This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File:                     8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier:          eq0dJrK8neQUl1uHsdHGnC3asgmk72HNIrwCiPfNHtE=
Subject key identifier:   4F:24:C0:54:98:CC:3A:3A:A6:8F:FB:B6:FC:F5:20:C8:4E:3A:8D:92
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer:       /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial:       24D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number:          24B1
Signing time:             Thu 04 Dec 2025 15:35:19 +0000
Manifest this update:     Thu 04 Dec 2025 15:35:18 +0000
Manifest next update:     Thu 11 Dec 2025 15:35:18 +0000
Files and hashes:         1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: c4q0uKksHSbOPQYz+WcnOmkKnVTjwbbXuPJvc5fxoyc=)
                          2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=)
                          3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
                          rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9425 (0x24d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
        Validity
            Not Before: Dec  4 15:35:18 2025 GMT
            Not After : Dec 11 15:35:18 2025 GMT
        Subject: CN=6931aa36-50d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:40:0b:30:e3:9a:36:7c:c7:3e:5e:14:ec:
                    1a:e4:48:10:17:50:24:cb:7e:c5:8b:29:c7:31:02:
                    1e:b1:11:b8:80:99:d5:06:1c:50:e3:d3:fa:26:b4:
                    e7:8d:4a:1a:f1:8a:d0:c8:47:81:0d:df:18:eb:01:
                    2e:a1:d7:e3:2f:b5:5a:23:14:a7:4b:4f:d1:cd:26:
                    fc:1b:c1:26:3a:c5:a6:34:40:e2:14:e8:f5:ae:09:
                    7f:d2:be:3c:37:50:43:07:dc:09:7e:dc:35:f1:7e:
                    3f:d5:29:cc:d8:f9:4a:d1:77:c3:74:2d:a3:23:ff:
                    a8:a8:3f:9d:20:bc:33:f8:1a:3a:c3:5e:77:cf:5c:
                    8f:d8:a2:6d:5b:f1:05:0b:db:d2:a6:2a:06:dd:e8:
                    e6:bd:79:12:02:f9:e6:2a:36:22:e0:44:6c:b8:17:
                    5b:db:45:39:ea:5b:2e:16:ed:03:5e:ac:50:01:ab:
                    6f:2b:03:7a:ac:7c:9a:f0:af:55:5b:1a:2e:eb:bb:
                    9b:0a:82:54:5e:ed:2f:ca:33:ce:6a:c6:ab:66:4f:
                    b1:fc:78:a1:74:9a:d7:18:6f:11:74:2a:af:9c:a9:
                    96:9b:55:a9:08:64:47:cd:ff:ec:27:20:2c:e7:d4:
                    99:94:a8:59:56:1a:08:df:fe:3d:d2:eb:0c:df:26:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:24:C0:54:98:CC:3A:3A:A6:8F:FB:B6:FC:F5:20:C8:4E:3A:8D:92
            X509v3 Authority Key Identifier:
                keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:d9:5b:6b:bf:8c:68:df:6b:57:e6:4a:37:ad:38:dc:38:
         61:5f:0e:e0:7b:47:b8:42:8a:62:2f:47:6b:52:f9:ca:0e:b1:
         dc:98:cd:0d:56:7d:10:82:17:03:c1:47:e8:e7:e0:30:ee:28:
         48:19:bc:74:a0:00:08:c9:bd:9e:89:3e:9b:75:23:3f:b6:04:
         5b:b9:9e:65:43:5d:ad:fe:d6:3e:12:02:df:2f:00:83:1a:24:
         f1:ee:55:b0:12:d9:6b:82:52:c9:6d:55:1c:cf:c6:f6:dd:22:
         f4:5d:8c:cf:c8:6a:a0:4d:cc:dd:93:21:82:c1:03:51:9b:44:
         35:11:6a:85:27:1e:76:db:0f:c5:d2:7e:15:46:62:9a:f6:2c:
         65:2c:fe:37:ac:5e:26:f1:a8:d9:e1:0d:06:96:ff:6b:fa:b2:
         c5:09:18:c5:c2:f7:1e:63:1f:87:e3:df:89:c2:9b:75:b3:ea:
         74:7b:be:b2:51:cc:9b:0c:40:b3:0d:c1:e6:2a:6e:d7:4e:69:
         3a:64:13:4e:58:c8:4a:a2:62:0d:5a:8f:c8:a0:60:d9:e8:2e:
         8d:da:11:6a:f3:82:df:c9:99:79:c6:47:65:01:bf:c3:2e:cb:
         af:6a:72:27:7d:1c:35:18:d6:fb:e2:da:47:9c:2d:e1:9b:6a:
         3e:67:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:01 2025 by rpki-client