This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File:                     8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier:          P7FQvFA4+ZKzW3ofIrp9o4nIy/fJUhSBfs9hyHlO/ow=
Subject key identifier:   37:3C:02:8E:66:B4:76:EE:08:02:1B:8E:95:BB:C2:8F:FB:DF:45:A8
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer:       /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number:          06B5
Signing time:             Sat 06 Dec 2025 21:09:04 +0000
Manifest this update:     Sat 06 Dec 2025 21:09:03 +0000
Manifest next update:     Sat 13 Dec 2025 21:09:03 +0000
Files and hashes:         1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: 1RlnOfDHRShXoKUNgdQbNZFWAJM/mTGm2eVFnE2u6L0=)
                          2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
                          rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
        Validity
            Not Before: Dec  6 21:09:03 2025 GMT
            Not After : Dec 13 21:09:03 2025 GMT
        Subject: CN=69349b6f-0549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:a2:5d:33:78:30:c6:69:ec:e5:63:07:4f:
                    60:0f:6c:d3:67:5f:fa:15:2c:c1:3e:b5:ec:0c:2b:
                    32:8c:2d:57:03:89:14:2f:b2:86:b4:fc:83:13:8e:
                    b7:e1:cb:68:0e:40:79:96:36:bd:6a:ad:ed:c9:4d:
                    a5:f2:51:e7:9f:69:83:e6:8d:7a:48:11:4c:3d:04:
                    e0:d0:c6:7b:90:01:b5:72:ed:70:4c:9f:46:d9:7c:
                    48:bc:fe:b4:2a:10:93:8e:83:8d:3f:85:f5:8a:d1:
                    e5:81:2e:a9:12:b7:3a:1f:87:6b:0e:e6:7e:8d:aa:
                    08:62:c7:9f:14:4a:4f:5a:8a:7d:9e:35:f5:8b:5d:
                    6c:c2:88:93:2f:8b:21:1d:e1:bd:67:fa:7a:67:70:
                    b7:ff:13:ec:5f:b7:00:49:d0:ab:98:b2:e1:b3:3d:
                    3f:05:b2:aa:95:8c:08:1c:00:32:20:05:d9:a2:58:
                    dd:51:c2:1b:65:67:28:b9:2c:93:b4:85:85:b5:9f:
                    b8:17:4c:f2:3b:94:32:bc:bf:51:93:2c:75:2a:15:
                    95:ca:3a:29:86:41:ad:9b:33:84:ce:66:ac:92:26:
                    bf:65:ea:39:14:e8:91:d9:0f:9c:f8:22:92:38:95:
                    78:54:e1:9b:ee:02:f0:5e:f5:31:95:d5:97:62:c1:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:02:8E:66:B4:76:EE:08:02:1B:8E:95:BB:C2:8F:FB:DF:45:A8
            X509v3 Authority Key Identifier:
                keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:58:a5:6d:d8:6b:89:af:08:89:22:2f:06:08:da:76:75:
         b5:1c:a7:f9:c8:67:42:d0:fb:41:c6:34:f8:7d:e8:2f:d5:f3:
         be:bf:7f:95:e0:47:5b:5a:f2:06:0f:9f:93:cf:94:93:94:b6:
         b5:3a:ef:a0:95:65:ee:15:03:11:32:7b:ed:c1:84:a5:12:49:
         b2:cf:93:4c:ab:6d:67:b1:28:ef:c0:ea:f7:65:ef:73:ea:84:
         3c:99:6f:96:6c:76:63:59:ec:37:0f:02:31:f0:47:1b:a3:4a:
         fc:7a:52:12:00:42:dd:73:f8:8e:c3:34:7f:e5:4c:e3:49:cf:
         98:7d:98:c3:8e:ce:17:6b:94:a3:2e:e5:47:cf:a7:b5:9f:b4:
         49:46:00:eb:f7:87:3f:df:79:32:70:0d:ff:fc:37:59:07:82:
         0e:e0:05:10:7e:b3:cf:06:88:69:ff:b3:00:9d:d6:26:b8:2e:
         fa:ca:a0:6c:77:d1:65:bd:a8:15:f1:2c:07:e5:b0:20:b6:64:
         67:c2:57:0d:4d:ee:81:ac:df:08:0e:36:4d:b9:a7:cc:b1:5e:
         dd:9d:46:47:78:25:06:79:0e:73:ad:c4:46:63:88:a2:c5:f6:
         00:10:dd:c0:84:fd:b5:45:2f:d4:f2:f5:fb:02:b7:e8:b9:d9:
         be:8d:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:30:27 2025 by rpki-client