This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
File:                     ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json)
Hash identifier:          sAyxkuhI9t1JWOr4AGoKT+nlT6CyxSOhhTKd/9/fiHg=
Subject key identifier:   3E:B5:5B:8D:46:D2:69:A6:51:2A:34:12:56:46:1D:26:D3:BC:94:CB
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Certificate issuer:       /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
Manifest number:          64
Signing time:             Wed 03 Dec 2025 05:25:51 +0000
Manifest this update:     Wed 03 Dec 2025 05:25:51 +0000
Manifest next update:     Wed 10 Dec 2025 05:25:51 +0000
Files and hashes:         1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: eof5Bvap04txUovmaJN4Zq0NZwAFYwXiRP29BsTpR8M=)
                          2: 4567CDC2A0EE11F081D8CB27C4F9AE02.roa (hash: NZk8gPQKW1EfRq0UDEGtez/4CFQTjjGfw0ouBgNdDzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
        Validity
            Not Before: Dec  3 05:25:51 2025 GMT
            Not After : Dec 10 05:25:51 2025 GMT
        Subject: CN=692fc9df-4191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:96:77:f7:78:bd:79:84:43:09:c2:c8:68:
                    4a:e9:48:6e:5e:b9:20:05:c5:98:24:c0:f7:16:63:
                    91:b4:f1:3f:5c:13:b3:38:cb:31:1b:49:a2:95:e9:
                    81:cd:8a:1e:eb:b5:a6:4d:27:17:f5:65:a5:db:af:
                    03:76:46:cf:5c:8c:fc:71:1c:5c:40:ac:e3:93:60:
                    5a:8e:ab:42:a2:ea:f4:46:db:cc:56:e9:96:89:3a:
                    ef:b4:81:ca:b9:e1:4d:b5:7b:8f:dd:65:83:99:54:
                    dc:de:7b:f7:77:2a:b8:93:16:31:8c:12:73:c9:13:
                    6c:ae:11:42:fa:18:e1:f7:13:6a:df:7c:b8:dd:ec:
                    e6:7b:69:e0:82:76:39:59:ad:65:9e:b9:38:ef:8e:
                    0a:ca:2b:3c:2f:5d:af:9a:55:c5:59:42:65:32:46:
                    6d:3f:61:aa:63:85:a7:84:5a:a3:f9:72:07:30:76:
                    ae:6a:38:98:16:c6:b4:4b:d9:e1:93:95:3b:64:14:
                    0b:7c:03:c6:f0:47:2b:11:3f:99:d0:25:5e:e5:88:
                    50:ec:45:15:7e:64:53:8f:9f:57:4e:14:b2:a8:da:
                    24:db:eb:ff:87:a6:15:92:2b:27:c3:39:34:dd:b2:
                    19:ac:a1:21:b9:26:ce:88:5c:a6:41:1e:be:45:6e:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B5:5B:8D:46:D2:69:A6:51:2A:34:12:56:46:1D:26:D3:BC:94:CB
            X509v3 Authority Key Identifier:
                keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:f5:35:11:4c:28:e0:16:df:5c:47:cc:54:39:54:f3:97:
         59:c2:3c:1e:3e:a3:53:9b:f9:83:cb:d3:34:4c:5a:10:ec:b6:
         9a:49:77:8f:32:fb:c9:e6:58:fc:a2:82:91:9e:56:65:e7:70:
         e1:9f:c5:b2:f4:3c:47:ac:f4:84:04:63:b2:87:f5:62:dd:92:
         b3:a9:f8:ab:00:0d:1d:f7:2d:3c:6e:fe:11:f9:72:2f:e9:17:
         e9:69:a6:c4:c2:dd:e6:68:ff:fb:a1:a2:ed:c2:e6:7b:6e:2d:
         d7:03:b0:13:54:19:30:4e:b1:fa:ed:37:3b:8b:fb:e6:18:2a:
         f1:2f:77:2a:89:9a:23:b3:c1:23:cc:2e:4f:10:d5:96:6e:fe:
         c3:bb:a1:30:3e:bd:1c:56:0a:73:69:50:1c:9e:1c:cb:a7:31:
         0d:af:0b:02:11:5e:65:e0:f2:02:66:51:c0:a0:5f:09:a0:fb:
         e5:b2:07:a0:42:0a:6d:a7:8b:f7:90:03:0b:b6:19:dc:27:2d:
         0c:be:9f:5e:b5:44:f5:ee:ca:bd:00:70:d9:69:dd:d8:69:d1:
         f4:4f:33:16:ce:13:0e:c0:de:55:12:ce:88:8b:6c:a6:6e:b7:
         d5:7a:66:98:22:d5:e1:4f:5b:93:3d:fb:27:e5:ac:e9:53:8d:
         87:0c:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:31 2025 by rpki-client