This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
File:                     62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json)
Hash identifier:          lZA0aSy/mHZjv9PgFdCN3A8tESnL4nVGKJg3s3+syJw=
Subject key identifier:   02:F3:66:DA:AE:B4:F4:70:BF:8E:E2:41:85:14:D0:38:C3:6F:A7:7A
Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90
Certificate issuer:       /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
Certificate serial:       3515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
Manifest number:          3502
Signing time:             Thu 18 Dec 2025 14:47:44 +0000
Manifest this update:     Thu 18 Dec 2025 14:47:43 +0000
Manifest next update:     Thu 25 Dec 2025 14:47:43 +0000
Files and hashes:         1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: zCIfSLD8Ur9XbQ5Rlje17bGgOenRtizvqf8/5UszarA=)
                          2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: TYegsm2VjJ4yGqZpokQnrUVAvOStwaW2yQvtqa0ccQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13589 (0x3515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
        Validity
            Not Before: Dec 18 14:47:43 2025 GMT
            Not After : Dec 25 14:47:43 2025 GMT
        Subject: CN=69441410-309a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:16:d3:51:cb:20:41:7b:23:85:d5:e4:6d:
                    70:80:d7:58:a2:2e:9f:7a:e9:4f:f6:11:47:18:f5:
                    c4:70:2a:b8:76:29:45:6c:58:04:54:bd:f4:95:9b:
                    ae:f0:81:58:3b:d5:f3:73:1d:c0:db:53:7c:89:31:
                    c9:db:8e:68:b0:9b:b9:b1:5d:08:44:d2:25:28:ce:
                    db:67:07:93:f8:d8:93:dc:03:5a:49:df:33:9d:c2:
                    59:5f:2b:a3:7b:a6:8b:bc:7c:8a:04:10:5e:17:e9:
                    f6:80:2b:aa:05:5c:08:63:88:f3:6b:ff:a7:40:98:
                    72:06:5d:3c:1c:e4:0f:b6:3c:0c:61:d1:0e:d9:27:
                    70:4c:5c:08:ba:a0:ef:bb:fb:9f:6c:4e:a4:6d:1b:
                    2d:99:6e:10:f3:e3:ab:10:f3:90:24:d3:c8:12:c4:
                    50:05:2d:07:04:d7:5d:7a:c5:f5:a5:5f:42:e0:70:
                    66:99:ff:a9:2f:46:ce:8b:54:d5:57:08:2a:c1:c3:
                    45:b3:da:6c:fd:cb:47:6d:6c:41:1c:29:29:67:15:
                    f5:37:ed:36:37:e6:8f:1e:fb:82:df:a1:6a:2d:ae:
                    7b:53:ed:98:07:11:25:23:21:b7:a4:3c:09:e5:75:
                    66:02:48:f0:c6:db:ff:1c:c0:0f:4d:ee:12:21:ee:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F3:66:DA:AE:B4:F4:70:BF:8E:E2:41:85:14:D0:38:C3:6F:A7:7A
            X509v3 Authority Key Identifier:
                keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:58:0a:49:d0:0a:a3:cb:98:cb:85:4b:6a:15:45:d1:d4:12:
         dc:dd:96:9a:fb:77:bc:55:8c:8b:69:d3:be:e4:96:cd:ec:dd:
         1b:b2:13:5b:cc:75:bc:14:ed:80:11:7b:fd:4b:35:8f:ae:db:
         79:c7:80:1f:1a:5f:43:9a:7b:9b:4f:ee:d6:af:de:df:62:bb:
         fc:ba:fc:88:cf:d2:15:c9:db:38:38:28:fb:ba:78:61:80:d0:
         a0:62:e5:69:bb:86:89:82:63:08:32:25:97:83:cd:35:86:89:
         d4:79:90:79:d5:10:ee:ac:5a:0f:03:29:64:6a:2c:33:45:5f:
         3e:b3:6f:69:a7:b5:11:eb:7d:bf:a3:b9:db:97:b8:d9:d3:bc:
         7f:d6:93:50:ae:83:00:6d:2e:6c:e3:f9:cf:a4:1b:ad:eb:f5:
         df:43:d2:76:e2:1e:b1:27:b4:df:53:c8:c4:0e:20:d0:d2:ed:
         08:05:42:95:64:d1:ac:60:aa:38:6d:28:d2:d9:f3:da:30:42:
         2a:f5:a1:34:d6:82:4e:32:59:ca:74:07:e3:ec:c7:c9:9d:44:
         06:ae:5e:e0:60:3f:e1:8c:fd:4d:a1:b6:d2:ef:2e:4a:95:02:
         03:ac:c4:fe:a1:d7:a8:3f:cd:ef:c4:60:7c:77:6c:f7:9a:67:
         fd:a3:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:27 2025 by rpki-client