This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
File:                     F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json)
Hash identifier:          BslVpuBmaXTFOSInhGDv8KuVC2EAgQrFlg7me04aDqY=
Subject key identifier:   B8:CD:75:93:0A:10:1E:20:D5:AD:B0:A5:38:26:B9:84:11:47:BB:B2
Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
Certificate issuer:       /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
Manifest number:          09
Signing time:             Wed 03 Dec 2025 06:10:47 +0000
Manifest this update:     Wed 03 Dec 2025 06:10:47 +0000
Manifest next update:     Wed 10 Dec 2025 06:10:47 +0000
Files and hashes:         1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: KN9/T5DPrH7TiRTqr2YV23vWOulm3OAteuenTnWVV2U=)
                          2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: qXETRU+GynJDK8p52SWay/hILThEiMclY+eMG2SJhMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
        Validity
            Not Before: Dec  3 06:10:47 2025 GMT
            Not After : Dec 10 06:10:47 2025 GMT
        Subject: CN=692fd467-9769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:03:d2:b4:e6:72:fd:81:f3:ce:9c:00:31:4a:
                    6a:04:5a:a2:4f:cc:82:0f:ad:1c:f4:96:10:b7:4f:
                    11:c3:b3:d9:2b:f0:71:71:dd:72:a4:25:3c:2f:1c:
                    9c:90:a3:78:fd:ba:f7:fa:d3:98:65:25:f6:ac:97:
                    18:4a:de:8e:a1:77:85:02:72:b6:94:e9:68:db:58:
                    7f:d6:35:90:4a:42:10:76:95:ca:d8:b4:29:0c:aa:
                    92:1d:bc:43:70:ef:b3:d6:27:a6:c3:59:31:08:54:
                    59:dd:d9:fd:a5:2d:85:ef:94:73:0f:e6:83:0e:0d:
                    e9:92:f5:2a:cd:61:6a:9e:47:b9:07:cb:1c:5e:b1:
                    bf:f8:b0:e2:dd:df:89:00:d9:1a:4d:1a:37:9d:4b:
                    95:ed:da:9e:b0:71:01:c7:9d:c8:4a:bb:d5:53:e8:
                    31:f1:8e:24:e1:b1:eb:76:4c:70:80:9c:1c:cd:f2:
                    48:8e:17:24:d1:5f:80:ff:9d:88:50:36:ff:c0:ed:
                    79:cb:77:fd:37:e5:a1:88:1a:54:7c:e7:d6:a6:96:
                    1a:78:d3:25:6c:14:a3:ff:e4:14:69:23:3d:9c:5e:
                    54:9e:63:79:a4:43:68:2b:8c:0b:1e:91:9b:8b:43:
                    e2:a5:49:76:61:1f:c7:87:ce:f5:e4:50:e7:ee:c3:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CD:75:93:0A:10:1E:20:D5:AD:B0:A5:38:26:B9:84:11:47:BB:B2
            X509v3 Authority Key Identifier:
                keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0e:a0:f2:74:38:a3:83:a7:2f:93:6a:ee:95:47:4a:cd:ad:
         7f:d5:1f:79:1c:19:84:d9:e5:12:f8:ca:c8:ea:f2:e8:b5:71:
         b1:b7:fd:4c:a1:34:64:06:12:f2:a5:de:dc:9e:fd:12:55:a5:
         ee:93:22:34:ce:1f:45:f7:1c:5c:9a:f0:b9:98:ed:04:db:98:
         15:3a:00:d2:32:fe:80:56:b6:ce:7a:db:03:3d:13:b2:8b:a2:
         91:80:65:44:8a:0b:9e:e4:cc:98:1a:28:8a:ab:fe:04:85:ed:
         c3:2e:59:3c:69:a9:dc:e5:61:42:f6:06:29:ef:d0:f9:67:9c:
         82:36:a6:c8:ab:2f:9e:55:de:d6:47:08:92:12:18:ad:04:a0:
         a8:6b:20:03:26:96:44:7a:eb:8d:31:c6:59:be:3f:0e:2b:e2:
         9b:16:93:94:1f:eb:e1:1d:fd:b8:28:a6:a7:b6:75:d0:1d:6a:
         83:31:0b:03:5b:38:49:b6:48:c8:fe:1d:8d:66:a9:40:67:f4:
         d3:4d:60:a2:a9:5d:97:74:ab:5a:81:1a:72:46:ca:c2:cf:b8:
         47:2e:ae:52:fe:09:a1:5a:42:d5:bc:af:ac:7c:2d:4e:85:db:
         df:eb:68:fc:da:87:1b:b4:f8:58:d5:ed:7c:4c:ba:ca:9e:8b:
         a7:9d:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:12 2025 by rpki-client