This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
File:                     75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json)
Hash identifier:          8NY0DriilWIKSUj4G3idn7j6rvA0+onWnSBjaWd/Rms=
Subject key identifier:   6A:7B:91:E5:C7:C0:25:56:42:DD:75:35:B5:63:2E:37:47:93:65:D3
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
Manifest number:          0209
Signing time:             Thu 27 Nov 2025 00:58:48 +0000
Manifest this update:     Thu 27 Nov 2025 00:58:48 +0000
Manifest next update:     Thu 04 Dec 2025 00:58:48 +0000
Files and hashes:         1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: 9KynzpMOBP9Y9WhmOE085C2tn1OMzph3ypTE/NnPB48=)
                          2: 267FE3681C4B11F082276911C4F9AE02.roa (hash: IwAZrjoyGmsUGmE4JOsWaeHq5fs6QvEAYA+JnsGMyLo=)
                          3: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: OMFUXP/cctAoz4Xum6QNfmkgufq2udvA4e2an/c9gCg=)
                          4: 7C796C5E743311F0BAAA8B29C4F9AE02.roa (hash: oV+7pciFu8VhBC86X8ypaBvDmcSTDXLU7n3WAsVVpeU=)
                          5: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=)
                          6: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: baZGvTyIaF8PILI14dVTbXunLuwY6sMo3vWHfxxLvRw=)
                          7: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: lfkr3wnF/gd810FZkIOk1rPPX3nFh2BPUr1atDdR1QQ=)
                          8: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: /jkIGuU72p12nz6+bmqYXQjGUP7RRNXyE9lz7PQstzA=)
                          9: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 00:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: Nov 27 00:58:48 2025 GMT
            Not After : Dec  4 00:58:48 2025 GMT
        Subject: CN=6927a248-babf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:44:20:bd:35:b4:bd:40:a2:18:27:51:a6:58:
                    cf:6b:06:b3:46:09:53:40:0a:e9:f8:6f:3f:3a:7e:
                    03:30:10:0a:72:ec:ad:00:4d:e5:60:a2:44:c3:7c:
                    0a:db:c2:a1:49:43:f8:b9:41:ab:4b:9a:9d:3b:76:
                    bd:f6:57:2a:69:01:a6:2d:20:f8:02:31:28:6e:31:
                    c4:a8:e8:be:7b:d0:14:1f:85:bc:61:ad:c8:94:d2:
                    0e:42:2b:6e:2b:42:45:9b:9b:ba:ea:c6:76:d9:0a:
                    b4:bd:bb:2b:bd:6e:a7:0a:ee:02:79:52:b0:1f:b1:
                    8a:13:7d:98:2f:ed:e6:ca:46:b5:4b:03:34:3a:f0:
                    1d:9c:b7:fb:68:a3:ca:57:e3:5e:1e:46:14:19:e3:
                    2a:c0:03:67:b9:f0:e3:3c:fe:5e:6b:61:59:1f:0a:
                    5e:4c:e8:62:2f:ea:9b:a6:c6:6f:da:03:7e:9c:50:
                    d2:68:e7:4c:b5:28:58:88:cc:be:31:c9:c4:5c:ef:
                    61:8d:df:7d:2a:8e:e4:79:b0:29:ba:39:c0:5e:23:
                    b9:14:96:a0:71:55:75:69:e3:39:57:40:7e:78:12:
                    f7:7f:78:cc:2f:6b:67:72:27:19:81:53:c8:99:1b:
                    22:ea:00:03:18:51:5b:07:9c:62:ea:86:01:5b:e8:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7B:91:E5:C7:C0:25:56:42:DD:75:35:B5:63:2E:37:47:93:65:D3
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:5c:aa:5d:23:e1:de:50:92:95:c6:6b:6a:f3:cd:5f:84:
         eb:e7:99:b9:fc:39:03:f0:ba:c2:13:1f:b1:f3:d4:c2:36:8c:
         98:23:db:6a:9b:b7:1a:c0:80:dd:9b:d1:08:ec:64:84:5f:f8:
         a4:bd:a0:6c:50:aa:54:30:56:e7:f6:ea:c6:c7:84:2a:4a:d3:
         12:b9:ac:dc:03:04:57:79:14:a9:02:07:b1:6c:6e:5d:4b:5e:
         6d:c2:37:a9:75:66:46:90:bf:58:fd:db:c7:62:ec:5a:fc:2c:
         30:86:c2:b8:a6:a0:0d:2b:1a:b4:07:8b:cc:27:dc:24:90:8d:
         de:a1:ab:d8:bb:8a:ae:ae:c1:ff:2d:b3:f2:d6:07:e0:4c:b8:
         25:58:66:66:e0:47:5a:6a:9a:ef:3b:b6:14:ad:00:21:5e:4f:
         a5:65:1c:a4:a2:cc:0c:bc:56:f6:75:bc:cc:6c:2d:ce:1a:1d:
         0a:dc:72:e6:1e:45:a1:cd:d6:1d:00:08:8b:55:46:b8:f0:8e:
         ce:c6:cb:4c:a8:7c:f9:2e:3d:b9:fa:9f:4c:a4:6e:96:fa:cd:
         9f:3c:07:2f:12:9d:e2:5c:90:da:d4:e9:b6:58:f8:9b:29:89:
         e6:b5:bb:db:b6:57:51:65:a1:42:8a:18:ac:34:e2:45:9d:17:
         37:26:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 05:44:57 2025 by rpki-client