This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
File:                     r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json)
Hash identifier:          HKGSRdvvTc7nKcoaPQN2nPaP/pkyJEbT7IEgx63tYhc=
Subject key identifier:   21:DD:3C:09:A9:CF:2F:A5:BA:80:A3:03:9F:6A:36:D1:63:B2:2F:19
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       1015
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
Manifest number:          0FDF
Signing time:             Tue 02 Dec 2025 17:07:50 +0000
Manifest this update:     Tue 02 Dec 2025 17:07:49 +0000
Manifest next update:     Tue 09 Dec 2025 17:07:49 +0000
Files and hashes:         1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: kTQoGwqBZI2LgMwNrwAMIvav43iLLMginLrqrYN4zbY=)
                          2: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: QtpDimKOHqXsxnqa4q87zCBuPpMrfxyNN2d7cp4WlrA=)
                          3: B3876B1821C911EB991D562EC4F9AE02.roa (hash: 6uU1bRzcclFeMC/RnwQZxh3s9UKuJJHVwL7cdGjMFOc=)
                          4: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: XWm8GaGIPPLP9AKtaT6KRszth65jZeSEF8vfSa7oAA0=)
                          5: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: PNhMIJG2WqhTSsHQs6Q3B5W+HPqAu/8Af4Ot4nkDDLQ=)
                          6: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: t18G/jUeuq8lptvTyxkqs2wnq4jb4g41EOSptQznrUs=)
                          7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: Jk6V50ct0NhfCUNeq2rSB6SPY6PZ86y8Zd5FDESJ7kI=)
                          8: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WNk4We2Ht/Om3rf3IbH7SVRsK901hQ7kL7sR1ONDJ8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 17:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: Dec  2 17:07:49 2025 GMT
            Not After : Dec  9 17:07:49 2025 GMT
        Subject: CN=692f1ce6-8754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:05:2a:83:68:52:93:f6:e3:b0:34:7c:af:
                    87:31:43:83:ce:cf:01:61:cc:3d:51:e9:22:4c:d4:
                    f9:51:e1:aa:78:71:38:90:92:eb:93:4f:44:ed:49:
                    6a:76:be:c3:d2:7d:f4:fd:d4:ad:2d:29:ef:07:45:
                    d8:33:db:e9:a2:87:e1:16:99:72:07:0b:58:7f:a1:
                    be:92:a6:4b:b6:10:44:b1:9f:b9:d2:69:cf:5f:8c:
                    b9:c4:54:60:72:98:39:67:9f:b3:79:2c:bc:85:44:
                    3d:c7:2b:40:91:29:ea:43:c7:99:71:2e:32:f7:91:
                    c2:15:0b:48:85:bf:63:23:ca:a6:1a:8e:51:60:d9:
                    77:f6:81:25:90:82:46:bc:5c:9b:61:16:83:6d:de:
                    50:dd:8d:68:61:e7:72:36:da:1c:65:90:b2:18:87:
                    84:75:2a:e8:51:77:cd:42:e9:e8:d5:15:90:2e:40:
                    f7:63:20:b1:63:38:e8:c0:77:71:50:70:21:03:af:
                    cf:9d:67:44:04:1d:83:53:4a:fc:2b:1d:21:16:7f:
                    ee:9e:1e:99:c5:fd:0a:21:7d:a9:69:51:cb:db:06:
                    83:48:95:6f:12:88:1f:62:41:12:a8:be:c5:8c:dc:
                    b6:ba:85:08:3d:2a:a0:50:15:6a:4a:a3:d8:f0:38:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:3C:09:A9:CF:2F:A5:BA:80:A3:03:9F:6A:36:D1:63:B2:2F:19
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:68:fd:b3:31:e4:56:16:2c:da:0c:2c:62:9f:94:6c:46:b3:
         95:df:94:90:78:c7:af:6b:dc:38:0e:5d:12:01:d1:af:e6:0c:
         ff:70:74:1a:dd:6c:40:38:56:65:f0:ad:ea:fa:32:b8:7a:c7:
         5e:1d:e6:61:49:db:82:6d:6b:8c:b3:10:f7:81:4b:01:33:60:
         b2:fe:b3:80:d6:fd:7b:dc:fb:fe:7b:04:a9:01:4a:2d:22:ca:
         95:41:e1:62:4b:c2:fa:d3:68:82:ab:43:c8:12:05:63:68:f2:
         80:e2:29:20:fc:1b:3f:09:7d:99:94:b8:b0:1f:b9:7c:ce:c9:
         b0:d4:0e:77:1f:d8:bb:3f:6b:fe:c3:d3:fe:6c:5d:a4:d3:1e:
         5b:44:0a:97:7b:22:9c:b2:bf:7e:cc:83:83:32:1d:c1:6e:b3:
         aa:3d:1b:d0:71:a6:4f:a0:24:14:5a:0b:b4:da:3a:20:b7:9c:
         d8:ab:2e:ee:3f:88:0b:bf:a1:a9:4a:f5:67:2e:22:eb:cb:d4:
         36:26:ae:7e:65:de:2c:4a:f2:f3:8e:ed:6e:54:97:24:61:f8:
         08:90:ed:65:fd:5e:39:fe:ca:b5:18:d9:52:cb:b5:90:92:78:
         f5:93:b8:e8:dc:3b:d8:7f:92:76:12:6f:16:0a:44:fb:24:75:
         f2:a9:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:42:52 2025 by rpki-client