This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
File:                     1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json)
Hash identifier:          pyNSpYeABTovf0b7Od20FX8uyFAfrV17E18CWjXi8OA=
Subject key identifier:   D6:8F:52:BC:4A:0C:E2:C8:19:3C:DA:53:2A:A7:AA:64:2B:8C:13:33
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Certificate issuer:       /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
Manifest number:          DB
Signing time:             Fri 19 Dec 2025 04:43:35 +0000
Manifest this update:     Fri 19 Dec 2025 04:43:35 +0000
Manifest next update:     Fri 26 Dec 2025 04:43:35 +0000
Files and hashes:         1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: SETgs5VyGnLt7y00mRoLnIuD0Kn+kEvxZ4GcMntm2mU=)
                          2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: Db1IjAN6j335Sw0gQLUk68pP8yGCP41bxuCBDXUeviA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
        Validity
            Not Before: Dec 19 04:43:35 2025 GMT
            Not After : Dec 26 04:43:35 2025 GMT
        Subject: CN=6944d7f7-5400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:17:be:bc:10:e6:20:df:6f:9d:8f:a4:bc:
                    a3:4b:a1:b7:b9:33:04:ca:1f:be:a2:e3:25:08:de:
                    f2:d0:b6:0f:02:f0:6d:10:73:05:ab:89:90:22:4d:
                    6a:de:ad:cd:ac:cc:6e:c2:c4:18:90:71:3e:97:8c:
                    b3:ee:80:f9:17:a7:2f:d0:a1:8f:3e:18:4b:8e:ea:
                    a8:41:e2:c0:ae:5a:7d:2b:8f:8d:6c:be:90:85:dc:
                    cc:44:18:19:57:f2:26:70:84:07:94:97:59:15:a4:
                    52:0e:76:64:1b:0f:c7:63:92:5a:2f:10:46:d8:71:
                    ef:92:b2:c4:74:cd:92:e5:d0:01:dd:2e:f9:f4:08:
                    d9:35:da:d4:f7:86:81:34:e6:d3:70:f2:98:fc:45:
                    fd:bf:e0:99:24:f0:1d:85:6c:b6:ae:73:58:d5:8a:
                    f8:f1:dc:57:03:de:47:2e:f5:af:e7:bc:ec:7e:17:
                    b8:ee:0b:3f:6b:be:74:e8:4f:fb:ea:5f:be:de:45:
                    f8:ef:2d:df:80:28:98:a4:5c:2d:d7:3c:29:10:b2:
                    fd:ac:e5:d2:9c:66:64:9f:92:e8:1a:7a:68:8f:ee:
                    97:20:05:fb:24:08:e5:be:31:04:4b:1b:c8:87:32:
                    c2:6f:88:9a:02:26:dc:da:9a:92:5f:26:82:0c:26:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:52:BC:4A:0C:E2:C8:19:3C:DA:53:2A:A7:AA:64:2B:8C:13:33
            X509v3 Authority Key Identifier:
                keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:5c:13:ef:df:9a:8e:65:8e:8b:9a:cc:e6:54:b6:43:85:
         a9:32:e6:4d:38:39:55:64:6a:43:9a:fd:36:73:19:f2:96:c7:
         2e:c6:88:d9:9a:44:44:c9:9d:d6:38:27:08:ee:c0:ac:2e:f9:
         a0:bf:e8:2c:57:9f:35:ea:0f:5b:61:6b:5e:29:5a:6c:3f:9d:
         1d:ad:19:99:a2:e0:78:2c:f4:5f:9f:72:e5:a2:36:37:e0:6a:
         6d:f0:86:f3:65:29:71:00:4a:b3:81:8e:82:07:c2:f3:a8:16:
         c0:7d:19:f3:d6:d0:b4:9a:9f:d8:23:29:4b:90:c2:f7:15:b9:
         a0:6d:d9:d4:55:93:c9:4c:81:10:c2:86:30:1e:07:02:ba:4d:
         2f:09:29:3e:a9:7e:4e:c9:66:1c:c0:83:67:45:e5:86:15:e3:
         86:e2:64:af:78:60:b5:7a:fc:a2:9e:9d:85:b1:18:70:6f:a9:
         3a:1d:b6:8a:c6:11:78:25:d9:e3:07:db:93:ae:d3:61:39:6d:
         f8:6a:15:59:83:0b:9c:a3:76:5e:58:6f:3c:11:f1:b1:c6:d3:
         92:e2:a4:46:8d:dd:cc:b8:0d:1c:7d:dd:55:0b:71:3d:39:51:
         87:08:b2:5f:0c:4c:99:36:7d:95:a8:e0:ad:8e:8c:60:37:8f:
         c5:5a:89:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1QzcxMTAvBgNVBAUTKEQ1NTA0NzA2MTM5MzZEN0Q0N0I3MTk3QUI1MjU2RkEw
NkUwQkRDMTEwHhcNMjUxMjE5MDQ0MzM1WhcNMjUxMjI2MDQ0MzM1WjAYMRYwFAYD
VQQDDA02OTQ0ZDdmNy01NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy84XvrwQ5iDfb52PpLyjS6G3uTMEyh++ouMlCN7y0LYPAvBtEHMFq4mQIk1q
3q3NrMxuwsQYkHE+l4yz7oD5F6cv0KGPPhhLjuqoQeLArlp9K4+NbL6QhdzMRBgZ
V/ImcIQHlJdZFaRSDnZkGw/HY5JaLxBG2HHvkrLEdM2S5dAB3S759AjZNdrU94aB
NObTcPKY/EX9v+CZJPAdhWy2rnNY1Yr48dxXA95HLvWv57zsfhe47gs/a7506E/7
6l++3kX47y3fgCiYpFwt1zwpELL9rOXSnGZkn5LoGnpoj+6XIAX7JAjlvjEESxvI
hzLCb4iaAibc2pqSXyaCDCbtnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaPUrxK
DOLIGTzaUyqnqmQrjBMzMB8GA1UdIwQYMBaAFNVQRwYTk219R7cZerUlb6BuC9wR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDNy8zQzJEMThGQzkw
ODIxMUVGOTVBRDQ4MEZDNEY5QUUwMi8xVkJIQmhPVGJYMUh0eGw2dFNWdm9HNEwz
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFWQkhCaE9UYlgxSHR4bDZ0U1Z2b0c0TDNCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDNy8zQzJEMThGQzkwODIxMUVGOTVBRDQ4MEZDNEY5QUUwMi8xVkJIQmhPVGJY
MUh0eGw2dFNWdm9HNEwzQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEsFwT79+ajmWOi5rM5lS2Q4WpMuZNODlVZGpDmv02cxnylscuxojZ
mkREyZ3WOCcI7sCsLvmgv+gsV5816g9bYWteKVpsP50drRmZouB4LPRfn3LlojY3
4Gpt8IbzZSlxAEqzgY6CB8LzqBbAfRnz1tC0mp/YIylLkML3FbmgbdnUVZPJTIEQ
woYwHgcCuk0vCSk+qX5OyWYcwINnReWGFeOG4mSveGC1evyinp2FsRhwb6k6HbaK
xhF4JdnjB9uTrtNhOW34ahVZgwuco3ZeWG88EfGxxtOS4qRGjd3MuA0cfd1VC3E9
OVGHCLJfDEyZNn2VqOCtjoxgN4/FWolA
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:35:34 2025 by rpki-client