This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          p6juESrQuZiw7XYKDkgS4QXGDnUJFuXiaCItFOdLXsg=
Subject key identifier:   27:1C:D0:5A:58:C7:2E:0D:CB:C5:68:52:96:EB:B7:9A:FC:08:B9:74
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0F4B
Signing time:             Thu 18 Dec 2025 17:23:40 +0000
Manifest this update:     Thu 18 Dec 2025 17:23:40 +0000
Manifest next update:     Thu 25 Dec 2025 17:23:40 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: THzdAZi9gaMaden2aEw86Avu7sH6Os3wmaEyAy7x3ys=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3924 (0xf54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Dec 18 17:23:40 2025 GMT
            Not After : Dec 25 17:23:40 2025 GMT
        Subject: CN=6944389c-43aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:df:ce:28:77:25:68:9c:b0:4d:0c:ec:f3:
                    1c:47:40:1e:21:3e:22:3b:b9:14:6d:40:b6:31:fb:
                    b6:a8:c5:b6:39:e1:21:fd:be:2d:a2:7c:82:b4:74:
                    c1:81:f9:23:86:a7:f1:17:75:3f:bf:32:f4:bc:8e:
                    3e:c5:6b:34:1b:59:61:58:4d:54:0f:bb:b6:12:62:
                    4d:5c:2c:cc:8a:78:38:3b:54:52:3f:d9:8e:6f:16:
                    67:5a:72:53:db:66:e7:4c:05:37:b2:c0:6c:cc:98:
                    cc:39:f5:0e:44:bf:5e:85:db:aa:d9:b5:ba:c3:bc:
                    b5:59:6d:9b:f3:d9:1f:8e:b2:d0:2f:db:81:48:64:
                    0e:a7:ab:26:30:68:22:a2:9d:6a:3f:54:be:76:fc:
                    43:41:67:54:6e:eb:b7:1c:eb:9f:05:e5:c1:a7:73:
                    08:63:3a:9d:ce:5b:ea:9e:8a:a6:dd:7d:fe:7b:2a:
                    34:c0:ec:13:4d:80:d2:ec:83:6d:3a:bc:eb:55:a2:
                    16:78:d7:8e:d2:18:58:77:90:d5:f5:5f:6f:d7:dc:
                    4e:cf:ef:ec:95:ff:86:2c:e9:94:8d:3a:74:bc:20:
                    b8:ff:3c:10:66:75:e6:73:ee:5a:eb:54:9a:f5:0b:
                    14:a9:7f:24:84:69:13:41:0b:05:dc:ec:76:df:c8:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1C:D0:5A:58:C7:2E:0D:CB:C5:68:52:96:EB:B7:9A:FC:08:B9:74
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d1:ee:0a:63:45:0b:64:e4:6e:35:ca:6f:f4:f0:f3:9b:f6:
         be:87:a4:86:54:18:58:5f:68:66:5a:2f:78:40:0e:6b:03:42:
         6e:d0:a1:10:02:0a:bd:13:12:ab:5d:ca:f2:86:0f:0b:f7:57:
         4b:ee:85:7b:61:70:62:db:0e:bf:22:05:1b:c1:ac:be:e7:72:
         10:1f:bd:23:97:2c:5f:86:8d:00:09:d2:d0:62:53:40:ba:ad:
         ad:13:6f:1c:42:7f:83:0b:f7:a2:7d:4a:85:cc:b5:31:6e:6f:
         39:b3:e9:c4:ca:9a:35:00:8e:ea:fa:f0:4b:51:11:92:c4:97:
         25:2f:fc:fa:2e:a8:d6:d5:b9:9a:27:fe:9a:27:14:ad:df:d4:
         37:a1:39:74:8b:05:6f:1a:44:e7:bb:03:39:50:13:ff:b8:72:
         41:5f:4a:f2:d6:cc:79:11:36:9f:89:07:0c:c6:e9:df:e0:9c:
         61:17:4b:48:c1:3c:df:90:27:10:bc:16:c3:de:9e:91:a5:2e:
         67:00:b9:aa:7e:82:d3:29:26:98:77:fe:a1:42:e9:71:24:87:
         2a:c2:d3:e1:72:75:52:f9:95:c3:28:a4:ea:09:ce:9f:47:bb:
         31:cf:4c:dc:f2:5f:83:08:d6:32:26:5d:09:6d:02:90:f9:ab:
         c9:c5:e8:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQyNEQxMTAvBgNVBAUTKEFFREI5RjdFMzg1RkE2NDQzNkQzODRCQ0I3QjkyRTA5
NDY5NTU0MzMwHhcNMjUxMjE4MTcyMzQwWhcNMjUxMjI1MTcyMzQwWjAYMRYwFAYD
VQQDDA02OTQ0Mzg5Yy00M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMHfzih3JWicsE0M7PMcR0AeIT4iO7kUbUC2Mfu2qMW2OeEh/b4tonyCtHTB
gfkjhqfxF3U/vzL0vI4+xWs0G1lhWE1UD7u2EmJNXCzMing4O1RSP9mObxZnWnJT
22bnTAU3ssBszJjMOfUORL9ehduq2bW6w7y1WW2b89kfjrLQL9uBSGQOp6smMGgi
op1qP1S+dvxDQWdUbuu3HOufBeXBp3MIYzqdzlvqnoqm3X3+eyo0wOwTTYDS7INt
OrzrVaIWeNeO0hhYd5DV9V9v19xOz+/slf+GLOmUjTp0vCC4/zwQZnXmc+5a61Sa
9QsUqX8khGkTQQsF3Ox238gvBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcc0FpY
xy4Ny8VoUpbrt5r8CLl0MB8GA1UdIwQYMBaAFK7bn344X6ZENtOEvLe5LglGlVQz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDI0RC83NTExMDlBQTgw
NUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBrUTIwNFM4dDdrdUNVYVZW
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J0dWZmamhmcGtRMjA0Uzh0N2t1Q1VhVlZETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDI0RC83NTExMDlBQTgwNUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBr
UTIwNFM4dDdrdUNVYVZWRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC80e4KY0ULZORuNcpv9PDzm/a+h6SGVBhYX2hmWi94QA5rA0Ju0KEQ
Agq9ExKrXcryhg8L91dL7oV7YXBi2w6/IgUbway+53IQH70jlyxfho0ACdLQYlNA
uq2tE28cQn+DC/eifUqFzLUxbm85s+nEypo1AI7q+vBLURGSxJclL/z6LqjW1bma
J/6aJxSt39Q3oTl0iwVvGkTnuwM5UBP/uHJBX0ry1sx5ETafiQcMxunf4JxhF0tI
wTzfkCcQvBbD3p6RpS5nALmqfoLTKSaYd/6hQulxJIcqwtPhcnVS+ZXDKKTqCc6f
R7sxz0zc8l+DCNYyJl0JbQKQ+avJxei+
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:55 2025 by rpki-client