This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File:                     S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier:          h6w531uxGZD+KCDFR6IeU4x3QNdFJ9oCFYoUuv82eW0=
Subject key identifier:   DF:A7:FE:C8:38:CD:FD:D5:4D:32:04:B9:86:EA:43:F0:47:4C:3E:AC
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer:       /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number:          06E8
Signing time:             Sat 20 Dec 2025 21:23:14 +0000
Manifest this update:     Sat 20 Dec 2025 21:23:13 +0000
Manifest next update:     Sat 27 Dec 2025 21:23:13 +0000
Files and hashes:         1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: fpjIKa08cYvJuqJZa1QMP+exVJXD+kMRDt6PaZhLehY=)
                          2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
        Validity
            Not Before: Dec 20 21:23:13 2025 GMT
            Not After : Dec 27 21:23:13 2025 GMT
        Subject: CN=694713c2-2a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:58:e2:e3:92:2b:a3:d3:ef:ef:28:a1:5d:
                    0b:66:05:32:cc:cb:76:ac:c8:8c:83:5f:3d:19:be:
                    c4:9f:db:27:0d:a5:b6:65:b1:a0:52:e9:5c:6b:f7:
                    3c:52:0c:65:67:49:30:b4:9e:d4:85:5c:7b:7a:0a:
                    ed:49:53:8f:d4:d3:34:71:72:46:07:d8:c3:37:ce:
                    68:59:66:72:aa:52:7b:c3:76:73:ba:ea:b2:17:b0:
                    86:7b:9c:eb:95:11:ea:1c:f9:07:08:fc:6a:f8:80:
                    f5:86:26:ac:12:c2:17:ab:35:a7:ef:2f:69:02:8b:
                    e3:f3:e4:0f:67:53:d4:64:53:37:ae:76:31:0e:0c:
                    5d:26:fa:a2:2f:17:e8:14:b7:31:08:36:f1:ae:b2:
                    74:f7:3c:02:0d:0c:f3:58:38:00:d7:3c:93:cb:3b:
                    c5:bc:77:81:2c:b6:30:ea:43:cf:ea:f9:e7:7c:02:
                    b6:08:01:54:b6:95:83:86:cd:19:c1:4a:c7:74:34:
                    aa:43:dc:09:16:00:a9:d3:d1:dc:4a:02:65:72:21:
                    4f:0a:c5:3f:4a:f4:6d:67:bf:5a:18:1d:16:92:94:
                    ff:8b:8f:a3:f8:52:48:6b:1c:16:ab:0a:34:00:35:
                    47:15:5b:d7:74:a3:1d:11:99:8c:d9:5c:ca:9b:3a:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:FE:C8:38:CD:FD:D5:4D:32:04:B9:86:EA:43:F0:47:4C:3E:AC
            X509v3 Authority Key Identifier:
                keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:c6:25:08:53:9d:1d:11:29:00:ca:b2:31:1d:39:a7:d4:
         c6:93:90:b2:9c:70:02:9b:54:d2:ee:b0:2e:0d:ea:b0:7b:e7:
         fb:b2:d9:6c:fa:3d:62:1e:e9:92:b0:ec:2b:fe:3e:5b:2e:25:
         4d:eb:99:8c:49:d2:6a:80:0c:58:dd:62:32:c1:69:3d:aa:8b:
         44:11:f2:a7:35:32:f4:d2:a9:fc:32:01:e0:bb:61:79:25:9c:
         1e:08:ad:23:55:b4:57:79:61:60:ac:20:31:03:a6:0b:f4:19:
         6d:9b:bf:00:60:b9:4c:5b:bc:10:e5:03:76:bd:df:e3:c6:a9:
         22:66:db:c9:4f:55:1e:21:e8:c6:13:ce:4b:a3:3d:bc:d9:d0:
         b3:09:11:27:94:26:b6:8f:64:64:4e:be:c7:bb:0e:fd:0e:d1:
         e8:d6:0d:e4:3c:8e:41:32:65:2f:03:8a:49:3a:2a:4d:00:fd:
         16:18:08:e8:68:5c:7e:ac:e5:19:5b:03:35:63:04:3f:63:3f:
         61:c4:e9:44:b0:97:f7:1f:88:fc:2e:15:cb:48:3e:a4:81:13:
         62:ed:3d:0a:0d:13:fe:98:c3:e8:6a:3b:f5:a6:91:5b:f9:7f:
         b0:33:ab:48:37:15:19:59:fe:03:21:ad:04:b6:ea:72:04:de:
         82:9a:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:38 2025 by rpki-client