This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
File:                     D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json)
Hash identifier:          tzAz04KCgK6CH1zax54mOFaL49ouhgrsOtIzlyqBmsE=
Subject key identifier:   62:D5:17:B4:46:8D:EC:D4:F7:BE:33:71:36:61:0A:9B:F7:53:38:7F
Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
Certificate issuer:       /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
Manifest number:          022A
Signing time:             Sat 13 Dec 2025 01:25:30 +0000
Manifest this update:     Sat 13 Dec 2025 01:25:30 +0000
Manifest next update:     Sat 20 Dec 2025 01:25:30 +0000
Files and hashes:         1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: QpaHj60Xi4EO1kNTp7gcDM//MuJCQoRIsW+XuZXijNU=)
                          2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: 50hi2vNUebBRUz8ceA03XMTbcW3zeli1X+BmJSriA30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 01:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
        Validity
            Not Before: Dec 13 01:25:30 2025 GMT
            Not After : Dec 20 01:25:30 2025 GMT
        Subject: CN=693cc08a-9bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:a5:5e:fb:4a:55:77:84:4d:09:68:0c:e7:
                    36:5a:78:b0:44:45:00:94:c1:84:74:f6:63:1b:70:
                    4b:37:8e:35:88:99:4d:0f:6a:48:cf:d1:0e:64:4f:
                    06:ed:08:80:cf:6d:88:82:af:0f:b8:96:9d:7f:60:
                    78:05:16:d1:10:e2:59:97:6c:16:53:f0:02:b6:14:
                    12:90:e4:a8:8c:39:59:9b:29:a0:79:c3:92:26:e7:
                    46:7e:2b:4f:a5:2a:6b:cd:3e:11:40:7f:08:2b:cf:
                    4b:4a:be:76:b3:7b:e5:11:01:7a:c9:08:d3:89:15:
                    fd:7f:8b:6c:02:f0:2e:25:54:fc:a7:a6:1c:52:7b:
                    cd:c0:24:63:92:96:1f:62:b8:ee:42:b1:ac:d3:dd:
                    53:9e:cb:0e:b9:fd:f3:ad:f4:70:52:70:0f:cf:15:
                    e0:6a:17:15:16:4c:bf:ef:0f:5f:ac:10:5b:55:51:
                    fc:be:38:2b:5d:b3:46:f8:0b:68:9d:b7:03:c3:a8:
                    44:3f:80:34:c0:3d:59:36:d5:92:89:18:af:44:20:
                    bd:60:fe:65:06:e4:d6:19:15:9f:0d:e9:51:ef:00:
                    42:3e:3a:5f:8b:65:4d:48:8f:6f:06:fc:cb:66:29:
                    fd:80:ae:1a:6f:d6:96:6d:0f:27:63:a2:09:12:92:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:17:B4:46:8D:EC:D4:F7:BE:33:71:36:61:0A:9B:F7:53:38:7F
            X509v3 Authority Key Identifier:
                keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8e:85:60:ef:e0:31:f1:c8:db:14:ea:fb:8f:ea:f8:06:b6:
         72:f6:a5:e9:8d:40:48:c2:c0:91:bf:e1:73:00:54:46:33:ed:
         60:7e:f1:4c:65:76:1d:75:cc:b9:af:67:38:97:d6:6e:2e:a8:
         0a:9e:1b:e1:c0:b4:89:a8:f8:72:77:b6:c7:6e:b2:b6:d2:68:
         b2:1e:2e:15:aa:d3:70:99:6e:16:ef:e0:7e:51:ef:ae:f9:26:
         fc:d8:40:d6:51:de:1a:09:09:0c:5b:61:d6:e6:90:58:10:a7:
         26:96:2a:8e:5f:9d:32:de:1a:44:5c:f0:e4:0e:f2:2e:54:96:
         06:86:a3:0f:21:c4:bc:58:83:a8:52:d1:ca:36:7e:76:f9:84:
         86:c4:03:ac:93:92:04:80:af:00:8c:3e:37:d6:08:1d:cd:67:
         56:f5:02:cd:3f:92:cc:cd:6a:18:12:b1:ef:2b:03:a6:07:7b:
         4a:e1:ce:01:87:59:65:52:a0:ba:24:af:db:6d:3b:18:00:07:
         29:be:9d:67:58:13:1b:ba:61:ea:9c:9c:c9:37:b3:8e:ab:21:
         3e:7d:10:50:ef:c1:2a:c5:d9:52:41:82:47:be:e5:d5:a0:5a:
         a1:3b:dd:ac:80:55:0d:16:36:87:cf:ba:64:27:f9:e0:35:59:
         56:43:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 05:03:27 2025 by rpki-client