This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
File:                     CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json)
Hash identifier:          d41XrV6/OdJevRJdaHngl0DS38wb0qSDWWDF+cMDi5I=
Subject key identifier:   2B:E7:91:C6:F2:2C:1E:FE:25:B4:1D:9E:07:F4:48:A5:E7:A6:2A:F7
Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64
Certificate issuer:       /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
Manifest number:          0118
Signing time:             Fri 05 Dec 2025 02:54:28 +0000
Manifest this update:     Fri 05 Dec 2025 02:54:27 +0000
Manifest next update:     Fri 12 Dec 2025 02:54:27 +0000
Files and hashes:         1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: Fr+7QH6KqTlCRZ79N9aRoEDa6bPJLUsTyPtXj9ShXlc=)
                          2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564
        Validity
            Not Before: Dec  5 02:54:27 2025 GMT
            Not After : Dec 12 02:54:27 2025 GMT
        Subject: CN=69324964-9ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:22:78:84:2b:2d:91:8f:e9:06:43:75:b3:
                    ce:d8:f4:2f:1d:3c:e8:9c:a3:19:dc:55:1f:0e:85:
                    07:a7:76:6a:7d:04:f5:c2:27:e0:7a:eb:26:49:83:
                    75:26:ac:e3:81:4b:f3:04:3a:46:9a:dc:57:a2:0e:
                    7e:63:07:7c:7c:7f:10:8c:1b:3d:1d:f3:f3:49:a6:
                    f9:3a:65:53:81:40:c2:8d:52:31:33:57:dd:16:55:
                    60:7a:90:91:e1:29:72:8d:03:c8:dd:7b:80:fc:ba:
                    97:f4:46:0b:ca:09:a9:84:45:c0:3d:6d:dd:b1:ee:
                    14:9f:bf:73:71:7b:cb:f9:0a:22:d3:cf:c9:48:fb:
                    ab:90:f7:a5:54:0f:51:fb:24:50:b5:16:48:62:0b:
                    fb:34:94:21:7c:a2:ee:fa:2d:9d:d5:6e:34:ba:64:
                    9f:88:d8:14:7a:f0:63:d6:18:63:b0:38:ec:f8:86:
                    90:0b:9d:2f:30:8e:d2:6d:77:22:bb:8e:78:00:2f:
                    3b:03:ae:ad:82:68:e2:43:c9:e3:34:8f:b2:4e:55:
                    fd:56:3e:e9:c1:e5:ce:93:d8:ab:b0:e7:3c:53:58:
                    0e:66:1c:87:eb:27:4c:e5:cc:5f:e5:31:74:d9:07:
                    25:1b:b5:9f:55:4f:48:66:8c:80:49:51:9a:06:d4:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:91:C6:F2:2C:1E:FE:25:B4:1D:9E:07:F4:48:A5:E7:A6:2A:F7
            X509v3 Authority Key Identifier:
                keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b3:cb:06:a8:a9:bb:0e:28:fe:fd:b1:a0:ca:7c:2f:f6:fe:
         4b:8b:4d:14:80:79:bc:0f:7e:bb:74:0e:aa:62:cc:d0:b5:2c:
         d8:06:78:af:9e:27:77:ac:93:d7:9c:a2:21:5f:26:b0:65:e9:
         d5:a4:30:5d:f5:cb:7f:9e:2f:d5:e1:16:6d:09:0f:15:93:04:
         da:49:5d:52:fc:81:39:c0:85:85:b9:d6:bd:57:fe:17:35:6e:
         1f:26:ad:fb:67:8a:f2:79:dc:0b:9f:af:5e:d8:83:1d:5e:20:
         aa:60:f4:03:49:b1:83:f4:db:fb:87:85:e7:a0:b9:b0:3b:7a:
         b7:63:7c:a6:9e:8a:c4:68:60:2f:51:83:8b:60:6f:00:b0:e1:
         8b:1e:95:9f:8a:49:29:c5:7e:1f:59:39:0a:8f:0c:67:04:56:
         f0:d4:09:67:ea:1b:e8:5d:5d:4a:30:20:af:da:66:13:bf:cd:
         d8:36:4c:fa:a3:e8:b9:42:cc:38:71:a4:a2:8b:2f:ab:52:79:
         c1:8a:3f:45:b2:fd:88:29:84:1d:4a:bd:95:0a:14:b6:2e:da:
         94:50:fa:59:b9:fa:4e:60:90:92:3c:e1:02:65:e5:a8:14:e2:
         17:ce:dd:fe:25:ee:6a:0a:cf:e0:97:63:9b:5d:e4:64:b4:3b:
         2f:7d:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:13 2025 by rpki-client