This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File:                     C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier:          aUZtPWkMewDMqS2vrjF8mg06jlen7wq88GHcaguzCq8=
Subject key identifier:   3E:45:7B:7C:2A:65:48:9B:31:4C:45:D3:F8:16:3C:49:46:83:38:5A
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       064D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number:          062F
Signing time:             Mon 08 Dec 2025 21:32:47 +0000
Manifest this update:     Mon 08 Dec 2025 21:32:47 +0000
Manifest next update:     Mon 15 Dec 2025 21:32:47 +0000
Files and hashes:         1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: q8NuRXhLShWHaEcOr52lTiq53UAJxdRFBkdb22of3gA=)
                          2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=)
                          3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=)
                          4: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 21:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Dec  8 21:32:47 2025 GMT
            Not After : Dec 15 21:32:47 2025 GMT
        Subject: CN=693743ff-be7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:66:14:81:7a:7c:cd:55:04:62:3e:e3:06:
                    87:e1:bd:ff:8f:d5:54:f1:bb:55:19:a0:5d:49:f5:
                    a6:49:6a:bd:cf:33:df:7b:41:ed:36:30:88:b9:3d:
                    01:1d:ec:21:cd:f0:52:87:ec:13:20:87:fd:b4:cf:
                    b2:08:a0:1d:6b:ce:36:40:24:79:97:e5:48:4e:c9:
                    43:c5:64:1a:51:45:7d:26:e6:b2:51:12:a1:5a:a8:
                    90:c5:45:67:dd:5b:5c:a8:18:d2:1d:82:07:22:4c:
                    a1:0b:6e:c5:00:ed:06:e8:17:c7:ee:12:d8:ea:07:
                    64:60:17:a0:9f:37:26:b7:43:65:a9:c9:fc:10:f8:
                    e7:61:87:84:6f:68:fb:32:e8:e6:c0:f0:a4:9a:d0:
                    e3:a0:93:ae:1b:26:c0:5a:c1:f8:b6:1f:92:5f:24:
                    2a:cd:3d:87:03:45:6a:21:1d:bd:36:cf:c3:9b:22:
                    9d:38:5e:9c:5f:41:bd:e6:b5:48:2d:c1:1a:0f:0c:
                    f2:90:4f:78:08:94:e9:66:bf:fd:9f:ac:82:47:8a:
                    19:d7:af:ef:68:90:7c:fc:09:ae:46:7c:99:79:98:
                    15:bf:7f:45:34:23:26:06:a0:87:24:af:6c:3b:65:
                    6c:e0:3a:25:60:6b:5f:f8:92:ad:52:7d:03:af:4b:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:45:7B:7C:2A:65:48:9B:31:4C:45:D3:F8:16:3C:49:46:83:38:5A
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:41:f4:d4:98:38:6e:03:bd:0a:5b:3e:bf:d6:85:1f:73:c2:
         97:57:d5:4d:bf:42:8d:39:c6:47:a4:37:c6:37:81:ea:64:43:
         6d:26:ac:af:08:aa:30:50:ad:58:06:8a:6a:0f:d6:86:e0:0a:
         41:2c:bc:40:d4:04:eb:86:cd:2e:d3:cb:c6:1e:3a:59:e5:e3:
         b4:37:4a:c3:8c:d6:28:f5:85:7b:e8:bc:3e:4a:21:e5:18:07:
         d5:4b:c4:f8:fc:b6:9d:87:e6:6b:00:55:80:53:60:07:8f:a3:
         16:67:01:5a:65:ba:0e:ec:9b:06:4b:8f:61:38:ed:db:12:7f:
         61:ad:8b:16:26:65:56:16:17:0e:bf:92:88:b4:be:80:aa:3c:
         c2:01:ea:e8:64:ef:16:dd:ed:d8:b8:0d:71:d9:99:27:d9:8f:
         25:4b:ec:4e:9d:13:70:35:3b:74:5e:37:6c:6b:68:04:d4:4c:
         72:77:b9:9b:94:1b:f5:35:f0:c8:30:bb:50:c3:f0:4f:7a:81:
         3c:a1:49:a3:e5:cf:f0:81:ac:4b:5f:8c:db:fb:96:35:53:0f:
         82:43:9c:f9:01:23:b2:d5:03:f8:6d:d6:9f:53:8e:f6:44:f9:
         91:a9:50:5c:ff:ca:6b:2c:11:62:97:83:ec:86:22:31:05:32:
         08:ee:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:26:20 2025 by rpki-client