This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File:                     EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier:          SRyx8esZihjm1Yr9KKsw49WphHMudAoSh67OPEQezeg=
Subject key identifier:   64:3C:A7:BE:51:C5:6F:17:2B:21:2B:4E:09:1A:84:18:DF:37:6D:08
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number:          011D
Signing time:             Fri 05 Dec 2025 02:54:19 +0000
Manifest this update:     Fri 05 Dec 2025 02:54:19 +0000
Manifest next update:     Fri 12 Dec 2025 02:54:19 +0000
Files and hashes:         1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: Szgxoxsy7muUMxadTsdmB3BSuH6tcSjXkBPWUJHEQvc=)
                          2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: rykf5EiwJxMbaGGZx16BKp2POKraZb9uuOUjLdA5j+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Dec  5 02:54:19 2025 GMT
            Not After : Dec 12 02:54:19 2025 GMT
        Subject: CN=6932495b-d9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:ee:d7:91:0b:29:da:ab:b3:db:d2:76:fc:
                    07:f4:21:33:18:a9:e5:1c:d6:a0:0a:cf:00:de:a7:
                    19:5b:76:6a:f7:02:2b:79:40:9b:c2:ce:b1:a0:2f:
                    9a:e1:22:c2:68:e6:43:f2:44:36:e3:0a:7b:75:06:
                    94:56:dd:d0:09:bb:ed:61:57:be:e7:ad:0b:5b:27:
                    16:73:93:da:92:20:f7:ad:ea:56:64:28:04:61:d8:
                    ef:d7:d3:fb:2a:40:e5:05:6a:ee:8b:02:e6:2a:38:
                    2e:69:86:3e:fc:98:06:b0:8a:9d:a3:83:76:14:0e:
                    3e:0b:84:59:8e:18:13:d5:0f:8a:d1:cc:08:07:93:
                    90:59:92:6b:8d:2a:e1:b9:71:16:5b:0c:24:6b:2c:
                    b7:1d:04:0e:16:3d:ff:86:39:9c:08:27:f5:d2:a6:
                    ea:f0:5c:06:88:e0:cc:ec:2a:ad:3f:85:e6:e0:55:
                    ec:a5:5e:43:3e:49:60:0a:ec:a6:d6:3b:da:7c:3f:
                    8a:14:69:f5:c7:3f:f8:e4:47:3e:ea:be:09:55:10:
                    9b:f1:69:8f:0f:17:f9:ac:24:25:c7:b8:a0:74:91:
                    7e:4b:70:7e:71:ce:b9:dc:b5:9a:c8:03:cb:0a:a0:
                    70:ed:5c:17:8e:07:1e:bc:90:08:73:97:0b:52:11:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3C:A7:BE:51:C5:6F:17:2B:21:2B:4E:09:1A:84:18:DF:37:6D:08
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bc:42:3f:e7:e8:9e:84:55:fa:32:64:3d:90:69:42:81:da:
         6e:63:83:cb:2e:4b:7a:02:f7:4f:93:83:50:e1:27:8b:0d:0b:
         f8:a0:db:21:1b:ef:f2:2f:ec:03:6f:c1:16:e3:6f:2b:d4:20:
         3a:78:fb:d3:69:b2:b4:5b:6e:57:23:3d:0e:4a:22:88:4c:3c:
         c2:1a:91:92:45:87:32:18:5a:64:de:30:6d:df:81:7c:11:75:
         8a:aa:ba:0a:9d:c8:e0:63:56:05:f2:1c:ed:be:5e:0c:37:a0:
         9b:9e:ed:6b:50:3e:ab:ab:5e:67:e4:b2:25:2e:9b:93:92:2b:
         c8:45:3d:34:49:24:12:aa:8b:1d:6a:14:ba:bd:eb:f5:5f:5b:
         2d:8e:bc:e5:48:f2:78:fc:78:5e:21:4b:75:6c:30:15:4e:bf:
         76:01:2f:7e:12:3d:eb:eb:0b:be:09:da:7c:d1:54:50:f1:d2:
         4a:04:68:a8:ad:d0:0b:a6:66:aa:b6:ea:ea:9e:1e:0f:09:ae:
         e0:96:a8:bc:73:d3:78:8f:92:08:b9:22:2e:77:13:ba:b1:d2:
         4c:c0:05:41:da:5d:b2:1b:85:e2:2b:b1:5b:cf:1f:6d:2d:fd:
         a7:a0:f9:c0:0b:de:9a:b7:d6:65:88:9d:00:d1:26:69:cf:e3:
         58:d9:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:11:49 2025 by rpki-client