This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
File:                     8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json)
Hash identifier:          rBYvSjq0Yq3pADsKEFWaAdvGhT8Hqy4UXJbwHfCUz38=
Subject key identifier:   C3:FF:89:BB:97:42:75:BC:B4:5D:8B:DD:E7:76:53:66:A0:6F:10:4B
Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Certificate issuer:       /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
Certificate serial:       0A6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
Manifest number:          0A69
Signing time:             Mon 22 Dec 2025 19:04:08 +0000
Manifest this update:     Mon 22 Dec 2025 19:04:08 +0000
Manifest next update:     Mon 29 Dec 2025 19:04:08 +0000
Files and hashes:         1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: TUguv9QXcRbftpHgkLfBnVpz2JOHsSWhEbVm6ATcn+4=)
                          2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Validity
            Not Before: Dec 22 19:04:08 2025 GMT
            Not After : Dec 29 19:04:08 2025 GMT
        Subject: CN=69499628-a6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:16:38:74:72:9d:4d:05:ff:6e:be:b6:c3:
                    83:ab:46:fb:ed:83:4f:5e:44:9a:60:ad:81:54:ac:
                    8d:bd:7a:47:e3:ad:7f:0a:ea:82:fb:e7:fb:c7:c0:
                    8f:4f:e7:f9:5c:90:0b:3a:07:46:6d:47:20:c7:cb:
                    26:9e:d7:74:83:b5:b2:ea:04:19:e8:cc:00:cd:f1:
                    2b:4d:88:ac:ef:a6:ac:00:b8:8c:af:53:a3:90:59:
                    f9:4e:09:35:3c:f0:aa:fc:15:b9:d0:cf:35:38:46:
                    32:75:85:0b:2f:3e:fb:a8:fe:d6:c2:10:df:4c:a8:
                    41:52:cb:59:cb:00:d1:e5:3d:bb:1e:c8:34:e6:bc:
                    36:f6:11:95:76:8e:5f:9c:cc:66:a7:ad:a6:ad:b5:
                    36:cf:69:2b:e6:ec:c7:3d:7e:7c:7b:fa:6e:b0:2b:
                    b0:57:62:c7:fd:81:97:eb:2b:70:e6:8e:9b:8e:30:
                    bd:f1:a4:03:cd:4e:e2:80:6e:73:37:02:01:8b:e9:
                    b7:67:1a:99:7f:2f:f2:82:23:c9:14:3d:e0:1d:10:
                    88:35:21:dd:3c:8e:15:2a:cb:47:c1:32:60:6c:3e:
                    75:01:2f:58:4c:9c:30:fa:17:1e:e4:18:72:1f:b2:
                    c8:0d:78:36:91:55:f0:29:c7:b3:10:b4:5d:e9:1a:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:89:BB:97:42:75:BC:B4:5D:8B:DD:E7:76:53:66:A0:6F:10:4B
            X509v3 Authority Key Identifier:
                keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0c:61:52:d2:e7:64:ad:17:9e:18:a5:bb:55:6d:d9:60:c8:
         d7:3b:22:9e:4d:ac:28:b8:b5:d5:c2:49:d0:df:27:7b:fa:c9:
         90:1e:26:f5:28:4c:85:4f:27:36:2f:8b:c8:9e:f8:f2:d7:eb:
         2f:bf:9f:21:88:19:19:74:f9:56:88:6e:ae:e2:1a:36:4a:c1:
         4d:8e:b0:30:c2:ad:df:c1:91:35:3e:bd:ae:6c:87:7b:00:26:
         4c:22:e7:bd:43:51:92:3e:90:c8:06:7e:bc:51:3b:1a:81:bf:
         be:ab:3c:87:03:cc:31:aa:27:62:33:2d:37:db:93:2e:fe:35:
         3f:23:6d:f0:ab:28:8e:98:f4:e6:a9:28:ef:a5:59:fa:47:1c:
         7d:60:ea:a9:83:8a:ef:02:23:ca:15:e0:d6:8c:4a:ce:79:c8:
         ab:4f:eb:5d:7b:fe:89:4d:12:b3:50:84:b0:1e:ad:c1:d1:36:
         b4:2f:58:d5:c2:aa:56:cd:2a:2e:f4:89:e8:bd:6a:fc:7c:81:
         25:9d:d7:8e:0a:33:76:44:2a:b7:53:04:58:f5:59:0c:ea:08:
         a2:de:e0:f8:5f:23:65:05:22:17:bb:10:64:0c:a2:16:21:cc:
         2f:56:b7:33:da:8e:53:1f:21:17:6e:4a:1a:40:74:73:27:08:
         3a:33:ed:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:07:48 2025 by rpki-client