This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
File:                     mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json)
Hash identifier:          j5PoMITy5zs7tiTWHcCH2WKDzHEACHJlk0T+LFsLDWI=
Subject key identifier:   EF:1F:21:B8:21:A9:25:5A:EA:DE:D0:2B:06:3E:AA:0B:B5:A8:C8:8A
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Certificate issuer:       /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial:       0502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
Manifest number:          04FC
Signing time:             Sat 06 Dec 2025 22:25:58 +0000
Manifest this update:     Sat 06 Dec 2025 22:25:57 +0000
Manifest next update:     Sat 13 Dec 2025 22:25:57 +0000
Files and hashes:         1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: U69K9XKVvSHSfooK6WYnl+YSv6xVs6iSqLkPr3pZ+vQ=)
                          2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
        Validity
            Not Before: Dec  6 22:25:57 2025 GMT
            Not After : Dec 13 22:25:57 2025 GMT
        Subject: CN=6934ad76-09a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4a:73:88:25:79:e3:23:7a:f9:39:84:2e:7a:
                    f0:ff:3a:36:a6:ca:83:2c:67:2c:3c:28:17:06:63:
                    4c:55:fb:d7:4e:99:6e:6f:e8:41:f3:15:69:4d:1d:
                    a4:93:ed:eb:78:81:1d:b9:6c:61:95:5e:94:90:7a:
                    72:ac:12:98:f5:17:e4:3e:5c:70:20:97:74:b5:59:
                    a6:b0:87:a8:b5:73:46:ef:53:e0:80:db:13:fc:1a:
                    11:72:18:08:c3:c3:a0:38:0e:f8:83:2e:36:6f:e1:
                    2f:e4:d2:d4:df:c5:ec:cd:b1:b2:bc:55:14:b4:7b:
                    8d:c4:ff:b4:82:22:68:18:6f:ec:3c:f0:8c:97:01:
                    7b:27:1c:d1:e6:fd:fe:18:65:17:7d:b0:a9:cd:1b:
                    cf:99:f9:55:95:0d:6c:7d:0a:19:ba:70:aa:3b:30:
                    a3:b7:19:37:c8:13:11:4e:cc:7b:9c:d0:be:49:9d:
                    75:82:4a:21:29:fa:b2:1e:0a:75:e7:6c:32:b9:e1:
                    22:e5:3f:f8:6c:34:1b:3f:e3:eb:fb:77:aa:5f:5f:
                    ba:0e:51:03:7d:f6:a9:ab:92:47:4a:7c:1b:56:32:
                    93:c9:d5:c8:a7:fd:50:2d:39:cd:6b:1b:40:77:c5:
                    b5:8b:5a:40:25:8a:70:80:1b:ee:88:94:f6:1f:16:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:21:B8:21:A9:25:5A:EA:DE:D0:2B:06:3E:AA:0B:B5:A8:C8:8A
            X509v3 Authority Key Identifier:
                keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:54:9c:92:67:b4:ed:53:47:91:97:32:65:1a:3b:3d:4f:4a:
         24:d6:69:06:f7:eb:c9:4d:39:6b:a1:93:94:98:98:d7:db:73:
         29:b9:36:bb:44:8a:01:78:31:ca:e2:29:85:b0:26:9d:d6:0d:
         b5:da:7a:49:df:7d:1e:5c:5f:87:b9:f5:bc:05:99:4f:41:98:
         a1:92:22:45:1a:c4:a9:3a:f9:c1:97:47:df:0e:f8:52:4a:0a:
         c9:9b:3d:77:23:da:35:99:59:07:82:0d:fc:8c:63:33:57:d6:
         65:c6:6a:f3:bc:49:57:12:23:8c:c9:33:bd:f5:93:17:18:11:
         20:90:52:9d:07:64:63:c4:0c:a4:dd:3b:db:06:8d:4f:e7:bc:
         42:be:85:ff:ee:8c:af:fc:96:c5:20:13:94:8f:3b:2f:72:a1:
         8d:4b:72:87:8c:b8:1a:d2:a4:3e:f3:35:dd:e0:13:40:40:98:
         43:ed:5a:36:01:6c:ab:ac:aa:c5:b9:d0:90:a2:ad:99:77:4f:
         5d:b6:c5:53:07:85:e2:d2:6f:aa:f6:1b:e5:ca:93:bd:37:42:
         a1:12:01:c7:3d:69:fc:8a:d9:b5:de:bd:e4:61:98:5a:cd:67:
         4f:18:93:2e:8e:26:b1:bc:11:16:85:29:15:b6:cb:5f:b6:0e:
         62:12:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:17:48 2025 by rpki-client