This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          cFS0fL6oQoppRisodABg6zl+m2blrKsDouWQGLpULxw=
Subject key identifier:   9B:04:41:A9:B8:C9:8E:FB:01:47:73:7E:F8:A0:4B:08:B5:83:47:7B
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       040D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          0404
Signing time:             Mon 08 Dec 2025 22:53:15 +0000
Manifest this update:     Mon 08 Dec 2025 22:53:15 +0000
Manifest next update:     Mon 15 Dec 2025 22:53:15 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: 6MDuE5Hud/SqzNXrb8xo1evVE8dMzSNywoXzT7rz4ys=)
                          2: 728139D62FA311F0A9129814C4F9AE02.roa (hash: guIJtqQN+EFa/f6cWPw4iUlLONR7odnIq46PWDEQXBE=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: Um+5nEX9UGWaeunNGOXHeeYETiEJM95laBvW70lUPDE=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 22:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Dec  8 22:53:15 2025 GMT
            Not After : Dec 15 22:53:15 2025 GMT
        Subject: CN=693756db-16f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:e5:60:b5:70:ed:ae:b5:09:9c:12:1d:49:
                    ee:fa:57:0e:21:1f:69:2b:01:5c:48:e8:28:90:0d:
                    a3:00:92:41:08:0b:40:91:e1:af:fb:ae:ee:c5:e8:
                    a8:46:54:30:0e:64:05:ba:02:83:3f:17:b8:3a:7c:
                    7c:cf:f2:a8:79:c7:a4:d4:e0:e1:69:e1:c8:fb:3d:
                    c9:c1:77:a7:86:fa:64:59:8f:91:97:6a:58:f9:d7:
                    d7:f1:29:39:49:37:01:1d:5d:e0:b1:fe:f9:a1:ad:
                    c6:6a:f4:32:35:fb:7f:b9:f8:a2:ba:09:e7:e5:31:
                    a8:a1:03:3b:a0:b4:86:a5:40:51:cb:6f:37:7c:21:
                    5c:df:08:24:16:c3:a1:f3:72:01:0e:aa:c7:5f:cd:
                    f4:8d:c0:a6:a0:62:8c:8a:5a:a8:34:57:9f:10:0e:
                    ff:e1:b4:8e:f9:13:35:f0:39:c4:42:67:6d:48:d4:
                    57:10:e9:24:f0:91:1b:ff:be:20:44:f0:c3:2a:3b:
                    d3:f4:ce:54:20:98:29:a9:dd:ac:2f:95:db:15:f0:
                    98:21:78:9b:d4:58:cc:ca:c4:f0:8d:5b:54:ca:80:
                    d5:bb:cc:fd:2a:48:90:c2:7c:1a:ce:43:b2:56:ad:
                    19:cc:62:0c:7f:c4:bf:20:b4:24:20:c4:89:11:1c:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:41:A9:B8:C9:8E:FB:01:47:73:7E:F8:A0:4B:08:B5:83:47:7B
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:0d:3a:fd:b6:ee:7f:38:3b:19:6f:76:48:d7:f4:d6:99:
         4b:9a:bf:1e:ac:f6:e3:e9:ec:55:2e:f3:5d:c1:4f:ec:43:d1:
         0d:89:c8:19:a2:6f:97:cb:37:53:9a:c9:fe:0b:9e:d7:fe:5a:
         91:79:cb:e8:4c:1a:d7:33:53:55:6d:9e:38:00:26:fb:0e:3d:
         01:51:f2:91:f9:a7:9c:2b:3a:0d:88:7e:73:e2:fc:37:e1:a5:
         96:e2:c4:11:94:ea:08:c1:ba:50:88:83:cc:da:d3:86:36:19:
         cf:07:40:16:d4:7e:9f:e2:e5:06:c7:3e:e7:ee:87:19:f7:a1:
         91:56:3e:26:98:64:da:76:fb:9a:77:f1:c1:72:16:89:2f:42:
         85:ec:ea:99:81:2c:ab:43:eb:ee:e4:59:c5:23:29:67:8b:2d:
         c3:15:db:33:33:1a:4e:b3:6a:99:48:58:cd:06:17:b7:32:fc:
         df:b3:6d:d2:68:35:43:51:0b:62:7b:5f:d7:50:a2:4e:80:0c:
         5a:8a:2e:d1:bd:58:2f:ed:6b:81:6b:52:0e:c5:7d:45:83:57:
         1e:0b:37:c2:6b:f3:fc:b6:d3:ac:7d:b1:6c:3d:01:5e:53:32:
         8d:61:4c:15:6b:cf:75:6a:8c:b6:36:32:6d:e0:82:1d:00:c9:
         61:b4:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 06:37:44 2025 by rpki-client