This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
File:                     Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json)
Hash identifier:          v3/5ws9btq8dMyas0L9RcOfKSkNs2W2/xzh7sPH3xDg=
Subject key identifier:   93:DF:42:AF:19:A5:1B:46:45:19:A1:03:BA:C4:25:FC:06:B0:8B:A7
Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
Certificate issuer:       /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
Manifest number:          91
Signing time:             Fri 05 Dec 2025 04:27:43 +0000
Manifest this update:     Fri 05 Dec 2025 04:27:42 +0000
Manifest next update:     Fri 12 Dec 2025 04:27:42 +0000
Files and hashes:         1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: K3cnoTF2CRqoGz2LoaGowyRj3NMgKqysfea8pkaS204=)
                          2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: ghtYYnHvBHOXjjafNw/o3b7nWMJznKoJtYacsPdc8uY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
                          rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
        Validity
            Not Before: Dec  5 04:27:42 2025 GMT
            Not After : Dec 12 04:27:42 2025 GMT
        Subject: CN=69325f3e-57db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:0d:d4:15:6c:88:ca:f0:a1:d2:a4:f0:dc:
                    39:37:b2:3f:72:97:78:f1:0d:cf:3b:a1:83:a5:28:
                    9d:93:fc:38:3f:12:b2:34:47:81:f7:e7:5a:f6:9b:
                    b6:07:ae:0e:b0:c1:d6:f1:6c:62:1e:ef:7d:79:02:
                    e2:29:1f:59:d1:ed:53:5f:14:f0:17:8f:28:26:e6:
                    34:8f:25:53:47:89:8a:92:80:8f:84:ba:3d:7d:46:
                    e1:2c:73:17:ad:02:c5:51:18:86:82:4a:76:ef:dd:
                    87:74:45:fd:b6:f5:5d:7a:57:49:2e:36:cf:49:0a:
                    4d:b3:5a:59:2f:f9:6a:31:19:52:60:e6:6b:29:5c:
                    2f:e2:21:a8:25:d0:18:65:b5:b1:e4:d8:b9:75:a3:
                    0a:46:b1:df:63:a5:c6:3c:dd:b4:5b:38:06:80:b2:
                    6f:fe:3f:24:63:e9:24:eb:3b:bb:a4:f1:7a:ef:a8:
                    ef:e5:c3:9c:d8:6c:f0:32:fd:c3:9b:01:08:ed:1b:
                    20:ec:04:5c:be:68:9d:46:9b:17:26:2e:48:70:7d:
                    de:4f:f7:dd:df:99:1a:a8:71:67:3b:95:40:39:3b:
                    9f:a7:e5:c4:3a:34:28:69:22:10:32:bd:6a:3a:63:
                    84:54:30:9d:d3:6b:41:75:61:38:2d:cd:9c:bc:ee:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:42:AF:19:A5:1B:46:45:19:A1:03:BA:C4:25:FC:06:B0:8B:A7
            X509v3 Authority Key Identifier:
                keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:58:47:dc:fd:ac:72:42:e1:d3:93:c9:02:6b:db:48:e7:87:
         19:bc:6e:e7:0c:e4:c6:9c:9e:2f:36:24:3f:b6:99:0d:e2:b5:
         de:40:96:2b:f2:cb:e9:21:0f:cb:a9:aa:fe:c9:6e:20:3a:d8:
         12:5d:51:8d:bb:70:52:10:1b:67:fc:66:a0:48:5f:c6:09:b0:
         95:98:49:22:00:bd:a6:a6:87:b1:88:70:52:4d:30:dd:9b:63:
         b2:ef:27:7c:2b:b3:96:a1:e3:67:ac:1c:62:3b:ec:80:89:40:
         ab:60:31:9a:31:3a:6d:84:b1:83:bc:15:5b:10:b9:46:65:87:
         61:9e:9b:ab:6a:79:d8:4d:e1:ca:2e:ba:85:5f:2b:33:35:af:
         18:f2:2e:ce:23:4a:eb:2b:3e:3a:d6:de:b5:7d:54:1b:75:9b:
         73:e7:bc:dc:70:a1:c2:cc:a7:5e:93:a1:60:33:97:61:a6:6a:
         ff:a9:35:0b:b1:2a:ee:d9:d0:ac:3b:26:28:1e:a7:7e:fe:e2:
         11:b8:b4:34:8c:f8:c1:50:f4:62:b6:56:5d:a9:30:c3:c3:c5:
         d6:5d:a5:12:74:71:4d:de:48:d0:0d:69:18:e9:cb:02:88:e5:
         1b:9c:f3:1e:6b:2f:e7:7f:4e:1f:5e:9e:7a:cd:aa:72:30:ea:
         30:9d:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:31 2025 by rpki-client