This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File:                     vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier:          kJBs8i/m4utCKnPknug/uA1RrtaoUNCajTHCfw9qUmU=
Subject key identifier:   16:54:22:0B:37:96:0D:8F:D4:0A:05:96:B9:3C:EC:48:37:04:A3:5A
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer:       /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number:          0B
Signing time:             Mon 17 Nov 2025 05:38:12 +0000
Manifest this update:     Mon 17 Nov 2025 05:38:12 +0000
Manifest next update:     Mon 24 Nov 2025 05:38:12 +0000
Files and hashes:         1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: tD9sTPWpIeVAZHWx8tuPTTCQGy6pUUhr2xCXDTWLzZ4=)
                          2: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: rEHYvI4H6kzy3QLBvK5c7/+2A8OlyxQVAExaC8Q6VxQ=)
                          3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: zTRiAtvXJqXVBRjtXMDww/8yB6SUllc65zHvKU0WltI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Nov 2025 05:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
        Validity
            Not Before: Nov 17 05:38:12 2025 GMT
            Not After : Nov 24 05:38:12 2025 GMT
        Subject: CN=691ab4c4-a01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:4a:0d:14:57:25:34:f3:03:4e:f5:5e:17:
                    2a:b6:02:36:14:8c:f6:fe:9d:16:b2:e7:3f:a6:7a:
                    a3:14:5f:70:8e:75:c2:30:85:f8:80:fd:2a:df:f7:
                    b3:37:aa:c8:8f:70:3a:c0:46:bf:d1:26:3c:7b:33:
                    66:e6:9c:d5:2d:67:1b:b1:f3:5d:e5:98:80:98:67:
                    93:6f:07:d5:15:f6:19:ed:17:4c:be:80:30:03:bc:
                    81:b4:81:22:14:8d:61:02:a0:58:55:57:56:2e:45:
                    b9:d2:df:95:0b:0b:66:49:89:32:41:61:ad:80:b7:
                    43:c5:e9:69:00:e1:37:13:71:d9:ce:95:4b:e6:7d:
                    f9:09:33:60:e2:d0:3d:64:03:f3:d3:8b:4e:1b:e4:
                    4c:ed:1c:02:19:57:4d:4c:a0:aa:80:cc:16:66:ab:
                    f9:ce:be:a7:9a:59:ba:a1:23:24:b9:97:13:60:d7:
                    1a:1e:d6:cc:a8:fe:78:e9:a6:95:92:08:93:3f:fb:
                    c3:dc:89:9e:21:88:90:48:8a:16:32:40:4b:2e:4e:
                    b6:a4:26:05:61:44:5e:27:86:c7:7c:9e:12:c2:22:
                    13:70:56:a5:56:c4:b1:93:13:4e:28:99:c0:bf:93:
                    70:d2:d6:7b:10:ba:56:13:99:90:0e:c0:04:35:f9:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:22:0B:37:96:0D:8F:D4:0A:05:96:B9:3C:EC:48:37:04:A3:5A
            X509v3 Authority Key Identifier:
                keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:9d:8c:d7:23:ca:7b:a5:77:31:51:10:3f:cb:f8:c0:db:97:
         72:d9:aa:29:1e:7d:77:45:59:58:55:b6:35:1b:8d:58:5f:a8:
         4f:54:b3:ce:56:a5:ec:61:80:d3:3d:12:cd:af:38:b0:0f:78:
         75:92:63:d5:5b:e4:3b:45:e6:64:fa:07:26:be:83:81:e2:b7:
         b4:69:07:5f:f0:16:2a:3a:42:e8:9d:92:98:bd:75:0e:0c:14:
         00:5a:99:30:83:ba:61:34:02:6b:53:5a:5c:b7:8d:e8:3c:10:
         38:78:ea:7f:56:d7:30:1c:ee:a4:27:77:43:97:c0:2a:1e:1e:
         f7:5e:9f:2d:c6:66:d5:35:0a:88:eb:84:fa:d8:49:80:bc:e9:
         3e:a6:1c:c4:53:7a:cc:7c:9e:61:ac:27:a4:a9:f3:a1:2e:4d:
         1c:54:33:04:10:59:60:59:2f:77:69:72:0e:94:e9:f2:5d:d2:
         fc:c6:a7:f0:9f:21:ce:c9:8e:f6:56:0b:2b:57:d4:ea:b7:6c:
         16:76:1f:c0:0d:93:1e:e5:5f:31:75:9b:44:a9:f4:c9:2e:26:
         51:8d:ac:53:19:05:88:c7:00:54:d9:8f:62:61:d1:83:d3:3f:
         38:86:6e:1c:09:bf:e2:08:b6:6c:1f:c8:dc:aa:4d:3d:27:e8:
         56:39:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 15:07:09 2025 by rpki-client