This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File:                     0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier:          Lzgc2Ao4l9sedM1aDRWFRF+roViLUptc0AtlMosV3bw=
Subject key identifier:   96:09:51:D3:47:71:2A:E5:8D:1D:8B:61:A3:8F:CD:C2:8A:D9:98:D7
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer:       /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number:          18
Signing time:             Fri 19 Dec 2025 06:46:21 +0000
Manifest this update:     Fri 19 Dec 2025 06:46:20 +0000
Manifest next update:     Fri 26 Dec 2025 06:46:20 +0000
Files and hashes:         1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: 4UQGY/XWZJBJMfhZ1scKFzL7wVHTnzUHv9acv5svJEU=)
                          2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: QTRHzthcKTfHq7lMpoI6Y/zfK2lWpwoDu2JMPtFs/1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
                          rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
        Validity
            Not Before: Dec 19 06:46:20 2025 GMT
            Not After : Dec 26 06:46:20 2025 GMT
        Subject: CN=6944f4bc-b462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:98:72:6f:4a:6c:2c:06:29:b0:5d:53:30:
                    73:6f:0c:ad:ad:23:87:e5:8d:a4:8f:03:14:a2:4b:
                    b9:9c:b6:cd:af:2c:01:0e:ab:17:22:07:b6:da:b2:
                    f5:72:62:d8:db:3f:20:d2:79:dd:55:f9:bf:3e:ea:
                    0d:7b:5b:55:6c:cb:a5:2e:cc:07:7d:86:75:72:ea:
                    33:4e:4f:97:d6:13:c7:c1:a2:16:c3:2e:34:fa:91:
                    07:ed:18:31:f0:f2:45:00:bd:2f:f9:f2:03:14:1b:
                    63:c3:e3:41:6d:a9:ad:cf:26:31:36:30:8c:33:93:
                    4f:07:2c:f0:d4:30:f7:c0:05:71:23:95:c3:44:92:
                    17:f8:51:b3:05:dc:e1:ec:0b:0c:6d:6e:a2:65:d3:
                    56:aa:71:aa:a9:a5:1c:0c:24:33:f5:44:e2:46:7e:
                    92:d7:52:d8:ed:0c:09:3c:dd:f3:f1:c6:94:92:4e:
                    a3:2c:23:21:fe:c1:6e:65:de:50:f6:8f:5c:56:fc:
                    e6:5c:9f:c4:c4:95:af:41:13:4c:57:13:ef:24:34:
                    4b:f2:df:e3:a2:f1:f3:47:da:a9:c2:c1:08:d0:2e:
                    cf:4a:ff:f8:5b:d4:5e:01:35:40:79:3b:a2:bc:32:
                    75:a4:fd:c2:cc:e9:6f:95:4d:cd:13:04:18:82:d7:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:51:D3:47:71:2A:E5:8D:1D:8B:61:A3:8F:CD:C2:8A:D9:98:D7
            X509v3 Authority Key Identifier:
                keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:04:64:75:ea:cb:c4:a8:86:7e:63:30:dc:5b:be:64:61:1c:
         8d:65:48:b9:a4:89:4a:e0:1a:b6:03:aa:22:88:94:23:78:78:
         79:71:c3:b4:c6:0b:af:e6:db:bc:a8:ea:f7:44:64:12:01:86:
         52:8b:b4:6c:ff:50:77:0e:11:9f:e3:52:6c:f5:ae:09:6f:6e:
         71:ed:93:43:e2:1c:85:bd:94:0a:4d:a2:a4:90:9e:42:d4:cc:
         6c:0e:32:c5:2f:79:46:0b:25:a6:fc:78:63:05:f8:78:5a:90:
         cf:1f:b0:57:40:c5:f6:43:d7:c9:ba:a4:63:ac:85:a0:3e:f4:
         4f:fc:d8:b1:15:04:1b:95:70:55:62:db:d8:9d:b0:9a:38:49:
         87:9f:44:40:65:41:50:62:4f:49:88:3e:4a:9d:3f:e3:cd:a6:
         c9:05:03:6f:31:01:34:de:8c:5b:05:20:f8:d1:f7:90:ea:6d:
         9c:2b:6d:8c:30:a6:f9:fc:ec:d1:36:04:8c:b6:85:ff:75:09:
         ae:86:91:98:f1:b4:af:05:3a:41:c6:02:71:c9:ea:f1:9b:03:
         34:95:ad:b1:3f:17:da:6d:22:de:76:66:c6:be:c1:3b:8d:a6:
         80:71:93:c9:24:7d:b9:45:64:fb:69:2b:cb:18:12:7d:04:51:
         47:27:66:78
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjY2NzExMC8GA1UEBRMoRDBGNjM4QzVCOThBRThBRkNENkNFRTA1MDM4MjQxOTc0
MDlDM0U5MzAeFw0yNTEyMTkwNjQ2MjBaFw0yNTEyMjYwNjQ2MjBaMBgxFjAUBgNV
BAMMDTY5NDRmNGJjLWI0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6gZhyb0psLAYpsF1TMHNvDK2tI4fljaSPAxSiS7mcts2vLAEOqxciB7basvVy
YtjbPyDSed1V+b8+6g17W1Vsy6UuzAd9hnVy6jNOT5fWE8fBohbDLjT6kQftGDHw
8kUAvS/58gMUG2PD40Ftqa3PJjE2MIwzk08HLPDUMPfABXEjlcNEkhf4UbMF3OHs
CwxtbqJl01aqcaqppRwMJDP1ROJGfpLXUtjtDAk83fPxxpSSTqMsIyH+wW5l3lD2
j1xW/OZcn8TEla9BE0xXE+8kNEvy3+Oi8fNH2qnCwQjQLs9K//hb1F4BNUB5O6K8
MnWk/cLM6W+VTc0TBBiC17u1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlglR00dx
KuWNHYtho4/NworZmNcwHwYDVR0jBBgwFoAU0PY4xbmK6K/NbO4FA4JBl0CcPpMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNjY3LzkxNTkyQjRBQkI5
QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1Bw
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMFBZNHhibUs2S19OYk80RkE0SkJsMENjUHBNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
NjY3LzkxNTkyQjRBQkI5QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktf
TmJPNEZBNEpCbDBDY1BwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKMEZHXqy8Sohn5jMNxbvmRhHI1lSLmkiUrgGrYDqiKIlCN4eHlxw7TG
C6/m27yo6vdEZBIBhlKLtGz/UHcOEZ/jUmz1rglvbnHtk0PiHIW9lApNoqSQnkLU
zGwOMsUveUYLJab8eGMF+HhakM8fsFdAxfZD18m6pGOshaA+9E/82LEVBBuVcFVi
29idsJo4SYefREBlQVBiT0mIPkqdP+PNpskFA28xATTejFsFIPjR95DqbZwrbYww
pvn87NE2BIy2hf91Ca6GkZjxtK8FOkHGAnHJ6vGbAzSVrbE/F9ptIt52Zsa+wTuN
poBxk8kkfblFZPtpK8sYEn0EUUcnZng=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:57 2025 by rpki-client