This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File:                     dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier:          KXp1XY91limGfnGONGI6e6cOeLcMPDWKI0KhttIDmhQ=
Subject key identifier:   B1:DA:2D:EB:D3:4E:09:F4:08:DE:4D:E9:76:E3:0D:0B:0E:48:90:32
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer:       /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number:          4B
Signing time:             Wed 03 Dec 2025 05:31:37 +0000
Manifest this update:     Wed 03 Dec 2025 05:31:37 +0000
Manifest next update:     Wed 10 Dec 2025 05:31:37 +0000
Files and hashes:         1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: 7/o5FJoqhglNbQ6VRHpNFpbGBlJmOnFV8hKsKdzcOgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
        Validity
            Not Before: Dec  3 05:31:37 2025 GMT
            Not After : Dec 10 05:31:37 2025 GMT
        Subject: CN=692fcb39-e90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:36:bf:93:6b:9b:66:fe:23:4d:df:f5:a7:
                    9f:e5:c6:38:05:57:02:01:c0:0c:34:eb:e1:2a:c5:
                    75:22:8e:3b:4e:17:15:cd:ff:b8:ca:23:50:e4:dc:
                    53:9a:92:84:54:db:ce:f0:25:ff:fc:75:8f:ba:19:
                    f2:dc:f3:52:23:96:69:b8:37:54:5a:0d:86:3d:42:
                    1a:f4:d8:ed:23:5a:c9:2d:92:82:4a:33:99:d5:8b:
                    34:6e:dc:7d:65:b1:c3:82:4c:98:8e:b9:29:44:6a:
                    7a:2a:9c:3b:45:97:19:cb:ea:f4:d7:2b:78:e1:95:
                    8e:98:ca:f0:ee:7d:09:ce:fc:25:89:eb:66:72:d0:
                    3b:d2:03:64:6b:74:64:2d:64:81:84:85:f0:27:5f:
                    bc:80:65:89:e7:c5:ab:b9:84:56:cf:4f:58:3a:9c:
                    fb:d1:0a:31:56:9e:83:6d:f4:95:ea:28:c5:a3:09:
                    cb:6a:c6:55:c6:8f:7f:71:c7:fb:ce:e0:08:be:2b:
                    75:09:46:2e:8d:a7:85:32:12:00:ea:55:77:fc:7a:
                    08:eb:0f:4c:81:38:b4:c5:40:3f:e2:62:59:1b:63:
                    d8:9a:c3:dd:f1:95:a8:a4:61:0c:ff:9f:67:fa:00:
                    a8:e4:e3:26:f5:82:51:0e:00:2e:a3:28:b9:15:ae:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:2D:EB:D3:4E:09:F4:08:DE:4D:E9:76:E3:0D:0B:0E:48:90:32
            X509v3 Authority Key Identifier:
                keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:a2:60:97:c3:05:ce:50:56:8f:db:45:16:a2:07:ac:47:
         5c:68:8b:5e:7c:ff:b7:0a:4d:d3:0b:96:1f:bc:10:6e:df:6c:
         89:02:60:b0:3f:34:c6:45:0a:39:73:77:28:c1:f2:37:61:cd:
         a9:ff:6a:04:cd:5a:e7:61:61:28:c0:2e:73:89:86:5a:f7:49:
         e1:e5:be:46:e2:8a:e5:bb:04:7a:bb:ff:b0:fb:dd:28:f2:89:
         23:9c:24:bc:96:ce:88:cd:5a:6f:46:a9:f5:05:e1:1a:bd:7d:
         b2:c7:cc:19:ef:4d:50:92:f8:79:6e:bf:b5:ca:4f:42:cf:ff:
         9d:2b:f3:ce:15:c1:90:9a:c3:37:77:04:ee:7a:23:b7:3b:d3:
         25:0e:14:9c:e5:5c:94:ae:c1:c4:e0:bb:9d:e5:49:88:e1:e7:
         21:54:5b:74:79:4d:7b:5f:1f:0a:81:95:47:b0:91:71:f0:55:
         38:ac:04:03:26:f8:fc:ed:e7:c2:db:95:1a:b0:8e:08:31:4e:
         f7:8e:b8:05:16:53:1b:4c:95:04:99:0e:87:f4:94:7d:c8:bc:
         a8:ad:f1:06:07:f1:06:02:11:da:0b:fa:a7:28:36:86:31:b1:
         4c:dd:c5:32:d9:63:bd:5c:19:be:47:62:9c:78:0d:42:c6:c1:
         66:55:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:50 2025 by rpki-client