This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
File:                     muAi3ZD6yvK8XHN26KhM5QUeiWo.mft (raw, json)
Hash identifier:          5wUDaEjPNnudCDLPGG2hK1TySWCMWndYxLm8QHn7BgQ=
Subject key identifier:   24:93:42:49:E8:A0:25:B5:EA:55:D0:B5:62:34:06:1D:96:1E:26:C7
Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Certificate issuer:       /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Certificate serial:       0748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
Manifest number:          0741
Signing time:             Sat 06 Dec 2025 20:42:50 +0000
Manifest this update:     Sat 06 Dec 2025 20:42:49 +0000
Manifest next update:     Sat 13 Dec 2025 20:42:49 +0000
Files and hashes:         1: muAi3ZD6yvK8XHN26KhM5QUeiWo.crl (hash: fRO5mYjeaQ26f6H/mH/ERDS5IVK93R5tX6/57lfFEfI=)
                          2: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (hash: Cao5bthPX96QQ3SQheHb0r7GeyEcmcCxx6iv6SXw/fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl
                          rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919271C, serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
        Validity
            Not Before: Dec  6 20:42:49 2025 GMT
            Not After : Dec 13 20:42:49 2025 GMT
        Subject: CN=69349549-3fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:e9:d5:d6:1d:2d:f6:e6:e9:ad:e0:93:eb:
                    af:6f:86:10:36:6a:9f:a8:88:61:a1:69:19:29:9c:
                    d1:a8:d3:76:dd:8e:4d:76:e8:bb:59:4e:9f:e1:bf:
                    6d:04:94:40:00:91:45:22:29:55:8c:5a:0a:67:c4:
                    d2:1c:81:9a:9d:4f:61:91:a1:6b:3a:ca:31:22:b1:
                    73:70:d8:7b:2a:0a:f7:45:69:88:22:fd:91:e7:0f:
                    c3:8e:65:4e:f4:13:39:ab:90:67:ec:19:d3:00:f1:
                    34:c8:5a:8d:e7:5d:84:a0:7e:88:f6:8d:d7:4c:07:
                    c5:eb:8e:1c:46:5d:cf:c4:21:22:fd:dd:4c:d7:b1:
                    9d:bc:a6:76:40:9d:b8:11:f0:77:f7:3b:e5:c4:45:
                    4f:a1:75:6d:2c:d8:c9:29:8f:56:41:41:5f:c2:71:
                    d5:90:9e:58:e2:14:b6:81:1d:a3:a0:f4:e8:fe:75:
                    cc:95:91:c3:d1:7b:7e:6a:5a:b3:fa:99:eb:16:f4:
                    9c:36:49:6b:23:2f:4a:42:cd:b4:cb:00:f0:61:d1:
                    9b:e4:af:68:aa:da:81:c0:4c:fb:e8:10:05:2a:30:
                    88:e8:ec:2f:81:e6:85:50:26:be:3d:0a:f6:d1:88:
                    c5:5f:13:6d:18:29:2f:5b:b3:e9:e8:cc:7c:ac:df:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:42:49:E8:A0:25:B5:EA:55:D0:B5:62:34:06:1D:96:1E:26:C7
            X509v3 Authority Key Identifier:
                keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:29:df:44:6f:18:ff:22:3a:b2:d6:bd:45:bb:3a:17:32:94:
         00:18:ff:4f:b3:5a:ff:bb:cf:cb:8d:a5:e6:2a:05:41:8b:61:
         7e:9e:f8:50:18:c2:cb:29:4e:cf:2a:93:27:58:9e:20:69:2f:
         e0:95:fa:29:1b:77:e7:2a:45:6a:18:e9:79:cd:b4:a6:42:37:
         20:e2:01:6e:38:35:d2:e5:bb:85:01:e3:5f:08:91:ac:38:a8:
         60:9c:4e:62:ea:3f:4f:12:64:6c:9c:38:12:ba:88:c4:c7:32:
         54:b6:84:91:95:9d:52:76:38:d6:f6:d6:3b:6e:52:35:d1:68:
         70:1d:e9:db:cd:61:f0:53:ae:c9:ad:2e:35:6f:3e:5d:50:7f:
         14:33:a0:6f:0c:a0:f7:64:8d:8b:60:3a:ac:0a:0d:fa:8e:8a:
         8f:10:6c:58:e6:44:9b:6a:c5:45:c2:fe:48:fc:7c:32:2a:82:
         61:0f:62:e2:91:31:59:81:ef:81:59:f2:6e:de:29:ab:0c:ad:
         a2:72:f9:1f:22:15:9b:7b:d7:5b:a1:df:4e:18:71:04:e3:6a:
         fc:16:a9:2f:ff:e5:e3:78:d2:b8:da:9b:d7:79:75:9c:f4:23:
         c1:32:97:77:56:56:19:68:99:b8:49:16:43:48:90:07:db:e0:
         67:97:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 14:26:33 2025 by rpki-client