This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
File:                     ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json)
Hash identifier:          21o6i6o76tHg6QaANa5D/yxHGvviGeYHWAiBmTfIwIY=
Subject key identifier:   C1:D5:E0:AE:B0:DA:EE:A1:07:DD:87:B2:B5:11:62:96:F2:F0:9F:2F
Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
Certificate issuer:       /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
Manifest number:          EB
Signing time:             Fri 05 Dec 2025 03:26:48 +0000
Manifest this update:     Fri 05 Dec 2025 03:26:47 +0000
Manifest next update:     Fri 12 Dec 2025 03:26:47 +0000
Files and hashes:         1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: avZXukeBVs8uJ6K+/CoZNUsPT7i0HxP4zhAXeP+k49c=)
                          2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: VgJA9VQZ16I+eJAsOvY0GYdltmcP2IovQ2JrcqstHq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177
        Validity
            Not Before: Dec  5 03:26:47 2025 GMT
            Not After : Dec 12 03:26:47 2025 GMT
        Subject: CN=693250f7-061e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:32:e7:92:98:28:06:2b:07:1f:72:91:7d:
                    88:67:52:0c:f2:7a:03:9c:cc:91:60:2e:f5:48:5f:
                    01:7b:dd:4e:ab:70:16:76:eb:87:6f:bc:4b:b4:29:
                    24:a0:a4:7c:98:99:fa:9b:98:f0:c3:13:9d:06:33:
                    68:88:47:88:e4:02:62:02:65:9a:0d:74:56:29:31:
                    0e:1d:92:47:8e:c3:7c:c9:8b:c1:eb:30:1e:20:8d:
                    5c:09:6d:16:dc:a7:97:a3:94:d9:90:9a:6c:d5:5c:
                    87:52:27:16:f7:8e:69:d6:42:de:62:6b:12:53:d5:
                    8e:78:14:18:9f:15:3e:1d:72:1e:c5:47:19:f9:f8:
                    55:d2:44:97:f3:db:76:08:32:40:66:97:ea:ee:f1:
                    9f:61:18:8e:18:b0:be:d3:21:31:6d:73:19:c3:41:
                    09:27:d3:14:e6:00:b0:3f:45:76:b7:ff:4d:84:48:
                    4d:7b:57:fb:21:15:0f:48:7c:51:e8:63:1a:d8:3a:
                    bc:35:d6:d9:70:aa:df:24:eb:01:ac:1e:c2:66:7e:
                    53:2e:bc:ee:d6:e3:da:da:ac:70:e8:b3:5f:48:70:
                    cb:b1:ca:c9:7f:4a:2b:a9:38:b7:ae:38:96:56:44:
                    9b:40:6c:86:db:0a:71:50:9e:28:55:87:d6:87:55:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:E0:AE:B0:DA:EE:A1:07:DD:87:B2:B5:11:62:96:F2:F0:9F:2F
            X509v3 Authority Key Identifier:
                keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:f1:07:e3:e1:9d:28:bf:d0:a5:87:b3:19:33:ec:3d:39:
         f9:f6:8b:8f:8c:16:3b:d0:88:0d:1f:79:ca:ed:54:fe:e7:7d:
         47:2b:e0:b0:b7:36:bd:41:23:26:7a:34:f5:3c:eb:fe:b0:aa:
         5d:de:b4:ef:94:cf:ac:c5:28:7d:2a:1b:5d:1c:ae:c5:e3:5c:
         be:b1:79:df:fd:d9:e8:b8:74:f4:a5:e4:e3:7c:cd:ed:78:ad:
         c2:70:d8:3c:ab:05:b3:c8:01:5b:32:9a:89:81:9b:6e:95:d3:
         1b:fa:f3:c5:42:60:f8:22:8b:70:4e:1a:46:9f:02:76:90:89:
         6b:b6:76:59:a2:f6:e0:e9:89:32:91:1f:e8:ba:33:e4:33:4f:
         e7:83:ba:36:f1:62:9c:84:21:2a:58:57:3f:ac:31:57:0a:c9:
         01:fb:a9:e3:e1:95:2c:d5:df:ed:3d:f7:78:2b:fd:ec:d3:9d:
         13:78:f5:66:ce:66:c0:be:47:8a:e2:6b:d4:af:58:77:31:64:
         cf:54:63:4f:4c:b3:33:48:b3:3c:85:cd:e8:16:a8:5c:56:ee:
         0c:b6:4b:cc:32:46:58:e2:bb:50:85:d9:98:92:c4:57:d8:d6:
         69:a5:7c:69:4a:bd:fd:53:ba:e9:0b:ef:7c:98:33:eb:ba:95:
         ea:69:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:34 2025 by rpki-client