This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File:                     DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier:          hwxfIX29RHSzxAflTg+es0GMc5vv4ffJAdk7Z0BI8SE=
Subject key identifier:   3A:58:77:A7:F9:0A:A2:47:DF:74:EF:60:18:B8:89:A8:CB:E4:A6:BF
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       07F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number:          07EB
Signing time:             Sat 06 Dec 2025 20:12:37 +0000
Manifest this update:     Sat 06 Dec 2025 20:12:36 +0000
Manifest next update:     Sat 13 Dec 2025 20:12:36 +0000
Files and hashes:         1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: chVguYcYEjf6HjcsZel3+8grZlYaW1E76hAzdJQhA4A=)
                          2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=)
                          3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: 8JiU8Oos87rOfxfxW5raSyPKQ8t3Ze/tzK20sDot2kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2035 (0x7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Dec  6 20:12:36 2025 GMT
            Not After : Dec 13 20:12:36 2025 GMT
        Subject: CN=69348e35-57de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:70:b3:b1:8c:ea:e6:cd:03:20:e0:2d:a5:
                    e1:c0:be:6b:2d:fc:45:9c:4c:bb:55:d8:04:0b:31:
                    62:d9:32:56:89:b1:64:76:d6:ca:70:9b:73:d8:60:
                    83:0e:dd:63:dd:5e:12:61:9c:e2:69:d2:f9:07:5c:
                    fc:03:e8:84:13:f9:66:e7:3d:53:74:88:86:98:4b:
                    c6:ab:db:3a:d7:e0:ad:79:80:a0:f1:e1:00:ef:a8:
                    c0:a6:09:e4:7b:ff:ef:33:58:00:cd:51:bb:64:9f:
                    5f:12:28:f2:46:a1:74:ac:9b:52:0d:c3:f9:88:5e:
                    d7:37:0a:56:45:78:8e:66:fa:0d:e7:db:f3:2d:b2:
                    b1:b8:c4:07:ee:22:85:a4:43:8a:36:f1:6d:4b:bd:
                    b1:d5:aa:fb:2d:6c:b3:b0:e8:d4:95:9e:5f:41:62:
                    7e:a0:fc:5a:37:0a:cd:6d:cf:2e:4b:b5:2e:d9:e1:
                    15:a7:4a:48:37:cc:dd:1d:f1:b8:ce:26:a7:75:90:
                    14:f8:ab:57:88:4e:db:f1:f7:ec:95:5d:9c:60:15:
                    85:f1:09:26:df:43:87:3f:66:ff:2e:17:4e:33:91:
                    5f:38:bb:7b:20:d0:a1:18:a1:1a:eb:21:2f:58:04:
                    8d:e1:ed:e3:0a:25:97:08:db:bc:a4:07:d7:8e:7e:
                    dd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:77:A7:F9:0A:A2:47:DF:74:EF:60:18:B8:89:A8:CB:E4:A6:BF
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:82:c1:66:b3:f7:da:56:36:87:f5:d8:e2:38:77:d4:9c:7c:
         ef:d7:97:32:75:fd:82:17:a3:89:9a:17:0c:dc:f7:a3:20:77:
         c2:c3:00:42:0c:03:f8:4a:7c:c1:3a:a6:6f:d3:be:f8:81:76:
         d8:7f:ee:8a:04:4b:38:59:c1:92:12:22:9d:35:f6:da:64:b5:
         53:c4:65:bb:d1:ef:81:e9:44:b6:14:46:4f:d5:74:0d:f8:f9:
         ca:50:35:01:56:73:6d:30:a6:74:ab:6f:73:75:ba:18:87:3b:
         db:3c:5d:e1:f8:f7:cb:e1:b4:59:8d:5b:5a:98:80:ee:36:08:
         4f:b0:46:d4:15:72:e6:25:48:57:b8:a0:63:4d:c4:6f:ca:8d:
         12:80:9b:b0:3e:63:55:84:c7:c0:09:c7:ee:b8:10:0f:fa:36:
         51:ac:f5:b7:a0:45:a0:98:e5:cf:30:f7:6e:32:b9:11:44:a4:
         0c:56:37:b6:f2:b8:7b:06:be:c2:c3:2e:43:b0:bd:d7:de:f2:
         03:8b:2e:e0:c1:cd:b9:66:b6:a9:d6:22:7e:e3:56:dc:ac:1b:
         20:3f:40:d9:34:82:ef:8d:0e:3d:0e:98:73:95:cb:49:5d:60:
         8b:a3:c3:8d:24:99:61:d5:9b:08:a1:40:d9:fe:aa:bd:ef:0f:
         ff:8b:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:58:41 2025 by rpki-client