This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          wrd0ZdYNhx6v3iOD51PwuKek/76aVSECq5as7v5vb50=
Subject key identifier:   7B:22:B5:6E:D6:E9:80:B5:12:29:8F:6D:1D:7B:C6:51:F4:78:F0:79
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          06AF
Signing time:             Tue 02 Dec 2025 21:09:25 +0000
Manifest this update:     Tue 02 Dec 2025 21:09:24 +0000
Manifest next update:     Tue 09 Dec 2025 21:09:24 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: 9aOueuLrIAoqmj/ccsrFsTkuw0gllMztoN1UuCDiMZc=)
                          2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: vlCfRwuEXWpklGTw9mykTEtjyJtV17L++aLuE6IkKdM=)
                          3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: rzIFmJRJok4EYg0aJC0SnHdEv8CwANX+fTfQwm//Y1c=)
                          4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: AfszR+FVK1ZkM+F0m7smimwn7uc2MrGS1mNtadoKTyc=)
                          5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: 70dih3UbetFDHhvzgAW5HRGe9IoAJJpZ82sRIP7Wgmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 21:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Dec  2 21:09:24 2025 GMT
            Not After : Dec  9 21:09:24 2025 GMT
        Subject: CN=692f5584-f789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:65:28:b6:d8:ad:79:65:9e:e1:05:61:a6:
                    af:0b:aa:80:26:19:2c:20:2f:04:3d:90:51:1a:ca:
                    af:63:e9:c2:1d:0f:28:38:57:f5:31:cb:6b:2d:8f:
                    84:dc:0f:8a:ad:04:73:00:90:24:f6:7e:01:1f:37:
                    4b:27:1e:6d:3c:17:b9:f0:94:9f:d0:eb:db:d0:a8:
                    47:23:f8:bb:56:18:3b:15:5c:c7:9d:dc:64:21:3b:
                    05:62:21:70:52:31:9d:96:d2:06:48:70:72:23:14:
                    ba:fd:16:43:01:41:bf:31:d6:77:6a:50:d8:8d:8a:
                    47:84:bc:9a:f9:2e:fe:88:be:b8:e1:56:03:2a:8f:
                    ce:a8:1e:af:ab:2e:4f:40:8e:64:63:30:8d:c2:d2:
                    56:4a:1f:df:a0:08:fb:93:09:04:7b:cb:14:39:dd:
                    ca:d6:80:85:7a:3f:f1:77:56:11:4b:d0:aa:12:62:
                    44:56:90:b3:14:eb:af:09:20:33:6f:7b:b6:40:35:
                    cc:65:f5:49:93:27:04:e5:0a:e3:17:3f:b1:24:bc:
                    a2:6f:b5:ca:96:52:f6:0e:4e:14:94:13:27:8e:bd:
                    4e:66:28:ff:2e:95:22:e5:87:87:63:25:60:df:95:
                    10:91:d3:0a:bd:57:fd:d3:07:d4:7a:28:db:58:0c:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:22:B5:6E:D6:E9:80:B5:12:29:8F:6D:1D:7B:C6:51:F4:78:F0:79
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:94:9a:bf:ca:4b:a0:9d:01:08:ea:d8:69:42:fb:3a:6e:05:
         07:d5:22:9e:9f:b7:28:c0:57:26:82:ec:3f:e5:02:20:51:c9:
         f7:e9:f5:fe:29:02:c8:dd:5c:74:cd:34:0e:a9:26:0e:38:ee:
         ca:f7:82:66:cc:24:e8:2a:52:72:fe:fc:f9:19:05:20:3f:74:
         fe:1c:19:cf:4c:02:bf:40:06:c2:83:26:2f:e3:20:d3:ed:e4:
         29:6e:63:85:74:ad:f9:f8:3b:ad:e8:a2:a9:0c:0d:4d:6e:e2:
         1a:41:c1:39:01:df:85:86:78:90:4f:14:c8:fb:9c:12:f4:2d:
         d5:1a:e7:5b:c4:d8:55:96:d6:8c:46:23:2e:ce:2e:fd:23:1a:
         bf:bf:16:00:54:de:83:9b:88:70:97:d9:b1:63:cf:8b:20:af:
         48:ba:a2:4c:8b:a3:a2:3a:09:13:14:1e:24:39:6e:96:ed:85:
         82:49:61:75:5f:c6:ab:9b:49:8b:cd:11:38:d9:a5:d0:83:47:
         32:91:6d:5e:31:71:de:da:66:5f:e7:2c:f8:93:1d:63:59:4d:
         1d:bc:30:46:29:8d:21:0e:30:ed:06:0d:d4:4e:c9:c2:48:35:
         e6:7d:5a:e2:44:f8:a4:7f:2f:06:a8:b0:95:2e:bb:68:56:5f:
         b3:ec:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:27 2025 by rpki-client