This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
File:                     D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json)
Hash identifier:          ioYZSEyHTBUxcESA/auJtgSSi0ToQAKNKeuClyeLJD8=
Subject key identifier:   B1:52:B0:46:EB:F6:4E:44:84:91:10:18:8A:74:C7:C6:FF:B3:75:D5
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
Manifest number:          0140
Signing time:             Sun 07 Dec 2025 02:47:49 +0000
Manifest this update:     Sun 07 Dec 2025 02:47:49 +0000
Manifest next update:     Sun 14 Dec 2025 02:47:49 +0000
Files and hashes:         1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: ppBLUtIss06NZVV7YEr3YTE3UCgCj44x6MyE7sEPq6M=)
                          2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=)
                          3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=)
                          4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Dec  7 02:47:49 2025 GMT
            Not After : Dec 14 02:47:49 2025 GMT
        Subject: CN=6934ead5-24de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:b7:39:a5:b3:ff:05:74:ba:bc:65:b1:f9:
                    2d:58:a6:4a:4e:c8:7a:0e:2d:e9:74:7f:60:4f:60:
                    9c:8a:26:55:22:b5:a1:0f:73:5f:df:30:ad:af:ae:
                    de:20:7d:cc:93:03:1c:52:19:64:a5:44:d9:c9:80:
                    9b:bd:34:8a:73:08:ad:20:83:4d:bf:cf:f0:f3:a4:
                    ef:23:89:88:81:d7:ea:43:6d:74:71:63:c3:cc:e4:
                    d0:35:e0:41:92:f3:8b:3c:12:2f:06:d5:8a:70:28:
                    e4:50:bf:d9:98:5d:9a:35:84:6a:9a:36:88:e5:21:
                    f0:d6:fc:b2:24:26:75:86:a5:9b:a6:bb:da:5e:8b:
                    8a:3c:06:4d:30:7d:2a:de:8b:1b:43:2b:cc:21:11:
                    15:38:e5:ec:04:9f:45:ed:9e:7a:88:a2:2f:5d:65:
                    42:e3:e6:e4:3d:36:f4:88:57:ca:7e:13:53:0a:5c:
                    34:a0:02:c3:61:b6:cd:18:f1:11:d3:83:b7:06:e4:
                    cc:b9:51:d8:3f:88:a0:e9:9a:e0:34:eb:4e:ce:9e:
                    ef:ec:51:57:13:ea:c5:63:85:d6:e6:eb:c1:be:ca:
                    0f:eb:9b:a4:63:c1:1c:63:70:43:67:64:73:f3:7c:
                    a0:14:32:92:c1:6c:68:f6:d1:a4:53:bc:75:47:42:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:B0:46:EB:F6:4E:44:84:91:10:18:8A:74:C7:C6:FF:B3:75:D5
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:a1:e4:73:f2:b7:47:75:72:9c:c9:d3:94:e2:12:ab:fb:
         5e:cb:6a:1e:9f:fb:ba:93:8b:2e:2a:4c:63:f9:14:8e:fd:89:
         30:aa:6f:fc:98:48:69:38:4e:82:fc:40:b4:a1:ea:99:45:bd:
         a0:a7:b6:99:8a:a2:27:0b:41:3b:4b:c9:a7:c4:42:b9:d9:6c:
         5d:2d:8a:aa:93:7a:4a:ed:cb:ed:e2:04:15:a2:8a:9c:49:14:
         49:c8:9c:e8:be:8f:06:3b:ce:fc:51:14:b0:3f:1a:ff:eb:9d:
         a5:2c:05:8f:11:44:32:e9:fa:92:2b:58:5d:9a:8e:83:a3:4d:
         3a:ae:30:b5:57:3a:df:3a:62:fe:f3:bc:fe:3d:f8:1d:e1:9b:
         a6:95:d3:f4:a6:25:7b:cf:9e:e7:91:bc:41:6e:77:1a:7f:32:
         b9:09:e9:5c:7a:c7:49:05:d8:b2:b9:f3:73:c5:71:d3:35:4e:
         8e:f7:38:88:60:f4:05:76:43:8c:8e:dc:2f:d5:ed:47:07:da:
         91:c9:3d:73:7e:1e:72:77:c2:6c:bc:a1:af:d9:79:4f:5c:46:
         aa:e4:4a:98:12:3a:57:84:1a:9e:e4:0c:80:2b:da:93:77:d8:
         21:f9:b6:68:36:07:bc:6e:05:34:85:73:f6:30:2d:18:94:7a:
         bc:80:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:18 2025 by rpki-client