This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File:                     u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier:          hj8rBxZgIcw5KdUmMBurfWUB04cwwTbUsVUjov0KSpU=
Subject key identifier:   00:20:BD:32:E9:CE:93:B6:2B:9C:93:2D:DB:14:0B:87:24:AF:24:49
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer:       /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number:          0827
Signing time:             Thu 04 Dec 2025 19:58:15 +0000
Manifest this update:     Thu 04 Dec 2025 19:58:14 +0000
Manifest next update:     Thu 11 Dec 2025 19:58:14 +0000
Files and hashes:         1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: orRbQbkmppQ7bpbbpok1VhEb1dFbvh/+L5yLTnMtei8=)
                          2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: E1N7tCSXkYyikP/pVQaGRW+aRkcNsE4Fu7zEh2kYF1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
        Validity
            Not Before: Dec  4 19:58:14 2025 GMT
            Not After : Dec 11 19:58:14 2025 GMT
        Subject: CN=6931e7d6-d11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:ff:b7:fe:b1:68:4b:34:3f:f5:74:d7:1c:
                    88:bd:cd:bb:1f:09:5e:6c:79:15:be:e1:ae:4d:00:
                    17:38:2e:86:8a:dc:ce:95:8e:df:fa:06:65:97:c5:
                    0f:28:37:87:12:ca:25:94:07:c6:e6:d8:ff:ad:af:
                    c4:f7:44:1c:a9:67:74:da:e6:25:b8:32:36:ef:97:
                    df:99:b2:6f:c4:99:ff:df:33:c3:62:bc:99:62:7b:
                    b8:79:bc:dc:26:99:63:81:e9:5b:ee:cc:0c:94:0b:
                    0d:ef:be:6a:7f:02:9f:04:f3:b0:b4:42:0d:37:e9:
                    49:87:6a:8c:a6:78:c9:a2:8f:81:fd:9f:ea:8a:11:
                    58:a5:b3:0b:b7:87:71:e4:6e:80:b2:0c:08:ac:4a:
                    01:97:aa:ec:87:aa:ae:85:3f:dc:7f:b2:2f:10:44:
                    52:07:e2:0e:ed:7f:cd:14:80:af:c0:12:6f:b5:fd:
                    6a:e9:1c:24:15:d9:f9:39:98:ef:bd:5e:46:14:2d:
                    a9:38:23:dc:d0:df:35:1e:35:f9:69:d3:fd:41:b4:
                    75:ce:2d:80:43:6d:1b:16:5f:ce:7d:c3:0d:db:87:
                    e5:06:8b:0f:7d:96:38:05:db:90:23:0f:9e:57:ff:
                    5f:1e:5f:ea:88:a3:2d:05:5d:a8:79:ee:18:97:73:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:BD:32:E9:CE:93:B6:2B:9C:93:2D:DB:14:0B:87:24:AF:24:49
            X509v3 Authority Key Identifier:
                keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:64:a7:c6:83:8e:a4:c3:c1:00:8c:03:fb:06:5f:ee:f0:b3:
         8e:e1:44:47:4a:1d:a3:8c:c5:a2:2e:49:87:78:e1:a6:b3:ff:
         c6:f8:81:61:ca:ba:e1:5f:c9:98:6d:5d:5f:b0:98:e8:7b:f7:
         1d:e8:fe:c1:04:cd:60:86:bc:21:a4:26:2e:e6:67:7e:b2:c6:
         12:ad:98:bc:76:c0:a7:6e:65:f7:58:57:f1:a5:6a:9a:97:23:
         24:6b:b7:ad:65:84:79:e2:36:f1:8f:91:af:d2:04:fa:3c:1f:
         16:e7:c0:35:4b:24:95:ae:f6:b0:af:a7:1e:71:ac:ae:16:05:
         23:64:40:99:d7:77:aa:ad:d1:9f:98:71:c1:18:02:ee:85:13:
         3f:58:c6:cc:da:8c:1f:22:17:45:76:ee:07:30:1a:3f:f5:a7:
         c2:30:8f:08:dc:66:ea:05:4d:ee:f9:60:4b:85:44:c0:b6:d6:
         ce:3a:cb:30:c7:34:a1:86:19:69:f7:97:6d:78:db:1a:d0:fb:
         30:23:87:df:14:1f:01:24:82:a4:77:cd:cf:7d:34:dd:e7:a8:
         4f:3f:a1:90:fa:4d:49:23:94:08:51:b4:11:14:d2:75:79:88:
         6c:d6:cd:50:56:ca:5a:04:c4:cf:e7:a6:7e:2e:21:01:d0:01:
         35:68:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:52 2025 by rpki-client