This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File:                     RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier:          RaHbvQi87oBwqohiXMbBtIHyXJiVCPSC6hGdpmO+Q0c=
Subject key identifier:   91:FF:A8:05:63:41:80:40:8F:0A:92:76:86:17:F2:FE:84:17:4B:1A
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer:       /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number:          E6
Signing time:             Wed 03 Dec 2025 03:50:59 +0000
Manifest this update:     Wed 03 Dec 2025 03:50:59 +0000
Manifest next update:     Wed 10 Dec 2025 03:50:59 +0000
Files and hashes:         1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: bWfV9JQ+GRQ2gSLMttS8ZhbvLvXmYC++hKMyr9R4XEk=)
                          2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: Lo2vDLqUWYKZZBt2t4d2KqlKu9tqzBqX5FsiB+knExY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
        Validity
            Not Before: Dec  3 03:50:59 2025 GMT
            Not After : Dec 10 03:50:59 2025 GMT
        Subject: CN=692fb3a3-9166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:c5:5a:b1:11:f9:e0:ff:18:8e:4f:dc:d9:
                    da:b5:06:05:e4:86:37:a7:d3:b4:18:a9:15:57:0b:
                    09:0a:b4:e8:88:0e:fe:d2:31:9a:e7:aa:eb:6c:f8:
                    b5:3c:1f:b2:9e:ad:df:cf:c4:dd:d8:24:9e:12:e9:
                    de:7b:68:72:ae:a8:9d:12:52:db:34:67:c9:13:33:
                    44:48:3b:be:44:d0:5f:56:5a:2e:62:0d:dd:3d:77:
                    5a:7d:c7:92:8e:a5:2c:db:1f:00:e2:79:c3:cb:81:
                    84:84:2d:64:b8:46:9a:65:c8:ac:ed:d2:63:66:4a:
                    2b:32:15:fe:f8:50:57:4e:24:4e:e3:62:83:0e:5a:
                    3c:1b:7f:be:8b:ce:b4:88:0d:76:5d:0b:7d:97:e2:
                    bb:3a:9e:50:52:3f:76:fd:d4:81:72:9f:20:46:9e:
                    40:27:60:61:1e:65:7b:72:91:d9:fd:2d:a7:0b:72:
                    21:c3:ce:50:8d:86:ce:93:78:bd:01:09:5a:13:91:
                    02:bf:89:71:37:3f:97:cf:3c:77:dc:9c:5c:6f:6c:
                    96:11:a9:69:3e:44:0b:92:05:14:87:c8:17:03:b0:
                    c6:37:ab:f0:67:52:79:54:66:a1:87:d0:49:ab:5e:
                    b7:da:0c:ca:94:6e:5c:53:e1:64:65:c1:d8:5d:01:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FF:A8:05:63:41:80:40:8F:0A:92:76:86:17:F2:FE:84:17:4B:1A
            X509v3 Authority Key Identifier:
                keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:63:89:3f:fa:f0:27:0f:56:96:a4:ff:25:6e:3a:b6:be:
         79:56:4b:a0:75:b0:cb:70:1d:a3:0e:c7:09:0d:65:ec:83:17:
         9f:d9:96:78:a7:04:96:d5:1a:c7:61:17:06:c1:b1:8a:3c:be:
         99:78:88:b1:c1:24:ad:86:0e:12:f8:a5:cf:ed:07:8e:ff:23:
         aa:40:e1:02:3c:f9:b0:d5:bf:fc:f5:c4:79:a2:4a:e6:c2:7a:
         7d:b3:35:79:f5:7c:d0:c2:a6:6e:8e:bd:72:41:53:2f:1c:39:
         22:95:cb:2d:15:03:56:43:9d:0f:51:c6:00:cf:3c:61:1a:40:
         da:f4:7a:9c:9e:10:6a:8d:02:6d:6b:6a:f4:43:c2:d1:b6:89:
         2a:bb:1c:05:5c:d2:25:c6:4e:b4:ae:3e:9b:6e:67:73:3a:1b:
         db:f0:cc:c6:db:e7:57:09:b8:27:4e:3e:5d:40:1c:50:ec:67:
         94:2a:b8:12:0e:a7:41:eb:43:a2:48:ab:a5:96:a9:5f:1f:9b:
         dd:7a:17:94:5f:7e:b3:29:16:e4:21:04:99:25:5d:61:2d:79:
         7c:3c:c2:40:04:07:24:05:d7:90:a7:08:dc:06:49:9d:73:d7:
         c7:40:9d:68:26:d9:dc:d6:d9:d6:9e:6c:33:fa:ba:bc:86:8d:
         84:39:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:29 2025 by rpki-client