This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File:                     M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier:          8P6OYXUL7Fg7nWRse6WNzBR9YhncuEfLeSxzyEl16xg=
Subject key identifier:   EC:79:E2:5B:CB:2A:BA:AD:E3:A0:3C:50:6B:4C:8A:8B:3B:A8:63:62
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer:       /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number:          93
Signing time:             Fri 05 Dec 2025 04:25:28 +0000
Manifest this update:     Fri 05 Dec 2025 04:25:27 +0000
Manifest next update:     Fri 12 Dec 2025 04:25:27 +0000
Files and hashes:         1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: SjrziHZjXAYiykVXGrXWDkTGBke8BiFWVX/Yn4wtGRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
        Validity
            Not Before: Dec  5 04:25:27 2025 GMT
            Not After : Dec 12 04:25:27 2025 GMT
        Subject: CN=69325eb7-8fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:4f:03:70:d1:f6:ec:d7:79:8f:cf:b7:d1:
                    a7:2e:20:89:f1:76:f7:90:30:a6:ee:bf:da:7e:58:
                    02:02:2e:9b:98:17:4b:8f:02:e3:ca:1c:58:e4:10:
                    9a:12:1c:03:40:b0:f8:a5:76:53:62:27:a5:1b:93:
                    86:a5:dd:9d:05:e4:a0:82:84:7e:8f:c5:9d:97:4d:
                    a7:fe:92:31:79:5a:3b:55:47:1e:8a:91:13:a4:ef:
                    fa:4f:a2:14:99:40:49:45:11:3d:9c:3f:6c:8a:3e:
                    a9:74:4b:fe:bd:65:51:16:d9:93:88:02:93:59:ef:
                    49:28:bb:b9:88:3f:bd:de:9d:7c:7d:b9:e1:1d:31:
                    ac:a2:37:1e:58:7b:6c:18:de:71:85:2d:9a:73:d6:
                    85:10:7f:ff:57:f2:aa:a9:b9:9a:2a:a2:75:ed:6d:
                    e3:86:78:b9:1a:86:fc:10:0c:d1:6a:99:80:94:40:
                    6b:97:e9:9d:0d:79:8c:3f:c0:94:d9:c1:0f:bd:dc:
                    e8:81:f6:84:89:18:ed:53:0a:e0:08:c4:16:1e:ee:
                    61:63:2e:db:75:b9:94:fe:3f:a4:dd:cf:17:b8:09:
                    1d:d0:4b:30:cd:b2:95:e0:b2:4b:21:5e:46:2f:3b:
                    1a:51:7d:cf:db:d4:33:a9:44:b5:7c:7d:53:aa:a3:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:E2:5B:CB:2A:BA:AD:E3:A0:3C:50:6B:4C:8A:8B:3B:A8:63:62
            X509v3 Authority Key Identifier:
                keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:43:e4:02:cf:e9:d9:5e:79:75:9d:ed:9c:47:73:36:26:
         ba:aa:e8:a7:2d:79:ef:91:6c:d6:f9:b6:cb:b4:b0:8d:a0:22:
         49:ce:9d:3b:56:89:d7:cd:fb:45:9b:95:d9:3f:4c:6a:1a:dd:
         dc:db:97:25:b3:f0:76:53:50:d4:24:d4:51:69:43:82:51:4e:
         eb:8d:d7:cd:de:db:62:ba:a8:6c:d0:fb:bf:2b:db:81:a8:cb:
         0b:91:47:f4:13:d0:dc:06:03:9b:94:d3:b8:74:b6:6b:3d:7b:
         4e:7d:3f:c4:f2:15:50:fb:c0:59:3d:71:84:cc:4c:75:21:1c:
         f1:77:75:b0:f4:e8:d8:20:28:ee:2a:88:69:09:c9:48:3b:1a:
         43:5a:20:e6:b8:c8:57:b0:8d:c6:f6:0e:3f:7e:79:71:13:23:
         54:b7:e0:ec:54:26:80:4d:4d:87:c8:20:9a:a5:a4:e6:50:27:
         b2:2d:ad:f4:69:72:5b:29:3a:07:c5:95:7f:fd:cd:31:ea:d8:
         27:ba:90:ef:f3:93:e0:cf:6c:18:66:78:05:b6:81:ae:3f:94:
         65:c2:92:d4:6f:fd:19:ed:86:76:96:67:30:be:fe:50:66:a3:
         ba:7e:ba:c4:4f:6d:5f:13:30:99:59:90:01:5a:df:bc:2e:1a:
         74:46:f0:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxQ0MxMTAvBgNVBAUTKDMzQTAxNzRBNEE0QjAwOUMwMTE1MTU5NjkxMzZGMzAx
MDg5REI1QjUwHhcNMjUxMjA1MDQyNTI3WhcNMjUxMjEyMDQyNTI3WjAYMRYwFAYD
VQQDEw02OTMyNWViNy04ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3fZPA3DR9uzXeY/Pt9GnLiCJ8Xb3kDCm7r/aflgCAi6bmBdLjwLjyhxY5BCa
EhwDQLD4pXZTYielG5OGpd2dBeSggoR+j8Wdl02n/pIxeVo7VUceipETpO/6T6IU
mUBJRRE9nD9sij6pdEv+vWVRFtmTiAKTWe9JKLu5iD+93p18fbnhHTGsojceWHts
GN5xhS2ac9aFEH//V/KqqbmaKqJ17W3jhni5Gob8EAzRapmAlEBrl+mdDXmMP8CU
2cEPvdzogfaEiRjtUwrgCMQWHu5hYy7bdbmU/j+k3c8XuAkd0EswzbKV4LJLIV5G
LzsaUX3P29QzqUS1fH1TqqOGzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOx54lvL
Krqt46A8UGtMios7qGNiMB8GA1UdIwQYMBaAFDOgF0pKSwCcARUVlpE28wEInbW1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy80M0VBNkIxOEVG
NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFKd0JGUldXa1RiekFRaWR0
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjFDQy80M0VBNkIxOEVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFK
d0JGUldXa1RiekFRaWR0YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtXkPkAs/p2V55dZ3tnEdzNia6quinLXnvkWzW+bbLtLCNoCJJzp07
VonXzftFm5XZP0xqGt3c25cls/B2U1DUJNRRaUOCUU7rjdfN3ttiuqhs0Pu/K9uB
qMsLkUf0E9DcBgOblNO4dLZrPXtOfT/E8hVQ+8BZPXGEzEx1IRzxd3Ww9OjYICju
KohpCclIOxpDWiDmuMhXsI3G9g4/fnlxEyNUt+DsVCaATU2HyCCapaTmUCeyLa30
aXJbKToHxZV//c0x6tgnupDv85Pgz2wYZngFtoGuP5RlwpLUb/0Z7YZ2lmcwvv5Q
ZqO6frrET21fEzCZWZABWt+8Lhp0RvCd
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:29 2025 by rpki-client