This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File:                     _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier:          WYxgMGArHpeEPyMQLjee/nBojz3/1DI3tqzxUgQvmp8=
Subject key identifier:   14:B7:50:2B:73:E6:CD:17:4A:ED:20:9B:F3:83:49:93:26:07:87:99
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer:       /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number:          45
Signing time:             Wed 03 Dec 2025 05:36:28 +0000
Manifest this update:     Wed 03 Dec 2025 05:36:28 +0000
Manifest next update:     Wed 10 Dec 2025 05:36:28 +0000
Files and hashes:         1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: ME/qTtUwoeTXCcxc6ydJgAm3RIZeVx5k1zQ4Sz1oPjw=)
                          2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
        Validity
            Not Before: Dec  3 05:36:28 2025 GMT
            Not After : Dec 10 05:36:28 2025 GMT
        Subject: CN=692fcc5c-4425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:e8:63:48:2d:9d:d6:0f:cf:c9:ab:57:db:
                    3b:18:2a:ad:3e:b0:43:3c:08:17:c0:6e:eb:d8:12:
                    87:ac:b6:cc:f7:3f:cf:3f:d2:d0:58:75:35:f9:dc:
                    7d:e2:d2:06:fd:ca:bb:b5:3f:89:51:4d:98:96:48:
                    01:5a:68:56:d2:05:aa:99:fd:79:d8:19:39:27:e0:
                    c1:98:8b:61:68:03:44:9f:8b:c9:f7:9d:d7:cd:58:
                    b8:78:9d:a3:25:9b:54:cc:bc:a9:1d:51:c5:7e:01:
                    b9:d9:36:4f:9f:9d:97:8d:f0:a2:16:67:59:f0:c5:
                    3e:14:b3:5e:8a:36:54:17:fe:79:d4:f5:45:6f:f7:
                    97:d3:fc:83:58:1a:be:6d:17:f0:70:7e:27:00:01:
                    87:32:f0:33:75:f4:a1:b7:31:95:aa:56:a8:ad:db:
                    ca:58:6b:a6:67:4f:e0:00:a8:96:b9:a7:da:8a:f0:
                    16:20:80:2b:ba:fb:5f:21:20:b0:0b:b4:8c:79:6a:
                    b1:66:f2:7f:ce:ed:6b:25:ab:8f:75:5d:7c:fa:98:
                    b3:2b:3e:e4:0a:ec:df:c9:47:8f:a4:99:f8:42:92:
                    d3:8f:ec:43:f2:e0:41:c6:d8:f8:d9:5d:5b:96:5c:
                    d1:5f:bf:95:98:e6:44:8a:77:be:79:93:4a:17:d2:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:50:2B:73:E6:CD:17:4A:ED:20:9B:F3:83:49:93:26:07:87:99
            X509v3 Authority Key Identifier:
                keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:f9:3a:54:7b:dd:6a:40:24:3a:46:2e:1e:5d:58:10:b4:
         55:eb:48:28:f9:b5:75:38:b9:fc:2d:2d:51:c2:4d:c0:51:c7:
         64:ff:4d:cc:c4:66:0c:ae:ea:81:21:d0:e5:e6:44:5e:72:8c:
         45:36:a5:67:32:74:10:87:d3:98:a7:87:43:bb:58:cf:41:c8:
         79:2a:26:d2:6d:12:c3:17:6f:3b:ea:de:17:c5:10:b4:c4:64:
         89:f7:14:a9:4b:58:63:c1:93:a8:ae:62:1b:a9:2c:c1:fd:65:
         d6:f2:0d:9a:63:ea:23:23:f5:0b:6a:44:1b:d1:2a:82:79:14:
         e9:c2:20:6d:d3:6b:00:bc:7e:6a:6a:6a:d8:e7:22:13:0e:8f:
         61:2f:f6:26:75:84:86:41:03:6d:33:44:78:22:0d:5c:6b:6f:
         6f:3a:99:72:f1:ee:78:2a:1f:32:6d:a6:b4:28:9b:fb:dc:a6:
         44:de:1b:cc:40:2b:84:f0:31:9d:3e:45:c7:1d:07:ad:53:20:
         ce:94:45:87:f5:4b:d3:1a:a1:59:80:fe:f2:45:a8:e8:a8:a8:
         9e:db:e6:2b:67:0e:37:84:c4:aa:ba:6e:be:6b:6a:16:40:0f:
         8e:47:4b:27:e3:00:1d:b2:4c:a9:8d:d7:f6:66:1b:f6:cc:91:
         1e:c0:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:09 2025 by rpki-client