This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File:                     dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier:          c9c0G246b+LyS1HpoMx7MLLW3uvN3hKRO2ekyVifanI=
Subject key identifier:   24:69:F2:67:E5:CB:A6:C2:A8:5C:06:18:E1:7E:4F:47:62:91:7E:13
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer:       /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number:          0637
Signing time:             Sat 20 Dec 2025 22:03:24 +0000
Manifest this update:     Sat 20 Dec 2025 22:03:24 +0000
Manifest next update:     Sat 27 Dec 2025 22:03:24 +0000
Files and hashes:         1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: clB7AnikqkmzuNH6iSHyXFEpVLSK8aMq68KWRwzHwHI=)
                          2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: JJk2KbVj3549xovpohU2S3XzJZf29aYbS1yj8+AIFCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
                          rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
        Validity
            Not Before: Dec 20 22:03:24 2025 GMT
            Not After : Dec 27 22:03:24 2025 GMT
        Subject: CN=69471d2c-2e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:6d:eb:fc:0c:bb:78:d2:58:95:39:36:f5:
                    16:e6:81:6c:15:e7:75:c2:88:9c:be:aa:b3:a7:2f:
                    7b:26:f4:1b:ea:8e:df:15:21:a6:44:61:a2:a2:08:
                    7a:1e:f3:53:6c:b9:38:fb:64:16:2a:0d:16:80:b6:
                    a2:52:09:e7:a1:c5:df:b2:7e:ac:b6:66:c4:fc:d7:
                    85:0d:de:8d:59:f5:d8:4d:f0:df:86:51:33:c0:45:
                    56:62:fa:52:55:69:78:20:25:75:f3:0f:b4:47:b6:
                    9c:3f:7c:fa:fb:5c:13:c3:c3:f0:50:0d:a1:4a:02:
                    ac:f6:e8:1e:27:6e:e7:b5:a6:4e:37:55:21:82:53:
                    29:f8:af:c9:70:39:a5:26:7e:22:4b:c8:c4:04:ec:
                    08:d8:96:e6:99:f1:e0:30:a9:ad:15:74:de:98:2f:
                    83:83:13:96:69:89:4b:54:4e:11:ab:77:d2:6a:60:
                    27:2b:36:a4:67:c6:f7:f4:8a:8c:bd:d3:56:b5:ba:
                    1b:0f:8c:e7:f1:17:44:fc:65:34:85:ce:e2:9b:a8:
                    d2:b2:3c:e2:4d:2a:11:07:5c:23:d6:0d:39:ac:e3:
                    34:e0:db:fe:93:5e:0c:3f:42:97:6c:6c:8e:43:73:
                    62:2a:81:5f:4c:f9:f9:39:4c:60:e7:1b:a1:df:19:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:69:F2:67:E5:CB:A6:C2:A8:5C:06:18:E1:7E:4F:47:62:91:7E:13
            X509v3 Authority Key Identifier:
                keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:88:63:69:a8:5a:35:ca:53:d7:f1:81:7d:0e:cb:46:2e:78:
         80:4b:48:30:14:b5:e1:25:e6:4e:a6:7c:9a:ab:c3:eb:6c:dc:
         2a:c2:d7:87:11:4d:32:e2:cc:b8:2b:6f:a9:a3:f7:26:6e:11:
         77:33:87:79:38:f0:a6:73:ac:f5:a2:b3:bc:38:58:07:a8:ab:
         82:99:47:d1:b5:c2:d8:04:3c:ab:3e:f4:4b:35:ac:66:88:20:
         30:e8:91:70:20:2b:fc:61:db:dc:d1:8d:37:49:64:1d:d4:16:
         91:9e:be:a9:30:ef:de:ff:86:b3:1f:4e:29:6d:b2:06:85:24:
         5e:9b:dd:7a:7a:c0:72:ea:d4:b8:6c:d6:f1:9b:69:43:e9:be:
         9b:ad:22:7d:6d:7d:26:78:b2:17:91:da:8b:48:43:91:eb:33:
         25:b8:1a:a5:df:10:9b:cc:6a:7c:10:dd:58:0a:38:7e:1f:60:
         1e:65:14:a6:a4:d8:81:7f:19:2d:87:ca:8f:1c:38:bc:83:58:
         5d:8b:99:6b:47:ce:88:95:7b:a0:b0:fe:b5:e2:d5:bc:79:2a:
         a9:07:25:a3:7c:d0:d3:ad:a3:b9:ca:8c:ec:f0:2a:6a:5c:23:
         7e:3a:7a:63:73:5b:5a:c0:75:e3:13:c6:59:7f:89:ac:6a:69:
         ed:c9:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:08:56 2025 by rpki-client