg4YAzE+RDYFBQy8=
Subject key identifier:   43:E7:18:2E:50:30:0C:4C:FE:E4:D2:01:BE:02:8F:4B:67:3A:30:87
Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
Certificate issuer:       /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Certificate serial:       0446
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
Manifest number:          0442
Signing time:             Thu 04 Dec 2025 22:43:32 +0000
Manifest this update:     Thu 04 Dec 2025 22:43:31 +0000
Manifest next update:     Thu 11 Dec 2025 22:43:31 +0000
Files and hashes:         1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: AMM8J8cfZkT8nnPRQXO/q9AQisem8u5qseGrLnVMUKM=)
                          2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: wgDb1KnVQWBoZ1T5BXpX71TMMnESBtSdKYU93dImmgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl
                          rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
        Validity
            Not Before: Dec  4 22:43:31 2025 GMT
            Not After : Dec 11 22:43:31 2025 GMT
        Subject: CN=69320e93-7844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:b6:b1:e3:2a:18:c4:ff:70:f6:49:5e:3b:
                    17:03:3d:ff:60:fd:81:b6:f8:88:9c:ed:75:16:86:
                    c6:a8:d6:4c:5f:2f:1a:bd:9a:13:8e:fd:1f:f2:1c:
                    7b:5e:79:a3:13:13:3a:d3:64:a7:44:48:94:e0:0d:
                    2b:a3:92:05:47:3e:1c:8f:96:d0:86:14:b8:2f:52:
                    34:22:52:33:3a:12:05:c3:b4:97:50:e6:b6:3f:9d:
                    3c:5c:d9:62:69:0d:51:a6:4d:1e:61:f9:3c:89:cf:
                    c9:07:4a:88:c6:65:4d:d8:63:7a:62:20:cc:b2:f8:
                    31:e5:93:93:2b:d6:9e:fc:bc:a0:eb:27:2c:a2:04:
                    10:8b:53:68:ca:0e:0d:96:32:67:b5:91:df:b0:da:
                    7f:c9:11:10:f6:01:84:ec:f0:ec:53:e5:af:1e:26:
                    b6:52:18:1d:6f:bb:0f:8c:56:71:46:5a:7c:a0:7d:
                    f8:6b:79:cd:d4:0b:c8:d7:33:3d:a8:04:08:74:7b:
                    2d:0a:57:6f:13:6d:de:0b:3a:a1:18:d4:f5:b3:cc:
                    88:10:44:c4:f0:62:f4:66:2d:c6:00:fc:0a:dc:d0:
                    c3:78:56:7d:8c:55:f2:0e:13:e8:65:12:f9:2e:2d:
                    33:f5:6d:3d:14:10:18:0d:7c:7c:e7:e3:7a:6d:2c:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:18:2E:50:30:0C:4C:FE:E4:D2:01:BE:02:8F:4B:67:3A:30:87
            X509v3 Authority Key Identifier:
                keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:54:de:61:32:ad:19:b7:49:0a:57:c3:6e:e5:fa:cc:98:
         22:a4:38:0c:db:dc:56:52:bf:d8:38:69:cb:97:63:fc:7c:4c:
         bf:5d:aa:16:1b:a5:49:5b:16:af:b4:04:e1:55:a5:94:f7:a8:
         33:6b:52:de:08:60:55:ea:46:5f:70:c9:c9:69:97:94:99:98:
         7b:63:e9:de:ca:53:c0:56:34:cc:8d:ac:e2:0c:29:fe:ab:b2:
         e8:30:80:9a:fe:15:29:87:93:fe:24:26:5f:6c:84:b2:6c:6a:
         22:64:a0:37:1c:84:02:04:98:27:b2:43:7e:ed:a2:35:08:f4:
         da:1a:3a:16:ad:ed:3b:7c:36:96:03:5a:d7:e9:88:be:82:d0:
         2a:bb:84:ce:29:96:2b:8b:80:e0:54:23:d1:e0:15:e4:56:8e:
         e4:dc:ba:41:a7:c1:c8:d3:d0:26:8c:9e:04:16:9c:6a:63:40:
         32:09:4a:62:26:9b:db:17:fe:8e:12:52:94:57:d8:56:08:c2:
         21:7e:f3:59:da:ee:3e:e0:01:91:dd:cf:33:17:f3:d4:58:bd:
         8d:4d:72:8d:85:80:e9:e6:da:b8:aa:67:58:f7:aa:81:91:65:
         82:71:0a:f1:6b:fc:c2:67:55:75:3a:d0:d5:a6:6b:67:6a:0c:
         bf:29:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:45:37 2025 by rpki-client