This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File:                     T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier:          01P1KJLK+jwvBKHitc/NvdIXQ1YU06CooqBp2Kw19oE=
Subject key identifier:   91:83:47:0C:70:F9:A1:63:DF:1E:F4:12:92:EB:92:A4:AD:41:8F:F3
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer:       /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial:       03B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number:          0392
Signing time:             Tue 02 Dec 2025 23:36:16 +0000
Manifest this update:     Tue 02 Dec 2025 23:36:15 +0000
Manifest next update:     Tue 09 Dec 2025 23:36:15 +0000
Files and hashes:         1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: W81x4FgLdGXQJUSB2vfCGZNQe0mN2c/va25HMshFl7Y=)
                          2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: OIuIkx6LNP541+ogHj0tTuwVsOI11PX4TfWyw7GN2I0=)
                          3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +Yz6orAM99P+kFeVfZoKus8hCh0ONcQuiBI4/E0rf1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 23:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
        Validity
            Not Before: Dec  2 23:36:15 2025 GMT
            Not After : Dec  9 23:36:15 2025 GMT
        Subject: CN=692f77f0-0fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:73:6d:bb:a6:2e:dd:a8:56:69:31:aa:28:
                    78:67:ad:e8:3e:b7:b3:95:c8:5b:4f:d2:8d:b0:3f:
                    2c:44:85:71:43:4a:47:ec:c2:bf:ab:d4:db:74:93:
                    84:49:5d:40:1a:72:7c:cc:b6:d9:e2:96:da:d3:04:
                    ff:13:8b:3b:92:47:77:48:c7:5b:93:71:ef:db:ea:
                    4d:91:aa:c8:e8:d9:24:7e:3b:c9:4d:26:88:6f:6e:
                    f8:01:cd:46:ca:6c:c6:fe:6f:88:df:47:3a:d8:d4:
                    fc:34:2d:40:5d:17:c7:8e:40:3e:e2:84:e8:6e:b4:
                    a6:83:36:f2:3b:b9:8f:04:7a:91:94:96:84:6f:ce:
                    7a:55:92:e8:27:f9:bb:85:e0:17:60:d8:31:46:35:
                    08:a8:c9:ea:07:49:87:ab:58:e6:0c:2d:8b:61:ff:
                    53:4d:1a:47:09:f2:fb:14:69:54:6c:9f:c6:78:9b:
                    74:11:bf:35:d5:b2:59:16:66:bd:f3:e6:c4:2a:35:
                    ba:a0:48:88:c3:1b:2f:1b:7c:02:da:84:bf:b6:cd:
                    2c:f4:cd:07:8b:0f:e3:d0:b6:c1:14:3f:5a:37:19:
                    ea:17:47:56:ac:ff:e5:0e:03:c0:d9:cc:7c:ec:98:
                    72:6c:07:61:86:be:06:cc:92:9d:67:bf:38:fa:eb:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:47:0C:70:F9:A1:63:DF:1E:F4:12:92:EB:92:A4:AD:41:8F:F3
            X509v3 Authority Key Identifier:
                keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:86:7d:2c:26:64:d4:ee:af:2f:78:38:0b:29:97:dd:c3:3a:
         a9:f9:69:d3:2f:f7:53:77:e5:5b:8a:6a:95:b3:94:31:50:0b:
         25:67:fd:ae:a9:6b:b9:88:20:e6:9f:46:f2:2e:05:20:1c:1e:
         fd:6d:ae:9e:e1:45:79:0a:1f:cf:a4:1d:60:e4:70:5e:09:5d:
         e8:fa:12:0e:f7:e1:83:06:f0:31:3d:ec:06:24:a7:7e:fa:3f:
         82:93:11:8c:72:16:0b:80:72:a5:04:49:dd:13:86:70:61:7b:
         7d:06:7f:f8:58:3f:d3:5c:b0:15:b1:e0:51:4d:99:6f:e7:d7:
         7a:6e:bc:61:7e:85:64:86:f1:85:ad:bc:c1:f5:d6:48:1b:b0:
         55:56:00:6f:bd:69:df:f8:fa:0c:6f:ae:85:3d:4d:fc:da:9e:
         04:2e:c5:21:62:db:9d:a6:66:92:0b:7d:2a:93:c9:b5:46:21:
         aa:c8:70:69:03:30:3c:e0:b2:f4:f4:58:ce:08:91:ef:1c:00:
         98:d7:3f:4e:92:b3:7b:50:fe:21:da:e7:0b:15:a2:53:de:69:
         60:61:25:0f:6c:0f:67:ff:0d:16:2c:aa:34:e1:96:b3:c8:24:
         96:4d:90:bb:c4:99:3d:6a:49:b8:c9:f2:f4:3a:0e:82:8d:84:
         7f:80:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:34 2025 by rpki-client