This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
File:                     dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json)
Hash identifier:          VZGKaxKmKgRk31eF5Y9vCV+18/iXQFo4iTnkXXgP9kQ=
Subject key identifier:   AD:D2:46:2D:1D:34:2D:4B:FB:87:F8:3F:8D:8D:7C:7B:8B:59:98:9A
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Certificate issuer:       /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial:       06B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
Manifest number:          06AA
Signing time:             Thu 18 Dec 2025 21:40:57 +0000
Manifest this update:     Thu 18 Dec 2025 21:40:56 +0000
Manifest next update:     Thu 25 Dec 2025 21:40:56 +0000
Files and hashes:         1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: pFY/c7dHGX7hMIHZVv0d3Cxe5Vv0FEyPiHuMVz/0nrM=)
                          2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
                          rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
        Validity
            Not Before: Dec 18 21:40:56 2025 GMT
            Not After : Dec 25 21:40:56 2025 GMT
        Subject: CN=694474e9-b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:28:fa:a9:06:4e:ae:94:69:06:8f:40:ca:
                    4e:b4:26:02:54:08:e9:e1:eb:9f:a0:c4:ac:0c:21:
                    a2:40:a5:68:da:e7:09:24:e0:b1:4c:8a:b8:11:3a:
                    4f:91:ac:93:47:0d:e2:de:fa:fc:9f:7b:c0:d5:02:
                    56:0b:da:50:19:56:67:47:b9:53:50:f6:0b:f3:f3:
                    98:bc:ba:0c:6f:da:0d:4c:9a:67:79:e1:2b:d0:61:
                    ba:23:3b:d9:b8:8a:75:ee:3c:aa:5c:b1:9a:6c:d7:
                    c2:b7:5f:c9:81:8f:41:a2:e5:16:10:49:68:1d:b9:
                    fe:1d:72:6a:68:54:1a:ec:a3:d8:c1:c1:8e:a3:a6:
                    6b:80:b2:d6:06:66:b4:67:1f:10:71:90:89:d9:2c:
                    7d:71:05:c5:b0:97:88:8b:89:1b:33:ad:9d:af:a4:
                    3d:99:c6:19:c0:85:9b:25:f4:26:ac:cb:e8:3c:c9:
                    12:4a:f5:cb:a9:8b:5e:48:ed:0a:1b:09:9e:39:9f:
                    ce:db:fd:16:e8:6d:71:07:6a:2a:1a:a6:a3:45:79:
                    1e:d8:e8:29:d9:24:31:e2:78:08:e0:5f:83:40:1b:
                    c7:6f:70:2e:0f:ad:a0:b8:bd:f8:fa:14:78:d2:21:
                    6f:07:45:f2:16:e0:e6:35:8f:ff:b9:50:c1:72:95:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D2:46:2D:1D:34:2D:4B:FB:87:F8:3F:8D:8D:7C:7B:8B:59:98:9A
            X509v3 Authority Key Identifier:
                keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:93:44:1f:63:27:29:fa:20:13:92:d6:62:5c:d6:48:0a:f9:
         d3:80:66:bb:59:d3:e4:5e:f8:a8:b6:46:36:47:72:35:74:52:
         11:d4:f1:82:bc:fd:f5:4a:61:79:50:c8:ca:c7:a1:ff:dc:20:
         7e:6e:b4:ef:93:11:e4:c4:f9:7c:f3:54:b7:b3:fd:a9:25:6a:
         d3:9d:3e:b7:c7:c7:79:6e:98:03:9d:34:71:7e:a1:e9:47:0d:
         24:a5:ca:b3:cb:4d:a2:a5:dc:2e:db:3d:e5:78:1d:ec:f5:31:
         ba:48:f8:50:0a:3a:69:ef:a3:8d:94:c0:58:47:be:15:4f:95:
         72:2b:a5:b5:28:d5:bf:81:88:d0:32:13:29:c4:61:c9:34:8f:
         24:d5:c9:af:eb:a8:2c:bc:87:cf:dd:71:08:83:dd:0e:7c:59:
         b7:2d:21:f2:d7:e0:1c:c6:03:79:6f:71:44:a0:1b:fd:73:87:
         5b:03:4a:ff:9c:f7:0e:77:f9:4c:56:c3:07:6a:5e:d7:61:32:
         e4:2c:49:29:f7:85:d0:94:38:14:81:0e:fd:1b:ad:b2:c7:e5:
         2e:eb:c9:5f:43:c3:66:02:cb:9a:59:2a:f8:6e:3c:55:95:45:
         6a:0d:ed:f9:51:ad:e2:49:5c:b3:4e:a8:e0:f9:ad:98:61:f6:
         fe:0e:31:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx
QzhCRkVBMjgwHhcNMjUxMjE4MjE0MDU2WhcNMjUxMjI1MjE0MDU2WjAYMRYwFAYD
VQQDDA02OTQ0NzRlOS1iN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcoo+qkGTq6UaQaPQMpOtCYCVAjp4eufoMSsDCGiQKVo2ucJJOCxTIq4ETpP
kayTRw3i3vr8n3vA1QJWC9pQGVZnR7lTUPYL8/OYvLoMb9oNTJpneeEr0GG6IzvZ
uIp17jyqXLGabNfCt1/JgY9BouUWEEloHbn+HXJqaFQa7KPYwcGOo6ZrgLLWBma0
Zx8QcZCJ2Sx9cQXFsJeIi4kbM62dr6Q9mcYZwIWbJfQmrMvoPMkSSvXLqYteSO0K
GwmeOZ/O2/0W6G1xB2oqGqajRXke2Ogp2SQx4ngI4F+DQBvHb3AuD62guL34+hR4
0iFvB0XyFuDmNY//uVDBcpWzswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3SRi0d
NC1L+4f4P42NfHuLWZiaMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE
MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx
M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkk0QfYycp+iATktZiXNZICvnTgGa7WdPkXviotkY2R3I1dFIR1PGC
vP31SmF5UMjKx6H/3CB+brTvkxHkxPl881S3s/2pJWrTnT63x8d5bpgDnTRxfqHp
Rw0kpcqzy02ipdwu2z3leB3s9TG6SPhQCjpp76ONlMBYR74VT5VyK6W1KNW/gYjQ
MhMpxGHJNI8k1cmv66gsvIfP3XEIg90OfFm3LSHy1+AcxgN5b3FEoBv9c4dbA0r/
nPcOd/lMVsMHal7XYTLkLEkp94XQlDgUgQ79G62yx+Uu68lfQ8NmAsuaWSr4bjxV
lUVqDe35Ua3iSVyzTqjg+a2YYfb+DjG8
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:52 2025 by rpki-client