This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
File:                     92edhcQsfjk3x9JAjAZ5uVznEXk.mft (raw, json)
Hash identifier:          NdM365gz8S4KHsAxS+Ui2sO3VrH+H3WmPnT6lT72Xk4=
Subject key identifier:   FF:47:9B:8C:63:52:9E:A3:5F:D6:D5:82:DC:37:0C:AD:00:AB:F9:DB
Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79
Certificate issuer:       /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
Manifest number:          95
Signing time:             Sun 21 Dec 2025 05:33:01 +0000
Manifest this update:     Sun 21 Dec 2025 05:33:00 +0000
Manifest next update:     Sun 28 Dec 2025 05:33:00 +0000
Files and hashes:         1: 92edhcQsfjk3x9JAjAZ5uVznEXk.crl (hash: pfQ4nqh083Sv/JUk7nmwNi6BgeIZ+ugtg6HPkBe2W7o=)
                          2: 01103988FB5911EF8B32E613C4F9AE02.roa (hash: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl
                          rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
        Validity
            Not Before: Dec 21 05:33:00 2025 GMT
            Not After : Dec 28 05:33:00 2025 GMT
        Subject: CN=6947868d-a8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:df:cc:eb:ec:e6:5d:6b:79:ee:ba:f5:90:
                    4a:c0:f0:8f:bc:fa:d3:b1:d1:f7:95:4a:b9:71:9a:
                    ef:8f:49:08:df:6c:4c:6e:c4:62:5b:f4:82:b3:a2:
                    1d:e2:d0:29:1c:a4:bb:98:bb:8c:b0:d7:0c:8c:c0:
                    7d:9e:b1:fc:13:f8:b0:e4:6c:ec:8a:6c:26:35:f9:
                    02:cb:59:c8:63:c7:d4:30:8c:de:1e:ba:17:56:71:
                    db:e6:d1:60:9c:93:dc:54:e0:f4:42:a4:84:15:a8:
                    a3:92:75:89:0a:8a:1b:44:e8:c0:16:67:ef:69:52:
                    6c:42:13:71:03:bc:94:08:d8:f2:51:bb:19:6d:8a:
                    1d:77:da:95:b0:38:a0:52:7f:26:90:1b:5f:b9:86:
                    99:b2:a9:1b:59:1c:cb:1f:78:b2:82:47:6d:e3:9c:
                    9a:a8:31:db:2f:8c:5f:fe:42:92:58:9a:bf:e6:bc:
                    48:9e:7a:04:fa:04:94:90:78:fa:aa:32:06:9b:13:
                    b0:07:b9:6b:27:ea:ab:f8:fb:82:a8:64:fd:9d:49:
                    89:ca:9d:79:af:13:87:a6:c3:24:60:f6:6c:e4:af:
                    a4:be:47:21:e0:24:4b:37:9e:88:53:64:53:5f:1a:
                    5a:ce:fb:58:3e:0e:96:42:bf:04:2d:19:e1:95:0f:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:9B:8C:63:52:9E:A3:5F:D6:D5:82:DC:37:0C:AD:00:AB:F9:DB
            X509v3 Authority Key Identifier:
                keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:26:81:e5:d1:ce:88:72:f6:09:46:d9:be:d0:e5:38:03:80:
         d2:f1:23:55:5a:c8:89:c1:33:36:17:29:c5:9e:d5:cc:6b:cd:
         a1:d0:f4:19:34:6f:8b:e8:8e:a9:ec:17:77:21:c0:ee:bf:c8:
         e5:93:0a:5c:41:0a:3a:17:56:8e:1c:67:c5:9b:a6:96:ca:ac:
         3a:5f:55:1d:b1:37:63:d4:49:d7:3d:2f:39:4f:1c:16:9a:9b:
         a4:8e:a2:66:95:6b:a0:81:d1:1a:74:13:84:6c:03:ab:a1:b7:
         0c:20:b4:7d:19:0b:8e:35:93:79:c5:88:d2:56:ce:60:00:bb:
         79:a2:c1:29:42:81:58:14:d4:56:5f:58:43:00:b2:04:fb:6e:
         05:e7:a2:24:d6:e8:f9:25:f9:44:5d:d1:b8:1d:eb:17:c6:d0:
         60:5d:ce:74:88:11:bb:7e:fb:36:50:59:0d:f4:6f:24:42:55:
         e4:70:a3:51:20:68:5b:d0:ba:33:f4:78:44:b8:2f:1a:7e:93:
         33:b0:ff:ba:b9:a0:8e:40:3a:ef:10:1a:59:f0:a6:58:21:97:
         bc:d2:14:54:6a:58:ce:ed:2d:ff:f1:68:97:31:12:e6:09:ee:
         00:2a:0e:cf:58:59:d9:7d:dd:4e:9f:28:63:51:86:f1:86:b3:
         8e:4d:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:07:25 2025 by rpki-client