This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File:                     8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier:          PS8ZmnxAfJmKkavg1HbDBAch/HWNFp1QSt+27rvurAY=
Subject key identifier:   21:DB:07:81:6D:0F:7A:C8:EB:0D:12:62:31:23:9B:FB:42:66:81:2A
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer:       /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial:       0E42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number:          0E3C
Signing time:             Sat 06 Dec 2025 17:14:18 +0000
Manifest this update:     Sat 06 Dec 2025 17:14:18 +0000
Manifest next update:     Sat 13 Dec 2025 17:14:18 +0000
Files and hashes:         1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: cgn9VCmwR/3uqKnmlnlFaxie7hJTpYevVfGRuNkCIqw=)
                          2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
                          rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3650 (0xe42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
        Validity
            Not Before: Dec  6 17:14:18 2025 GMT
            Not After : Dec 13 17:14:18 2025 GMT
        Subject: CN=6934646a-e79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:98:42:9f:62:35:43:ff:68:d8:42:d1:14:
                    58:46:0f:c0:74:52:08:66:5b:18:4f:f5:96:48:c5:
                    27:82:78:a3:53:ae:f9:fe:0b:34:5d:75:f2:c4:39:
                    68:d2:e0:5f:24:54:c4:80:54:58:9d:12:84:be:22:
                    13:14:10:22:cf:f9:e9:18:51:6b:32:73:7f:25:2f:
                    c3:a9:a7:7f:23:cb:15:9f:ea:3c:0f:f2:b4:97:5d:
                    a6:6a:fe:71:ec:32:9a:ec:d5:e1:4d:16:cf:96:20:
                    5d:6c:e0:28:42:20:77:e5:c7:a1:56:d5:c0:5d:c7:
                    a5:65:2c:76:cb:2d:36:86:96:49:9c:d2:b4:16:e1:
                    cc:42:62:c4:73:52:82:51:f9:99:80:f0:82:ca:ba:
                    e5:52:8d:8b:b1:4b:7d:10:7e:49:b5:79:5d:f5:d3:
                    56:eb:c3:49:41:11:07:2c:22:71:8d:5b:cb:f2:e1:
                    5e:89:47:ef:1e:f9:fd:78:22:4c:75:4c:d6:e7:38:
                    1b:86:fc:56:2a:9b:bf:cc:a7:9e:51:26:99:c1:64:
                    34:6b:e9:9c:c2:9c:ba:fa:97:2d:a1:f0:fd:d5:38:
                    97:e8:f6:04:92:0d:19:80:87:bd:48:05:02:93:93:
                    62:dd:f7:5a:4e:8a:a1:4a:f3:05:71:a6:ed:99:7a:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DB:07:81:6D:0F:7A:C8:EB:0D:12:62:31:23:9B:FB:42:66:81:2A
            X509v3 Authority Key Identifier:
                keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:88:30:96:52:28:61:71:77:33:d6:90:5b:c1:14:06:f1:
         25:aa:b0:5b:24:37:46:73:31:cf:db:d3:66:7c:1c:f6:08:56:
         b1:15:77:13:f5:41:ee:ca:d9:6e:ea:e0:ad:db:45:04:74:e2:
         d4:25:b7:52:fe:db:e3:2c:c2:3a:29:3b:50:db:39:da:db:e6:
         04:0a:63:e0:9e:4c:b2:ba:a4:67:d6:ec:21:8d:6f:1e:a1:8f:
         bc:5b:f3:95:86:07:89:fa:b8:7e:80:3a:c2:d9:76:db:47:ec:
         17:4b:bb:56:70:26:19:6a:85:b7:4f:52:4a:5e:b5:73:49:b9:
         70:9a:46:ea:d8:9c:9a:f3:37:13:6e:2d:6e:38:e8:21:14:c6:
         bf:ce:00:78:09:e8:b4:cd:90:30:9f:b0:ab:46:45:be:6b:d9:
         a1:8e:64:25:e5:2c:48:5b:ae:5b:51:55:99:fe:8a:7d:0d:8e:
         47:9b:ac:c6:48:78:85:c7:28:41:42:89:69:7f:a4:47:44:7c:
         27:a9:5f:43:22:97:3d:a9:f5:dc:de:dc:33:b8:82:b0:8c:11:
         12:48:0e:b7:3f:ba:80:ac:d0:b6:68:e7:da:58:d6:9d:81:d6:
         ea:d8:d6:e6:bc:95:ae:02:54:e8:65:5d:2a:c3:a6:45:72:f8:
         bc:de:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:45:25 2025 by rpki-client