This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File:                     aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier:          Z4Byy4a2l+AiwgMcQF7Ocp3IqVC/eSLheVXi009CVB0=
Subject key identifier:   0C:D2:A8:5C:CD:DF:69:95:B4:92:CF:CA:BE:55:E7:C0:14:E2:6D:E4
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer:       /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial:       22E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number:          22E0
Signing time:             Tue 02 Dec 2025 14:35:58 +0000
Manifest this update:     Tue 02 Dec 2025 14:35:58 +0000
Manifest next update:     Tue 09 Dec 2025 14:35:58 +0000
Files and hashes:         1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: 2gFuTiitVNMxCJuIAwkPzw803Ipint9ajfj/aAJm2Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 14:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8928 (0x22e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
        Validity
            Not Before: Dec  2 14:35:58 2025 GMT
            Not After : Dec  9 14:35:58 2025 GMT
        Subject: CN=692ef94e-0275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:44:d5:9f:f5:ee:f9:85:55:07:0b:0b:7f:8e:
                    93:45:79:85:1c:3c:4f:ba:a2:2e:90:d7:6e:bf:e4:
                    4b:da:b7:bb:c1:4d:9d:cd:f7:46:2e:d1:1b:af:4e:
                    cc:55:f3:8c:cc:5d:6c:3d:8f:e4:2a:aa:18:1f:ea:
                    19:58:ed:e7:f9:79:9e:52:60:4a:4b:99:93:92:51:
                    ba:b7:96:6a:2e:09:9a:7a:e2:29:0b:15:a4:be:07:
                    48:ab:f9:2b:b7:c9:3c:ef:2d:8b:ea:7b:a8:ae:e8:
                    6e:de:f5:34:6d:1e:62:c2:7b:65:75:ae:ce:3b:fb:
                    1d:0e:a1:df:b7:fc:43:47:c9:b2:9b:86:0a:91:4c:
                    ff:af:49:d3:39:c2:5d:54:33:95:7e:7a:33:33:8a:
                    1f:aa:00:ec:18:21:1c:6d:e1:2d:b8:a3:03:b5:20:
                    f8:bc:4b:88:ac:e1:e1:4b:a3:68:28:b7:09:48:e7:
                    5c:1f:5a:2e:10:bb:b1:86:36:1f:68:e9:fc:30:fe:
                    37:c6:a8:ee:4a:c7:8c:7b:f7:c8:ea:55:4b:2b:4f:
                    a2:6a:b2:46:49:01:e4:12:83:58:48:e6:6d:a5:a4:
                    7b:53:e3:ac:32:6c:cc:5a:09:e3:65:db:5c:5d:04:
                    6e:1f:ef:aa:33:7b:26:ff:f9:2e:cf:10:cc:47:60:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:A8:5C:CD:DF:69:95:B4:92:CF:CA:BE:55:E7:C0:14:E2:6D:E4
            X509v3 Authority Key Identifier:
                keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:d9:9f:1c:7c:9d:77:13:b9:3b:17:b0:9a:d8:5e:07:a0:
         50:a1:6c:c2:e8:c1:01:d8:e4:c9:80:dc:93:55:2b:d4:57:96:
         dd:b4:33:34:e8:4f:1f:f6:8a:20:3f:be:56:b3:fc:f7:43:f1:
         0f:47:fb:41:eb:65:1b:00:eb:8c:bf:70:36:aa:e0:91:b6:cd:
         13:f0:16:96:06:34:ce:b5:f7:4c:d0:05:89:f1:b8:25:e6:bc:
         ea:45:cf:cc:6a:62:8e:7f:96:9e:7a:d1:95:4e:6a:60:d2:de:
         c9:54:14:71:d8:01:e2:b2:51:87:c3:66:bb:14:d3:f2:fd:bd:
         7a:72:b1:84:14:5f:ed:b4:de:e4:9e:ab:eb:77:4c:52:d1:b5:
         30:1f:3b:74:39:a7:93:0a:43:40:8d:e4:6d:f5:d8:3a:df:9c:
         0b:63:35:fe:49:19:89:7d:6f:3f:66:4c:cd:61:c9:90:22:0e:
         64:89:6e:78:0c:ea:9a:15:e1:7f:5c:82:4e:dc:4d:b3:fe:d1:
         02:38:6e:f1:ba:01:92:ee:fb:8f:0d:74:5b:92:38:2c:21:dd:
         10:d5:dc:3b:fd:ff:b3:75:7d:79:9b:34:aa:27:eb:0b:7d:8b:
         b6:46:b1:1e:16:f8:6d:e5:06:a4:bc:13:86:68:d9:a9:a5:9b:
         e1:d1:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:47 2025 by rpki-client