This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File:                     x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier:          SJKvFKu0RytRu+tKWlwQ5mFhlzhWIegLrezCGb595J0=
Subject key identifier:   E6:9D:6F:77:CE:5C:78:CE:67:28:27:A9:EF:20:5A:AF:92:0F:6C:ED
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       03A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number:          038A
Signing time:             Thu 04 Dec 2025 23:16:28 +0000
Manifest this update:     Thu 04 Dec 2025 23:16:27 +0000
Manifest next update:     Thu 11 Dec 2025 23:16:27 +0000
Files and hashes:         1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: X664hjG0YTOCeu0V6IMCRVNpyMHEoLMhI27g0PP8mPI=)
                          2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=)
                          3: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=)
                          4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=)
                          5: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=)
                          6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=)
                          7: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Dec  4 23:16:27 2025 GMT
            Not After : Dec 11 23:16:27 2025 GMT
        Subject: CN=6932164b-64f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:fc:8b:b2:b9:c7:a5:af:22:2d:f6:5a:43:
                    e4:e2:8a:5b:92:b1:cb:12:9b:f2:86:af:bf:4b:20:
                    14:f1:65:37:6b:25:93:e7:94:57:29:88:c6:cb:e6:
                    76:41:ef:d2:97:bd:8f:fe:ce:08:d3:d6:25:b5:aa:
                    74:fc:7c:f4:7a:c6:27:52:a8:ff:02:5e:52:c2:cd:
                    eb:f4:14:3e:1f:e0:7d:c7:74:36:ff:d7:b2:cd:ec:
                    32:bf:46:18:a2:6d:10:17:c2:a6:f0:c0:0e:f6:7e:
                    07:7e:1c:85:d7:b7:a3:41:47:25:90:de:c8:82:9d:
                    69:3d:04:cc:a9:9e:53:6c:be:fd:73:62:3e:47:a9:
                    5e:dc:d8:bc:b1:ce:05:a9:97:6d:3e:2b:88:1c:39:
                    cc:00:9a:d4:65:5c:df:5c:5b:fb:cb:e6:bb:04:f4:
                    f7:d8:d2:86:2a:0c:9e:ce:4b:52:95:7a:24:fa:7d:
                    fc:65:08:05:71:02:33:3e:eb:4e:ac:ba:9d:97:3c:
                    1f:1e:e1:34:92:9f:0d:91:87:51:ba:95:5d:22:c1:
                    77:35:ae:6b:2b:ac:5e:14:58:39:19:34:10:00:9b:
                    b1:52:09:24:0a:8b:01:cf:e8:33:61:5d:a4:e1:ee:
                    8e:15:09:8f:1e:44:db:3e:a2:c6:99:d5:02:1b:70:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9D:6F:77:CE:5C:78:CE:67:28:27:A9:EF:20:5A:AF:92:0F:6C:ED
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:05:5d:74:d5:80:a5:75:07:12:ae:d4:ad:f1:b3:58:1f:
         61:6d:c8:c7:99:cd:48:5f:12:b9:1a:57:34:40:9a:a1:a2:51:
         46:60:15:62:fb:96:12:ce:41:9e:0d:c7:69:2a:0d:78:04:3e:
         48:f5:16:8b:50:82:42:17:57:64:d1:0a:2a:67:be:89:3f:63:
         76:c8:4d:d2:42:b6:bb:f8:fd:65:8c:d5:13:03:67:d0:28:0d:
         48:35:cb:f4:2e:4e:23:93:e0:af:d8:83:3a:8f:c7:da:8e:01:
         19:ea:6d:c4:d5:29:54:ef:cf:c8:13:3d:4e:59:0f:0c:35:a7:
         b4:89:ec:a0:5c:3a:eb:33:f4:2e:18:d0:7e:2a:e3:aa:76:2d:
         6d:59:a3:2d:a8:8f:0f:f0:fb:57:5b:66:c5:cf:62:94:be:a0:
         20:8e:1f:a0:ca:6e:10:14:99:4a:8b:cb:4c:56:7a:9b:89:b3:
         b8:f4:66:19:1c:85:a9:f4:33:ac:22:5f:18:6a:2e:bb:b2:2d:
         06:bc:9e:70:48:ad:1c:20:31:05:2c:fa:6c:01:62:fd:53:78:
         26:1f:a1:6d:3d:a8:a4:f5:e7:df:b7:b1:75:c0:45:d0:c3:a3:
         10:60:4b:b7:ad:75:c7:05:13:c4:a5:52:09:f8:49:55:c3:4d:
         18:33:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:19 2025 by rpki-client