This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
File:                     B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json)
Hash identifier:          In99TMwPn8lcjsVPYeGW58iNPCPThC+k9Am4WG3mNNo=
Subject key identifier:   1C:23:F0:70:01:8A:6E:AB:F7:90:AE:3E:87:8C:D9:0F:5E:0A:8A:71
Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
Certificate issuer:       /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Certificate serial:       0852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
Manifest number:          0847
Signing time:             Sat 06 Dec 2025 19:51:46 +0000
Manifest this update:     Sat 06 Dec 2025 19:51:45 +0000
Manifest next update:     Sat 13 Dec 2025 19:51:45 +0000
Files and hashes:         1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: 52hyYMl9Swn1Naoup4ONF7Bh6chtGgui2sTmXDA7Do8=)
                          2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: UXvIkLvoYKlKtaN8MzDWhl7hqC5GqZzxRFT3cXR5kww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
        Validity
            Not Before: Dec  6 19:51:45 2025 GMT
            Not After : Dec 13 19:51:45 2025 GMT
        Subject: CN=69348951-9daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ac:21:59:3d:25:c6:f5:fe:e8:38:a4:2c:1d:
                    ca:bf:5c:d9:6d:29:85:09:37:60:48:41:6e:f6:ad:
                    b0:bb:a7:53:4d:97:cd:96:78:2f:d4:fc:b6:8a:1f:
                    32:94:bc:df:c3:07:d6:32:a7:2c:83:29:c6:4e:ff:
                    a6:b8:e7:fc:ca:4c:e7:38:29:39:20:63:a7:6d:fb:
                    b7:1e:ed:80:91:e8:a1:a1:11:d8:74:3b:02:7d:b1:
                    42:72:b0:88:af:68:fb:67:27:8f:f3:94:5c:bd:8d:
                    32:88:07:f3:5d:58:43:96:20:ea:1e:59:72:35:c8:
                    64:af:c8:46:76:3f:80:0d:fc:68:fb:30:b2:67:a5:
                    49:68:a6:6e:38:86:4b:d4:8e:a2:ab:3b:a3:7c:c3:
                    d5:a7:0e:0b:d7:09:74:58:83:61:e8:0d:40:0f:c2:
                    9a:29:00:23:db:ad:2c:4a:bd:71:de:e1:1a:be:3b:
                    79:7c:91:ea:36:df:44:28:34:ea:c2:a1:c0:c5:bb:
                    ba:2e:2a:7c:b0:a0:99:14:4e:d4:9e:45:6a:c7:8d:
                    aa:13:30:bf:38:15:53:bf:98:5b:00:44:4a:71:0f:
                    c7:89:a5:50:9e:b8:bf:09:72:17:9e:f1:7b:36:1b:
                    8c:b6:b4:ba:8e:de:8e:65:4b:4e:b3:b2:9f:9a:67:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:F0:70:01:8A:6E:AB:F7:90:AE:3E:87:8C:D9:0F:5E:0A:8A:71
            X509v3 Authority Key Identifier:
                keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:ae:f6:1f:29:2e:5e:0c:0d:29:fd:68:9a:e6:a7:4d:91:
         45:d8:51:d0:db:c2:cf:1f:6e:2d:02:bf:c5:ce:8e:e8:7c:cb:
         b8:60:8d:ca:c9:53:54:97:37:92:b1:d5:67:52:37:cc:f4:93:
         84:50:73:ff:a4:79:8f:ab:96:d0:8e:0f:b9:15:d7:0f:99:c7:
         a3:4a:1d:4b:90:d4:5f:4e:ca:3e:63:ee:e7:14:a3:58:fc:6f:
         d6:06:5b:b3:5a:25:1d:02:dd:de:97:d7:65:36:f1:c9:df:99:
         4f:50:d2:06:80:ec:6e:c3:8a:aa:58:05:76:84:7a:3f:0f:5d:
         5a:d0:a1:4b:bd:4d:4d:1d:a0:91:2d:4d:df:5b:49:a0:13:a8:
         10:69:67:46:97:94:38:85:81:18:ce:f6:71:20:62:d6:e8:4c:
         5c:a9:01:62:ce:96:5b:16:0c:fe:a0:47:99:cf:15:3a:74:13:
         e3:4c:d0:3a:f7:53:cd:85:fc:99:e9:19:0c:54:e8:7b:0e:ab:
         55:46:43:0f:ce:04:09:3e:c6:63:b9:57:a9:5e:ab:89:93:5b:
         0b:7f:e5:4c:76:c8:35:64:7f:64:d2:aa:8a:f0:d4:80:3c:9b:
         71:2f:eb:cc:d8:51:bc:fb:6f:31:73:60:1c:2a:5e:e1:56:6e:
         68:e6:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:53:52 2025 by rpki-client