This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          UWy9I85BmAVWDloK8+crKHDSqOWgng1c72DJWS50yyw=
Subject key identifier:   25:CB:74:CA:1C:0D:AA:84:EA:FF:1A:CF:CA:39:82:79:68:A1:7E:6E
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       0904
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          08F0
Signing time:             Mon 22 Dec 2025 19:43:24 +0000
Manifest this update:     Mon 22 Dec 2025 19:43:24 +0000
Manifest next update:     Mon 29 Dec 2025 19:43:24 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: lJ0WIitayHRmFA/uNl7wdRyhiLg+B3G6MXmJ4EFNzXM=)
                          2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
                          3: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
                          4: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Dec 22 19:43:24 2025 GMT
            Not After : Dec 29 19:43:24 2025 GMT
        Subject: CN=69499f5c-533b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:ef:81:3d:2f:b9:56:99:01:80:97:07:0a:
                    43:ee:eb:76:53:b4:f6:6c:67:fe:85:e2:4f:63:a7:
                    77:2c:86:f3:b7:58:0d:75:59:81:7f:ba:c4:9c:4b:
                    12:b6:e2:7f:78:a8:98:d4:b5:f1:38:57:4d:ca:f0:
                    38:6d:7b:0c:04:b2:c7:c4:0b:db:2d:1d:2b:d7:48:
                    a8:f9:f7:76:c1:96:85:fe:53:cc:84:69:73:6a:bd:
                    99:45:52:d4:de:60:9e:8b:b1:39:63:9d:d2:0c:a2:
                    0a:33:2a:1e:f8:93:1a:91:5f:42:76:9b:9f:95:6c:
                    a2:82:1d:41:cc:f9:bb:63:9c:32:2a:a5:d5:58:d8:
                    6f:ae:2c:65:da:65:5f:d3:30:32:c3:84:84:3d:1e:
                    60:69:cd:fa:12:77:70:08:13:32:44:fd:29:dd:da:
                    35:0d:cd:85:0d:21:d3:49:da:ab:7a:7d:ba:ef:a8:
                    b5:4f:a2:51:61:62:1d:8f:8a:a2:a0:cc:a6:08:b0:
                    25:00:18:3d:d3:c2:37:1b:62:51:db:b1:80:ab:45:
                    1b:cd:cf:0b:7c:8d:4e:15:1a:47:59:60:3d:d4:e5:
                    be:d9:42:35:bc:eb:17:d4:03:d9:b2:96:85:40:c3:
                    ca:a8:33:51:3d:fd:dd:0d:07:23:7e:ab:68:99:6a:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:74:CA:1C:0D:AA:84:EA:FF:1A:CF:CA:39:82:79:68:A1:7E:6E
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:30:30:8a:83:10:5c:1a:92:12:27:22:68:67:e5:19:36:
         27:89:f0:ee:ca:ef:9f:df:21:0c:43:1e:10:6b:2b:93:3e:cf:
         ff:46:56:51:ec:fe:e3:47:c4:2d:8a:16:89:8a:c7:96:3b:c7:
         ec:c4:82:2c:3a:c4:e8:c9:1d:e2:53:c9:8a:98:fe:f3:2d:b4:
         67:b7:bd:9f:d6:bc:29:d8:24:64:76:07:11:bc:f2:17:d1:82:
         94:a9:30:c5:c5:85:6f:97:f6:f3:b6:a4:24:fb:b6:d6:8f:a1:
         5e:a5:96:88:42:21:da:27:62:fb:f9:c7:ed:d5:64:e8:ce:bc:
         f1:26:d9:87:22:e2:1b:a2:2b:15:40:33:66:ad:38:8b:62:64:
         2b:05:67:69:66:97:e7:03:f5:b0:cc:6f:90:c0:d5:c8:81:9b:
         b6:d6:06:52:62:3a:33:9a:0e:52:a3:76:40:12:e5:6d:90:60:
         9f:99:d0:32:d4:4f:52:7a:ef:3d:23:19:71:e9:c6:8b:29:80:
         4a:31:ef:06:ea:17:14:da:cb:a0:5d:72:1d:35:ee:22:17:f1:
         c2:2f:9c:be:af:96:6c:08:f7:2f:33:91:20:a2:fa:19:ae:52:
         89:f2:6c:99:14:97:97:44:e6:ff:de:50:fa:d5:6c:aa:73:1e:
         dc:3b:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:21:34 2025 by rpki-client