This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
File:                     F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json)
Hash identifier:          d1xI4DjELccmeASCvvND1kIC3uKA7hliSqST2LKOrGQ=
Subject key identifier:   96:F8:C3:99:34:67:56:31:87:13:B9:54:72:30:C4:B5:33:AA:F0:EC
Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
Certificate issuer:       /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
Manifest number:          01B4
Signing time:             Sun 21 Dec 2025 02:22:22 +0000
Manifest this update:     Sun 21 Dec 2025 02:22:22 +0000
Manifest next update:     Sun 28 Dec 2025 02:22:22 +0000
Files and hashes:         1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: WC5bn8goCmTYDxJ1/Bh6z2MYmh2HsoN5pI6DurXivnc=)
                          2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: aajHDX/xMTvhOQEZLYkPj50OTCpjx3WnG5EW/RzkXC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
                          rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
        Validity
            Not Before: Dec 21 02:22:22 2025 GMT
            Not After : Dec 28 02:22:22 2025 GMT
        Subject: CN=694759de-979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:69:39:5e:20:3a:60:36:22:fa:ed:75:16:41:
                    17:cb:9f:3e:4d:d4:e4:22:3a:e8:ee:fd:07:71:cb:
                    5e:f1:86:c8:1d:5c:9b:66:ac:22:19:ac:7a:28:54:
                    0b:bf:f4:30:cd:be:ad:b5:e7:73:2c:db:25:4d:27:
                    cf:1f:ff:d7:b8:19:a8:e2:06:b2:94:13:8e:f7:75:
                    dc:ff:b4:65:8a:60:48:a6:94:c4:27:10:e1:20:e8:
                    d3:88:a1:a3:ef:01:23:cd:16:88:2e:33:6a:f6:3d:
                    8a:0c:22:b1:32:74:1f:f7:44:ea:6f:2e:a6:60:0e:
                    5b:9f:6e:5f:ea:dc:e9:cd:86:3a:78:03:54:b0:5e:
                    02:8a:aa:c0:19:ea:4e:44:b8:ef:c8:56:1e:e4:a7:
                    77:34:f1:32:56:bc:f0:e7:df:30:80:2c:3a:bc:01:
                    86:d3:22:8c:f1:50:2e:9a:a2:4d:d9:15:b5:d2:1e:
                    db:6e:d4:1a:82:7e:af:11:64:ad:3c:7e:9b:01:a2:
                    ef:45:6d:49:12:38:ec:41:3c:53:0b:db:b2:52:19:
                    5c:74:7e:b5:85:8a:5d:91:50:23:c7:b3:39:f9:43:
                    15:db:f1:05:0e:62:b6:03:68:09:0e:c9:ab:2e:70:
                    e1:09:b3:5a:50:83:4f:a6:bd:fb:be:52:a3:64:fd:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:C3:99:34:67:56:31:87:13:B9:54:72:30:C4:B5:33:AA:F0:EC
            X509v3 Authority Key Identifier:
                keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:c2:c9:bd:83:2a:5a:47:cf:0a:c7:c0:aa:24:dc:0f:94:
         a4:37:ab:57:6f:ac:bb:6d:ca:81:8b:1a:2c:3e:ac:56:8f:14:
         e5:63:ca:c9:5b:1a:ab:60:3d:4c:89:c6:fb:d5:c9:7e:4e:cb:
         0b:b6:80:72:94:a9:75:7a:62:95:6b:cd:20:41:1c:b1:5f:1e:
         7d:a1:8a:6b:04:c1:69:ae:a9:73:f0:00:b9:9c:a9:6b:d6:f2:
         04:41:7f:ad:99:88:8d:9e:21:96:81:6c:28:e1:80:c4:ec:8b:
         50:2e:03:22:c7:25:ee:76:39:d2:d2:d2:52:48:a3:c0:04:6f:
         47:81:2b:27:bb:8b:4d:ac:2c:9c:33:89:c2:9c:21:9a:dc:e8:
         db:cd:0a:d0:e8:2b:96:f6:40:ca:8a:a9:7a:2a:60:4d:1d:2d:
         86:20:42:ab:24:4b:04:61:e4:0d:f2:b4:af:49:4c:8e:89:8d:
         ca:3f:2c:35:f6:56:02:be:f9:5f:13:8c:3b:89:35:e7:a4:17:
         00:0f:4c:e4:68:42:c7:95:55:cd:63:12:39:4d:4c:1d:19:1f:
         e2:ee:a9:be:f8:df:8b:cb:46:61:ad:2a:04:58:f3:7b:10:49:
         c8:8f:a5:4a:66:72:58:dd:c2:3f:54:69:68:79:df:8c:30:f9:
         f1:77:8a:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3
MDlBMjJENjIwHhcNMjUxMjIxMDIyMjIyWhcNMjUxMjI4MDIyMjIyWjAYMRYwFAYD
VQQDDA02OTQ3NTlkZS05NzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Gk5XiA6YDYi+u11FkEXy58+TdTkIjro7v0Hccte8YbIHVybZqwiGax6KFQL
v/Qwzb6ttedzLNslTSfPH//XuBmo4gaylBOO93Xc/7RlimBIppTEJxDhIOjTiKGj
7wEjzRaILjNq9j2KDCKxMnQf90Tqby6mYA5bn25f6tzpzYY6eANUsF4CiqrAGepO
RLjvyFYe5Kd3NPEyVrzw598wgCw6vAGG0yKM8VAumqJN2RW10h7bbtQagn6vEWSt
PH6bAaLvRW1JEjjsQTxTC9uyUhlcdH61hYpdkVAjx7M5+UMV2/EFDmK2A2gJDsmr
LnDhCbNaUINPpr37vlKjZP1JdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb4w5k0
Z1YxhxO5VHIwxLUzqvDsMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1
OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR
b1VTRndDb1M4QUZ3bWlMV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLdsLJvYMqWkfPCsfAqiTcD5SkN6tXb6y7bcqBixosPqxWjxTlY8rJ
WxqrYD1Micb71cl+TssLtoBylKl1emKVa80gQRyxXx59oYprBMFprqlz8AC5nKlr
1vIEQX+tmYiNniGWgWwo4YDE7ItQLgMixyXudjnS0tJSSKPABG9HgSsnu4tNrCyc
M4nCnCGa3OjbzQrQ6CuW9kDKiql6KmBNHS2GIEKrJEsEYeQN8rSvSUyOiY3KPyw1
9lYCvvlfE4w7iTXnpBcAD0zkaELHlVXNYxI5TUwdGR/i7qm++N+Ly0ZhrSoEWPN7
EEnIj6VKZnJY3cI/VGloed+MMPnxd4rB
-----END CERTIFICATE-----
Generated at Mon Dec 22 07:04:28 2025 by rpki-client