This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File:                     MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier:          1Pqtu63JvdUIwmncGhJRw/C1V87Oabx5/J9VkOhBRZY=
Subject key identifier:   75:CB:97:6F:18:8D:86:3B:18:AA:AD:EA:DB:FC:25:F3:F1:E9:E8:7A
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       078C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number:          0767
Signing time:             Sat 06 Dec 2025 20:41:51 +0000
Manifest this update:     Sat 06 Dec 2025 20:41:50 +0000
Manifest next update:     Sat 13 Dec 2025 20:41:50 +0000
Files and hashes:         1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: 8nah/gPHDTfw9/l89yr6kSxuuoqFtKYI43kLVD9vb8c=)
                          2: 446CB34270E711F083707432C4F9AE02.roa (hash: uFL5RjAw4kEYDcTfQf/ACzUtZlfbZY0gAVLRJAbolRI=)
                          3: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: jnitWwuKyYOH3VPLX9zSQ1RGbPj0ej4xv8sYHOecNfE=)
                          4: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Ryo/ggbAvRq53R+p9bEGSceue4muKwWx8AVsuS/Cdrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Dec  6 20:41:50 2025 GMT
            Not After : Dec 13 20:41:50 2025 GMT
        Subject: CN=6934950f-2bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:17:de:20:75:47:4e:4c:1a:f3:9c:e3:8e:97:
                    d7:0a:7a:f0:28:d7:3c:b5:d4:65:4f:6e:ac:87:f6:
                    cb:6a:d2:44:19:ee:64:90:37:ff:41:25:5b:ba:f7:
                    60:e5:f3:72:24:75:c6:ef:94:6b:98:3a:f5:04:b0:
                    47:48:f4:07:59:1d:b4:54:6e:b9:90:90:76:c4:53:
                    15:de:e8:be:1f:28:4c:09:0a:e7:e3:d6:b7:e6:b2:
                    68:80:b7:22:d0:24:22:c3:72:6e:82:7d:10:95:e3:
                    db:20:da:b1:58:d8:69:43:7c:5e:49:45:a6:c3:33:
                    7e:e6:7e:e5:ce:e3:93:83:e7:9f:d9:7a:eb:07:c8:
                    4f:21:b4:44:f2:27:b8:2f:f6:eb:00:ca:00:6c:f7:
                    6b:29:1a:f8:49:83:0a:fc:46:77:1d:5b:09:b8:d0:
                    e4:e3:6b:54:29:02:ad:40:04:17:96:c9:d7:81:f1:
                    4f:8e:7a:a3:65:58:f8:42:b6:3d:54:fe:18:73:31:
                    d9:49:c8:da:7f:77:0e:86:67:3d:8a:5d:ba:60:58:
                    15:85:f5:fb:d0:26:df:f5:27:22:25:9a:08:80:6b:
                    c6:35:83:5a:c4:6b:4b:be:0f:2e:2b:8d:19:f1:1a:
                    49:24:21:5a:dc:93:01:bf:da:82:51:fa:33:7d:e1:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CB:97:6F:18:8D:86:3B:18:AA:AD:EA:DB:FC:25:F3:F1:E9:E8:7A
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ab:41:6b:ff:34:69:8b:2e:b5:44:1a:ae:56:9c:63:3a:48:
         1d:02:da:45:26:48:be:17:d1:57:c3:8e:5e:9b:ca:74:77:a0:
         47:b9:ed:0e:72:8f:18:ca:39:b7:6c:4f:f5:96:24:9e:d0:bd:
         c5:9a:3e:95:ed:2a:84:d6:16:44:cf:10:31:95:c0:76:09:77:
         ce:d6:99:23:37:36:a3:5e:ad:ce:b1:18:7c:41:42:09:1e:28:
         67:45:be:76:89:f5:a1:4b:40:5b:d7:db:7d:02:25:71:b7:dd:
         6d:30:84:58:f7:9d:74:1a:19:c3:50:e6:de:6c:50:97:7f:ad:
         5b:ba:cd:82:48:e7:7d:01:4a:03:40:11:24:a6:aa:56:f0:ed:
         b2:bb:03:04:b0:76:7c:35:25:85:ec:0f:92:f3:85:3c:20:ff:
         e4:6b:3e:c6:ba:c8:fc:9a:3a:0a:21:6e:51:59:05:c3:11:35:
         0f:d2:f5:f7:9a:9a:f4:f0:cb:c4:08:4d:e0:30:22:77:fa:c1:
         c2:eb:dc:16:af:0b:d0:52:dc:76:73:01:58:99:3b:7b:99:6e:
         76:5c:04:ae:0a:40:be:5e:f5:b6:b5:f9:80:c9:be:41:d0:ba:
         77:d5:66:bd:f4:5d:92:da:ff:82:9e:d5:89:98:f6:de:1f:95:
         2d:dc:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:08 2025 by rpki-client