This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File:                     AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier:          J6dK0F+lZH9gp//tywdRZ9J4IC9Sx0RugXUiHte1WGo=
Subject key identifier:   ED:08:04:D2:09:77:9A:8A:C2:14:91:6C:63:ED:BD:BE:55:21:68:55
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer:       /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number:          0A
Signing time:             Wed 03 Dec 2025 06:09:41 +0000
Manifest this update:     Wed 03 Dec 2025 06:09:40 +0000
Manifest next update:     Wed 10 Dec 2025 06:09:40 +0000
Files and hashes:         1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: /QW25pEtiB/Sm8FUpH4VqDqoooBFPu/LdCTXVTzhgPg=)
                          2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: LJ7UDn6IIkcbGD6zUISagJkWCJY/fIVXp/q52OKMMBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
                          rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
        Validity
            Not Before: Dec  3 06:09:40 2025 GMT
            Not After : Dec 10 06:09:40 2025 GMT
        Subject: CN=692fd424-6198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:82:de:e3:3c:25:b9:b1:b9:19:dd:7c:00:
                    d0:8f:f5:65:05:ea:9f:2d:28:5c:6b:03:4c:3c:a5:
                    5a:e5:45:47:12:70:6f:0f:1f:47:01:af:2c:01:fb:
                    82:a7:c2:85:6c:de:51:f4:c2:4e:37:4e:41:9e:48:
                    e6:3a:a6:92:ad:e8:7c:f7:a7:5d:33:cc:be:35:0f:
                    7d:0f:7d:ce:33:15:89:9d:34:9c:ba:a2:c4:0f:a1:
                    01:fc:27:45:e6:a3:e4:a1:b9:4a:63:58:b4:e6:01:
                    e5:54:29:79:47:09:57:40:d5:61:2a:d6:a3:d5:fb:
                    aa:83:59:87:f6:83:12:3f:45:94:dd:c0:8d:df:84:
                    16:ad:5a:27:b7:46:4d:98:3b:8a:91:4e:bf:10:53:
                    c2:04:66:65:c4:f2:9a:47:6c:9a:ee:0d:67:77:c1:
                    4c:db:8a:e8:db:97:9e:f4:d3:c8:e5:2c:55:c3:cb:
                    46:98:18:bb:e7:5d:0d:df:3e:86:b8:44:09:46:d1:
                    56:26:00:fa:06:cd:fa:5c:d1:82:1b:45:2d:aa:0c:
                    e0:36:4f:e6:ad:d6:a9:7f:07:b9:58:03:be:a2:81:
                    5c:bd:d3:99:34:82:2b:95:09:f9:ba:c0:2d:d5:aa:
                    b6:e3:18:c8:d5:d6:96:3f:05:f2:1f:92:ac:3d:f0:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:04:D2:09:77:9A:8A:C2:14:91:6C:63:ED:BD:BE:55:21:68:55
            X509v3 Authority Key Identifier:
                keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6d:f3:2b:33:b6:80:5d:87:3b:6b:a4:da:fb:ac:ab:c4:be:
         5f:6f:77:b9:d9:4c:9e:64:03:85:99:ca:70:fd:82:53:71:98:
         9f:9f:0a:e8:16:39:8f:72:ff:05:d9:2d:ae:b0:64:bb:2f:b6:
         84:f3:f2:27:c6:d0:8f:4a:86:d7:17:40:3b:38:25:41:9d:74:
         0c:dc:60:13:c9:c2:71:67:5b:5c:8e:b5:94:85:b5:40:76:d6:
         a5:a2:91:fb:8b:46:b7:3f:9c:38:55:b9:45:ff:13:86:2f:94:
         e4:d2:a5:38:8c:d7:91:77:73:e2:a4:61:e2:9c:86:41:af:76:
         83:87:a7:d3:07:9c:10:04:9e:58:fb:00:10:e9:99:cb:be:00:
         56:b1:b7:73:ed:00:bf:74:3c:c2:8b:04:bf:46:40:e6:62:91:
         00:c9:fd:a4:ef:4a:af:c7:3a:9f:4d:01:46:2b:3d:e2:19:79:
         76:c4:91:5e:d6:74:b9:39:67:a7:0c:15:cd:42:54:f6:a7:3c:
         5f:99:81:09:4d:b3:ad:ec:78:09:c7:19:46:cc:2f:06:21:62:
         72:43:0a:65:8f:f2:eb:c0:75:d3:e7:2d:3f:e2:cc:57:94:dd:
         09:32:27:1e:9b:50:a7:bb:1d:a4:e4:6f:23:97:26:74:ff:4e:
         5f:58:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:13 2025 by rpki-client