This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
File:                     dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json)
Hash identifier:          HT/1s7ViHTK01U5nL4s+lAFzsoWT9EZmdjrXzDkvDGA=
Subject key identifier:   52:8B:2B:B1:EA:CA:86:04:6B:BA:49:43:A5:0A:2D:B4:94:52:3F:D2
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Certificate issuer:       /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
Manifest number:          039B
Signing time:             Tue 30 Dec 2025 23:52:42 +0000
Manifest this update:     Tue 30 Dec 2025 23:52:41 +0000
Manifest next update:     Tue 06 Jan 2026 23:52:41 +0000
Files and hashes:         1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: NXI03WWVzFD9KqGO6cDRbH+2X6Ko/QDj/KanwkVxuvE=)
                          2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
                          rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 23:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B
        Validity
            Not Before: Dec 30 23:52:41 2025 GMT
            Not After : Jan  6 23:52:41 2026 GMT
        Subject: CN=695465ca-9f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:a6:27:2d:43:11:a0:50:a0:42:74:2a:5d:
                    de:1b:b1:89:6c:13:9b:f3:c6:cc:f8:9a:99:b8:37:
                    d9:77:54:40:2b:63:41:89:86:03:ed:e8:fc:8e:02:
                    6d:34:a8:04:c0:8e:d2:78:a1:d9:e5:33:a7:29:75:
                    ca:50:fe:68:4a:5e:54:b3:11:39:02:a4:d3:2e:de:
                    a5:34:fb:6f:ed:89:0a:72:12:f7:0a:5f:a9:ab:a6:
                    44:a8:ee:30:d1:94:e4:f6:93:66:45:e4:6b:e5:da:
                    9c:d6:e1:5d:a9:6d:2f:c1:a2:85:ce:b2:28:61:e8:
                    96:27:48:36:c1:a0:e1:e6:84:bd:fe:bf:4b:9e:f1:
                    6e:57:da:63:f1:6f:a5:b9:9e:1c:8d:ba:9f:ae:12:
                    ca:66:2b:44:f7:d0:2c:03:72:93:a7:02:29:5d:aa:
                    1d:84:55:91:f7:2e:7d:60:2b:f5:e7:eb:e4:89:0f:
                    6f:29:60:38:4b:e7:82:16:a6:04:43:c7:31:43:95:
                    dd:1d:05:c1:93:f8:3e:76:9e:a2:29:aa:80:8d:b4:
                    82:c8:d6:99:2b:bf:77:bc:31:cd:ce:23:0d:b0:48:
                    f5:13:c7:8a:30:3b:7e:96:e9:e2:b9:71:57:76:e6:
                    1f:08:55:bc:44:29:e9:dc:36:2e:b9:ef:ba:e3:7d:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:2B:B1:EA:CA:86:04:6B:BA:49:43:A5:0A:2D:B4:94:52:3F:D2
            X509v3 Authority Key Identifier:
                keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:38:25:c1:8d:39:be:23:a9:46:87:8e:9d:93:3d:da:ed:2c:
         f6:e4:2f:20:b1:a4:b4:13:36:b2:5f:32:93:5f:fc:fd:c5:0d:
         3c:51:37:7f:b0:6e:d3:e8:34:ed:2b:d3:50:22:f6:6e:72:06:
         b6:97:3d:ed:fd:9b:6a:c3:b3:7c:bf:14:8b:98:74:b5:74:34:
         33:c6:c4:06:84:16:80:1b:3f:85:0d:a1:e5:7e:2b:79:e5:62:
         03:59:b3:06:83:07:1b:22:36:81:3e:01:a9:73:f3:2d:b1:b5:
         04:f0:5e:6d:1f:73:b7:37:64:97:be:39:11:da:46:cb:0a:70:
         fc:57:d9:70:6c:6c:84:dd:de:a9:2c:18:c8:06:db:60:29:e5:
         39:b6:5c:26:c2:41:c0:93:b5:31:96:8e:6c:4a:fa:5e:b9:bd:
         f3:6b:ad:54:e8:a4:ef:15:90:22:36:f0:6f:49:05:94:ff:cb:
         d3:87:08:e9:d7:4a:97:10:3a:5e:59:bd:2e:83:8f:68:47:de:
         a2:8d:68:7e:79:03:92:23:05:cf:e0:04:59:14:0f:0b:0e:db:
         a3:d4:f0:dd:f6:a5:cb:b3:94:6c:34:4b:f9:89:90:f4:68:a7:
         c7:a3:3e:93:e6:94:4d:24:da:de:cf:4d:f9:d3:68:0f:76:fa:
         ba:55:f7:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5
Qjg3MERFMUIwHhcNMjUxMjMwMjM1MjQxWhcNMjYwMTA2MjM1MjQxWjAYMRYwFAYD
VQQDDA02OTU0NjVjYS05ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5iWmJy1DEaBQoEJ0Kl3eG7GJbBOb88bM+JqZuDfZd1RAK2NBiYYD7ej8jgJt
NKgEwI7SeKHZ5TOnKXXKUP5oSl5UsxE5AqTTLt6lNPtv7YkKchL3Cl+pq6ZEqO4w
0ZTk9pNmReRr5dqc1uFdqW0vwaKFzrIoYeiWJ0g2waDh5oS9/r9LnvFuV9pj8W+l
uZ4cjbqfrhLKZitE99AsA3KTpwIpXaodhFWR9y59YCv15+vkiQ9vKWA4S+eCFqYE
Q8cxQ5XdHQXBk/g+dp6iKaqAjbSCyNaZK793vDHNziMNsEj1E8eKMDt+luniuXFX
duYfCFW8RCnp3DYuue+64311dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKLK7Hq
yoYEa7pJQ6UKLbSUUj/SMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2
QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD
Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1OCXBjTm+I6lGh46dkz3a7Sz25C8gsaS0EzayXzKTX/z9xQ08UTd/
sG7T6DTtK9NQIvZucga2lz3t/Ztqw7N8vxSLmHS1dDQzxsQGhBaAGz+FDaHlfit5
5WIDWbMGgwcbIjaBPgGpc/MtsbUE8F5tH3O3N2SXvjkR2kbLCnD8V9lwbGyE3d6p
LBjIBttgKeU5tlwmwkHAk7Uxlo5sSvpeub3za61U6KTvFZAiNvBvSQWU/8vThwjp
10qXEDpeWb0ug49oR96ijWh+eQOSIwXP4ARZFA8LDtuj1PDd9qXLs5RsNEv5iZD0
aKfHoz6T5pRNJNrez03502gPdvq6Vfev
-----END CERTIFICATE-----
Generated at Wed Dec 31 10:28:12 2025 by rpki-client