This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
File:                     j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json)
Hash identifier:          bpQTXDgC2aBywBM2pUzdpWrU44czT8a4zXhRjczvPE8=
Subject key identifier:   CA:CD:7F:22:8A:AB:13:7A:B8:53:B2:55:6E:1A:04:7E:97:0C:22:EB
Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
Certificate issuer:       /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
Manifest number:          C0
Signing time:             Wed 03 Dec 2025 04:17:53 +0000
Manifest this update:     Wed 03 Dec 2025 04:17:52 +0000
Manifest next update:     Wed 10 Dec 2025 04:17:52 +0000
Files and hashes:         1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: kqVXcJfOLvHP74rlUol077x0TG1tvy8RlOo0odz+evg=)
                          2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 04:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
        Validity
            Not Before: Dec  3 04:17:52 2025 GMT
            Not After : Dec 10 04:17:52 2025 GMT
        Subject: CN=692fb9f1-9519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:cd:16:65:8c:89:b3:68:54:ab:dd:0f:d6:
                    b2:1c:5a:34:79:f7:fe:1c:0b:df:50:17:3d:4c:64:
                    24:31:e6:73:6a:12:9d:60:72:6f:51:ef:a4:8e:ad:
                    a0:e2:99:d1:94:67:dd:8d:57:04:fd:08:37:7e:2a:
                    65:bc:c9:3e:f1:c1:61:84:2c:d0:32:86:47:2d:6f:
                    b5:9d:e8:45:86:e1:e9:50:04:71:bb:5f:a9:e1:9e:
                    ca:09:08:93:d2:99:12:72:10:44:54:70:d0:35:be:
                    74:35:a1:c1:86:ad:82:d5:25:c9:fc:7d:9f:a3:dc:
                    8d:37:ae:33:e1:1e:3c:f3:62:cb:3e:b3:f2:98:c0:
                    61:dd:b0:88:3a:59:bf:4b:8a:08:a1:5a:bc:56:19:
                    22:24:33:74:e7:82:c9:b7:7b:cc:61:13:f9:55:3e:
                    f3:38:33:ce:0d:0c:ca:bd:4e:0c:c1:f9:b3:26:e9:
                    63:a4:17:4f:b4:62:63:24:98:6d:5e:6a:26:d1:04:
                    dd:62:38:01:26:16:d2:a3:0b:a9:12:c3:97:cc:07:
                    88:0d:d5:20:c7:56:7b:4b:8f:bd:7b:ff:28:59:77:
                    8f:51:8d:52:29:2e:5c:0d:9c:ed:6f:7f:3e:f4:a0:
                    8b:9a:16:22:92:45:cb:6d:e1:02:4d:90:98:d2:8e:
                    ac:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CD:7F:22:8A:AB:13:7A:B8:53:B2:55:6E:1A:04:7E:97:0C:22:EB
            X509v3 Authority Key Identifier:
                keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:94:30:c4:95:d5:5a:99:a4:99:98:a2:d1:7b:16:de:e7:
         9b:5f:5d:df:53:b9:9c:09:f5:5a:95:46:99:c8:21:0b:59:a2:
         26:65:07:26:ef:c9:78:bd:86:11:e3:41:0c:cd:90:76:2e:c7:
         21:d2:53:50:74:0d:84:76:40:82:c3:24:1d:8d:20:90:f0:24:
         8d:d7:9e:c2:9a:55:7d:61:18:91:d4:74:a9:9c:c9:ae:69:7a:
         9d:80:80:45:a3:32:bd:69:03:bc:7f:e9:25:79:a5:67:69:51:
         ec:1f:fb:19:09:82:19:06:27:c6:2e:26:1f:25:c6:f2:5e:d5:
         6d:33:4c:4c:70:6f:74:c7:79:19:87:3a:98:55:79:b6:88:96:
         94:23:25:15:db:fb:a9:4b:d1:a0:7d:8e:0b:d5:7d:f4:48:5e:
         e3:3d:50:bf:e4:e9:08:5f:a5:db:ef:05:a7:9b:7a:89:e4:df:
         60:59:77:eb:d8:15:a9:8d:37:79:fd:7f:24:3e:8a:98:8e:63:
         86:6b:e5:ea:97:8f:01:7d:98:da:26:0a:52:a5:c5:02:74:b8:
         3f:43:47:f5:f5:91:84:81:54:ed:cc:93:3a:0c:29:d4:33:90:
         a6:74:b6:d8:de:3c:5f:a5:58:25:61:43:6d:5f:c0:4c:ba:b7:
         65:3a:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:48 2025 by rpki-client