This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
File:                     99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json)
Hash identifier:          ZptP9OQ0IGLj1/zTPaN5l2fN1jUaIiSdnDOCuWxu1Kc=
Subject key identifier:   BE:A7:AD:31:ED:CA:A2:30:CC:6E:5A:80:23:D3:EF:1D:C2:44:A4:2B
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Certificate issuer:       /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
Manifest number:          57
Signing time:             Fri 19 Dec 2025 06:09:14 +0000
Manifest this update:     Fri 19 Dec 2025 06:09:14 +0000
Manifest next update:     Fri 26 Dec 2025 06:09:14 +0000
Files and hashes:         1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: fnAUvTWL1WErbJhXoB2ceb62/WzjbwFe+IHmsoTDZBw=)
                          2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
        Validity
            Not Before: Dec 19 06:09:14 2025 GMT
            Not After : Dec 26 06:09:14 2025 GMT
        Subject: CN=6944ec0a-9881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:94:be:bf:91:36:87:db:0e:06:b5:7c:0f:
                    7f:34:71:25:c4:b1:15:5e:09:c9:92:f4:12:fe:f0:
                    60:bf:b9:ab:d7:25:90:1d:e0:8c:48:56:55:69:f3:
                    b6:6f:fb:1f:45:47:aa:87:f5:8e:c9:cf:32:a1:9c:
                    fe:95:e9:5f:c9:fa:5a:09:39:fd:79:e5:54:06:cc:
                    45:f5:33:36:04:90:16:ee:bd:2d:db:96:44:ca:da:
                    e1:83:3e:74:ff:84:df:98:c8:a1:ed:fc:cf:8b:0b:
                    81:6e:06:11:10:a7:20:c6:47:45:a1:e8:70:9f:b3:
                    65:4b:5c:0e:73:ca:d8:d4:96:d5:30:19:93:69:67:
                    84:99:04:78:3f:a2:5b:33:72:1e:7c:bf:de:57:6c:
                    de:38:33:91:9c:d5:d0:99:c9:4c:fa:7e:d6:52:06:
                    81:44:a5:7c:1f:26:cb:8a:e1:63:59:d8:01:13:7c:
                    36:30:dc:3b:62:1b:8c:26:7c:91:e0:d4:81:c3:5a:
                    f6:3c:84:59:0a:76:7e:0b:ca:62:98:16:ef:a3:52:
                    3e:83:44:51:36:95:7d:7a:a0:cd:dc:fc:ce:43:f6:
                    cb:09:99:82:e0:b6:af:33:64:c2:a8:1f:14:23:5b:
                    90:7e:f8:13:36:a0:8a:63:34:6d:f9:ca:d9:69:3f:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:AD:31:ED:CA:A2:30:CC:6E:5A:80:23:D3:EF:1D:C2:44:A4:2B
            X509v3 Authority Key Identifier:
                keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ad:43:4e:a5:df:12:30:15:69:fd:af:12:09:64:82:5a:bb:
         5c:ba:94:55:0b:72:27:a2:41:41:cd:63:a8:04:56:8c:ff:96:
         f2:9c:8e:b7:3a:8e:92:f2:da:49:16:98:89:d7:32:22:66:61:
         ce:23:87:69:dd:5e:2e:8a:63:7e:ca:c3:d5:db:e5:17:c7:55:
         41:18:e9:8c:68:04:d4:aa:f7:25:0f:11:f0:e9:c3:d9:bc:f7:
         25:d0:31:fd:54:50:7c:71:13:ef:97:cd:e7:72:90:33:28:3e:
         1d:06:55:f4:be:6a:6f:92:97:c6:89:9c:a1:b9:3a:be:11:24:
         78:12:04:33:31:1f:ef:09:e3:ac:c7:fd:c9:4c:ee:3a:2d:aa:
         96:5b:9c:20:8b:9f:83:52:52:c7:c0:93:fb:c1:eb:11:49:ac:
         9d:02:b1:05:be:36:2a:0e:b6:80:80:d8:5c:f0:ce:8b:ce:e8:
         23:21:86:c3:a8:17:b4:38:0b:6d:3c:37:7e:8b:ba:1c:f5:fc:
         2f:4c:cf:ad:e2:df:be:db:3a:3c:78:d8:41:e1:c0:93:47:5c:
         dc:46:64:4b:f2:22:fb:b9:35:98:24:b2:ed:06:20:5a:0a:84:
         07:c0:c2:c1:19:df:8e:60:4f:3c:b3:a4:7d:6c:2a:be:bf:6a:
         dc:b7:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:58:22 2025 by rpki-client