This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
File:                     dEeyg16suIrEhyfLcmu4e5e6d4o.mft (raw, json)
Hash identifier:          dO4EOEOc8NXpaO90KvW45FmlFTNIqiq6MxAz9R3vYsA=
Subject key identifier:   D3:39:36:13:3F:85:2F:10:27:98:85:2F:41:B7:7B:65:57:FE:A6:0F
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Certificate issuer:       /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial:       083A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
Manifest number:          082A
Signing time:             Tue 16 Dec 2025 20:26:07 +0000
Manifest this update:     Tue 16 Dec 2025 20:26:07 +0000
Manifest next update:     Tue 23 Dec 2025 20:26:07 +0000
Files and hashes:         1: dEeyg16suIrEhyfLcmu4e5e6d4o.crl (hash: aLGDFzEMaDsUbpOeysxFaxCbkhaSgH1JElkAvrkjFHs=)
                          2: 5B196FD80A4611ECAE818D54C4F9AE02.roa (hash: WyH0ZPwbZvNsL+0AKk2f+JuP3I7jSQdqDW08OMuOOTM=)
                          3: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (hash: x40FMjyhrIBfTk8/yc4c2wF8kybpgUwEO3HTguXSoZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 20:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2106 (0x83a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
        Validity
            Not Before: Dec 16 20:26:07 2025 GMT
            Not After : Dec 23 20:26:07 2025 GMT
        Subject: CN=6941c05f-1a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:d4:8d:6a:d6:31:a0:d9:52:d3:c8:be:36:
                    ce:3d:2f:ff:1f:ed:ec:1b:5d:8b:bc:57:fa:73:34:
                    43:fa:48:25:5b:16:90:82:9e:42:f0:0c:ed:09:7f:
                    5b:0e:77:5a:dd:99:a5:dd:1a:a8:d2:63:2a:49:05:
                    d9:e5:1a:2c:7a:b7:ae:80:7f:89:75:92:1a:6e:e7:
                    d4:f2:87:6a:76:dc:61:fe:d1:1b:08:3d:cc:4e:b9:
                    f7:b3:db:ef:e5:2e:eb:0f:a4:b8:5c:f8:2e:98:1b:
                    5a:46:7d:30:b3:a9:f6:52:e2:52:67:c6:72:d6:1d:
                    42:ce:4d:ba:95:4e:0d:9c:a3:9a:28:23:9b:aa:66:
                    7e:25:c5:2a:35:80:71:7f:a7:cb:3d:07:f7:51:7a:
                    df:53:2a:8f:24:d6:5e:38:36:97:ae:1c:c6:7d:01:
                    ab:46:58:bd:3f:5e:b2:2c:ba:fe:bd:4f:c5:13:ad:
                    df:b5:55:0c:6c:85:18:5a:ac:a6:03:8c:e3:e9:cf:
                    d8:02:80:b3:09:de:f4:44:1e:93:9c:05:d0:98:fc:
                    58:b5:1e:80:b6:73:d4:66:84:8a:61:b3:ab:5d:0e:
                    7c:7e:6c:19:e0:b7:d8:18:c0:bf:06:be:a4:73:7d:
                    10:9a:73:c7:a3:24:f2:ca:30:29:68:3c:57:b7:b4:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:36:13:3F:85:2F:10:27:98:85:2F:41:B7:7B:65:57:FE:A6:0F
            X509v3 Authority Key Identifier:
                keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:23:70:95:1d:14:14:70:22:ab:0f:a1:76:13:b5:45:9b:
         50:f4:3a:95:0c:dc:9d:f1:6c:bb:ab:48:35:ff:85:ff:fd:5f:
         85:0d:54:d3:bc:8f:8f:53:3e:c4:f1:4f:59:59:0f:8b:29:4f:
         87:41:7e:9f:f1:d7:b6:92:2b:a2:43:ba:b2:5b:88:12:c0:0b:
         93:44:ac:60:99:36:44:59:0e:4c:39:3a:39:88:1f:53:45:2f:
         47:65:0e:1a:dd:b7:41:3e:2d:58:db:6b:35:be:90:24:10:1e:
         39:8a:47:9d:b7:0d:47:b5:ce:d6:1a:63:52:2e:cb:93:bf:2b:
         97:d2:e8:b1:51:62:bf:7b:39:e6:bd:fd:86:bd:d4:4e:24:0b:
         c3:17:77:b6:86:e1:35:6f:f3:37:37:e2:ff:c7:65:5c:a7:44:
         e6:81:0a:43:ff:bb:6d:8d:77:87:63:cd:75:be:7e:7d:e7:7f:
         4f:0d:dc:60:a3:c6:d1:bb:bf:29:e0:f6:56:85:b6:31:88:2c:
         fb:eb:e9:21:4b:cd:45:17:17:2b:47:5c:d7:c5:e8:4b:07:75:
         d2:ad:fa:de:1a:0f:5c:bf:ea:2c:fe:bd:d1:ba:97:95:0c:fc:
         2b:f2:46:ac:b7:42:8c:71:88:38:2c:af:28:55:cc:c1:8e:4a:
         ce:77:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:42:01 2025 by rpki-client