This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          gfMnUtIYw74quat+V8acKZ0K0cYeDGrvepd8CuX6cps=
Subject key identifier:   2B:0F:9C:21:0D:44:F4:7F:1D:82:69:F4:93:A9:10:9E:74:97:14:B5
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          94
Signing time:             Sun 07 Dec 2025 04:37:46 +0000
Manifest this update:     Sun 07 Dec 2025 04:37:46 +0000
Manifest next update:     Sun 14 Dec 2025 04:37:46 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: xKOnBWjNEX45NT0xJ9qipacbrbvIk3PDgKcd+dyU2n4=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 04:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Dec  7 04:37:46 2025 GMT
            Not After : Dec 14 04:37:46 2025 GMT
        Subject: CN=6935049a-7db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:80:2e:b1:88:42:a0:a3:98:37:47:67:dd:
                    73:96:ce:a7:2f:7f:b9:29:dd:27:22:9d:b1:ab:28:
                    b8:98:d0:17:e4:a5:9b:ff:5d:7f:21:7f:1a:9a:85:
                    cb:64:f4:b4:d7:54:af:ff:79:ad:02:d0:0f:4b:b4:
                    f8:27:d8:91:02:2d:44:99:a0:75:7f:f3:83:c3:ea:
                    47:7f:7c:fc:3e:39:1a:03:5e:89:1c:e1:15:d3:12:
                    58:8b:e8:db:5a:69:c9:91:9b:ce:df:a1:66:65:87:
                    d1:74:cf:86:21:ee:0b:65:ef:ea:62:a6:bf:61:08:
                    86:e9:67:87:cb:1c:24:ae:5b:32:40:5f:d3:65:d9:
                    99:e4:b1:f6:76:df:b7:36:2d:ec:e1:65:26:48:71:
                    bf:83:d5:c5:36:71:4c:90:9c:b2:bf:c7:a8:19:ce:
                    b2:0a:75:51:cf:e9:71:f6:63:24:87:36:46:70:fb:
                    f6:15:06:20:04:99:1b:4f:1b:12:5b:36:02:04:c8:
                    68:dc:ab:dc:c0:2b:55:a3:c3:8c:52:66:28:99:0a:
                    3f:21:3f:13:80:0d:14:88:dc:ea:03:46:44:95:a6:
                    09:ac:c1:3d:d0:89:e6:7c:34:77:16:ff:ad:53:a8:
                    d1:30:36:03:8f:82:b9:16:cd:5e:4e:de:13:3c:80:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:9C:21:0D:44:F4:7F:1D:82:69:F4:93:A9:10:9E:74:97:14:B5
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:97:41:f0:3a:fc:e0:47:07:74:87:c8:11:2f:2e:e0:8f:
         0b:d0:aa:42:d8:7c:e3:af:d3:42:c9:6e:5d:a2:cf:8c:44:02:
         55:81:5b:c6:05:89:70:19:5e:ac:2d:fb:a8:fe:1d:ae:14:15:
         39:d8:d0:e2:8a:fc:0f:79:97:d1:a1:90:8f:51:19:e9:a6:d7:
         4b:52:1a:23:af:84:f6:24:22:3e:aa:cc:d9:04:59:79:f4:60:
         0a:1e:ac:36:e6:7b:00:e3:0b:d3:38:9f:76:6d:74:74:91:ad:
         35:4c:a7:42:ee:ee:00:b3:d9:94:41:8c:48:a6:7a:b2:ed:21:
         ec:5e:49:ed:14:71:cb:35:96:d4:94:7a:5f:99:4f:96:b1:2c:
         1d:e9:09:9a:10:85:04:81:2c:26:39:c4:29:35:96:e0:51:02:
         ef:cb:04:5a:20:e0:c1:3a:4d:4a:f9:db:6a:c9:08:81:a5:c9:
         14:a5:cc:09:a4:79:8e:20:0b:c9:b3:ce:70:7f:f9:47:6d:80:
         ea:a5:1a:59:b6:7c:2d:df:b1:b7:c3:61:6c:a8:c6:66:f0:f6:
         ac:67:0f:e5:62:2f:f8:b3:b3:2f:08:f9:b5:9b:98:f0:69:21:
         0b:64:b8:98:68:58:f2:84:9f:0e:38:28:75:97:21:d1:90:0a:
         0a:df:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:25:44 2025 by rpki-client