This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File:                     poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier:          2P6CNgo2ddRMktPLnrT2/f0FbYJMHJvWv0jKvXGhyWQ=
Subject key identifier:   7D:11:0D:30:25:AF:FA:6A:C0:0F:8B:70:BC:09:3D:1B:EA:AB:94:DB
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       0410
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number:          0406
Signing time:             Sat 06 Dec 2025 23:05:41 +0000
Manifest this update:     Sat 06 Dec 2025 23:05:41 +0000
Manifest next update:     Sat 13 Dec 2025 23:05:41 +0000
Files and hashes:         1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: gTwz1T77h2bEZMaMizcE5RtglW6e9/s8yLYoPXMBVQo=)
                          2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: YFQztmxGulDM+wc5CoUinbLv3slQIPP/6yMpGk1YiC4=)
                          3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: n/0hd7OgczzTTkK+kwaK2N4TyospxpRVHfnJjm/JhkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Dec  6 23:05:41 2025 GMT
            Not After : Dec 13 23:05:41 2025 GMT
        Subject: CN=6934b6c5-c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:bb:a3:eb:41:d7:18:22:09:0a:c3:f9:2c:
                    b3:20:cd:a6:a8:d5:e8:24:d7:08:7a:ed:3f:e3:fd:
                    31:ed:ea:b3:27:6d:fe:44:7e:9c:46:21:3a:d4:98:
                    58:bb:d5:3d:72:7b:88:97:aa:fe:a9:ad:c3:e3:79:
                    23:9e:7b:f4:4b:41:9e:c1:f6:f7:d8:ef:9d:5a:48:
                    e5:49:2c:30:bf:cb:6a:04:57:89:e8:eb:73:a9:9b:
                    bc:8f:d2:b6:44:d3:c3:84:20:bf:59:29:1e:7b:bd:
                    6c:2a:69:7c:9f:77:32:dc:ee:bb:a9:b6:1c:fc:a6:
                    12:a9:3e:4d:61:11:48:60:37:c1:c0:2f:72:9f:17:
                    7c:58:5a:e3:08:b1:24:5d:1a:ec:0b:d4:48:e7:d9:
                    06:35:eb:3d:53:29:4f:89:85:84:44:ab:82:dc:9e:
                    13:76:6d:6a:02:b8:8a:43:37:6f:ce:3b:ba:4a:a3:
                    44:d2:52:a0:4f:6c:53:8f:e4:f8:db:68:99:45:09:
                    c8:09:40:5b:95:22:87:e2:db:7c:97:ef:8c:fd:8c:
                    a5:4f:29:af:c2:dc:90:47:a6:1d:79:94:07:74:54:
                    72:16:4d:1f:49:da:4a:14:4c:eb:85:6e:91:a7:95:
                    35:c9:97:fd:9a:8e:3c:17:0a:7b:ca:03:50:28:c9:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:11:0D:30:25:AF:FA:6A:C0:0F:8B:70:BC:09:3D:1B:EA:AB:94:DB
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d4:02:75:c0:49:04:d2:76:e3:69:ae:dc:b7:6f:6e:1b:80:
         79:b8:34:dc:a1:6e:86:2e:0c:22:33:c0:b1:8b:c5:14:1d:18:
         3b:b8:b8:ce:5c:cb:b5:9c:e3:af:f6:d1:c5:4a:61:95:6d:fd:
         9e:59:ce:74:2d:1d:b7:b7:ec:25:73:0f:20:95:db:80:8d:59:
         9d:38:35:23:75:c5:f2:92:cb:f4:1c:84:5c:ef:78:1d:ef:0b:
         1b:20:85:e5:1c:4f:23:4d:37:22:96:04:66:6a:29:ef:41:ba:
         71:f8:9b:55:37:96:db:67:31:7c:b2:2e:7e:02:af:fd:e9:5b:
         6d:24:fe:4f:65:dc:b8:3e:09:cb:b5:1d:b0:6e:b5:21:89:0a:
         e9:de:9d:0c:f6:40:b1:fc:89:46:21:ce:71:c3:8a:5b:ee:0b:
         b6:6c:3b:41:57:80:a8:71:1d:34:92:63:18:b8:86:e8:45:02:
         88:d1:0a:87:e9:18:7c:f6:6f:61:54:91:a9:b5:03:4a:26:50:
         62:84:cd:dc:83:6a:ab:68:53:6f:b7:4e:38:3a:6e:14:3b:9e:
         a9:4f:6d:2f:5b:57:93:f1:ef:34:77:71:de:b7:3f:92:67:86:
         0a:8d:71:ae:c1:2a:e0:73:b4:42:73:f8:ef:d1:ba:98:2f:68:
         8d:d7:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:36 2025 by rpki-client