This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File:                     t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier:          vVipyw/wMBLc1VngTcMF6RrN+ETrpoaAq7c04Ym19qc=
Subject key identifier:   DB:A0:92:1E:A8:2E:EC:7B:67:FF:E0:36:23:7E:DA:1C:0A:F5:E6:E7
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer:       /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial:       0990
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number:          098A
Signing time:             Sat 06 Dec 2025 19:15:12 +0000
Manifest this update:     Sat 06 Dec 2025 19:15:12 +0000
Manifest next update:     Sat 13 Dec 2025 19:15:12 +0000
Files and hashes:         1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: Q+AfYwzxUTbYMeaAtg9hk+FpIB/cyXRpNOs9TjNsqRI=)
                          2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
                          rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
        Validity
            Not Before: Dec  6 19:15:12 2025 GMT
            Not After : Dec 13 19:15:12 2025 GMT
        Subject: CN=693480c0-67b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:c0:a5:bc:92:a6:50:92:99:fa:29:4c:9d:
                    ec:29:22:bb:9a:02:2f:36:c9:bf:da:3a:5e:45:e5:
                    4f:ed:38:e6:d0:48:e6:a4:b0:d1:36:63:05:ae:01:
                    fa:bf:09:34:29:99:f1:2f:0f:75:f9:25:52:b2:86:
                    62:cf:bb:4a:9e:1b:2a:52:ad:07:26:f2:24:c9:d9:
                    bd:61:ec:29:74:f6:00:1a:5b:76:f5:5a:12:87:8d:
                    59:f1:fa:75:4c:cf:e9:b1:08:4f:79:22:74:72:68:
                    07:40:90:92:0e:06:ae:ef:7a:e1:e1:1f:d7:64:6b:
                    a1:0f:a5:f4:e8:52:89:c5:43:98:30:3b:98:44:98:
                    68:46:89:b6:a5:1d:ff:f8:06:16:3d:53:fd:73:61:
                    b6:5f:07:22:c6:4a:22:8a:86:52:04:bc:e4:1a:f9:
                    ae:82:12:eb:8b:11:b9:03:13:2c:2f:22:5d:7b:90:
                    5b:27:a3:6d:fa:3a:f7:95:28:04:95:67:57:5b:2b:
                    04:f1:24:79:f0:4c:5a:38:55:12:13:e4:8f:0e:a7:
                    8e:f8:ce:3a:ad:2b:54:b9:23:b1:ec:ec:c6:f6:48:
                    45:2b:c6:ea:d7:60:a7:28:77:4e:fd:da:4c:8f:5b:
                    5d:fb:c6:fb:f6:f6:69:e3:4d:cd:2b:87:31:43:2d:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:92:1E:A8:2E:EC:7B:67:FF:E0:36:23:7E:DA:1C:0A:F5:E6:E7
            X509v3 Authority Key Identifier:
                keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:64:39:8e:77:a9:65:c7:7d:36:b1:14:ae:0d:6a:29:9b:4c:
         ab:27:b3:00:d3:9a:01:e7:60:b5:9f:60:a8:27:a4:03:26:6c:
         cc:78:5e:83:27:9f:ab:24:5e:6d:04:e6:1d:24:6b:ce:c3:45:
         07:43:2e:16:12:bb:dc:c4:47:bd:c0:0e:b4:6d:8a:3f:15:f8:
         d5:4f:9d:0c:c8:91:49:5c:90:f7:68:9d:78:74:37:52:23:e9:
         23:f4:49:ce:05:5b:5d:12:b4:3d:1e:03:72:d8:0c:0f:7f:65:
         4c:b7:8b:80:a2:f9:92:53:67:1f:1e:19:d7:3f:b9:d8:e9:20:
         18:4c:e5:5f:f4:8f:f4:ed:74:a7:7d:a2:22:0c:cd:c0:52:3e:
         18:c6:17:f0:f7:48:ab:c4:22:c6:a6:ef:5d:bf:9d:7a:b9:1f:
         12:60:e9:a4:a2:55:24:81:22:f9:87:05:6a:4d:82:64:26:27:
         ee:3c:35:49:da:95:4b:13:db:bb:c7:2f:6e:db:da:ba:d0:eb:
         46:0a:3e:95:ca:52:cb:01:7a:43:34:df:28:c2:4f:f9:bb:16:
         b7:e4:22:f5:e8:38:87:9c:f6:2a:43:e4:7f:e9:50:3f:c4:89:
         99:30:b5:4a:0e:e1:cc:7d:3a:4c:b2:d8:7e:af:a0:bc:f1:10:
         24:a4:7f:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0
Njg2NTVCMDYwHhcNMjUxMjA2MTkxNTEyWhcNMjUxMjEzMTkxNTEyWjAYMRYwFAYD
VQQDEw02OTM0ODBjMC02N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1erApbySplCSmfopTJ3sKSK7mgIvNsm/2jpeReVP7Tjm0EjmpLDRNmMFrgH6
vwk0KZnxLw91+SVSsoZiz7tKnhsqUq0HJvIkydm9YewpdPYAGlt29VoSh41Z8fp1
TM/psQhPeSJ0cmgHQJCSDgau73rh4R/XZGuhD6X06FKJxUOYMDuYRJhoRom2pR3/
+AYWPVP9c2G2XwcixkoiioZSBLzkGvmughLrixG5AxMsLyJde5BbJ6Nt+jr3lSgE
lWdXWysE8SR58ExaOFUSE+SPDqeO+M46rStUuSOx7OzG9khFK8bq12CnKHdO/dpM
j1td+8b79vZp403NK4cxQy3BLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNugkh6o
Lux7Z//gNiN+2hwK9ebnMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG
RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE
aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkZDmOd6llx302sRSuDWopm0yrJ7MA05oB52C1n2CoJ6QDJmzMeF6D
J5+rJF5tBOYdJGvOw0UHQy4WErvcxEe9wA60bYo/FfjVT50MyJFJXJD3aJ14dDdS
I+kj9EnOBVtdErQ9HgNy2AwPf2VMt4uAovmSU2cfHhnXP7nY6SAYTOVf9I/07XSn
faIiDM3AUj4Yxhfw90irxCLGpu9dv516uR8SYOmkolUkgSL5hwVqTYJkJifuPDVJ
2pVLE9u7xy9u29q60OtGCj6VylLLAXpDNN8owk/5uxa35CL16DiHnPYqQ+R/6VA/
xImZMLVKDuHMfTpMsth+r6C88RAkpH9m
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:45 2025 by rpki-client