This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
File:                     ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json)
Hash identifier:          QZv2Y0tzT7UUSmmtuagCrRl3kX5C2s4C6DeIFH5M1z4=
Subject key identifier:   A4:E2:C9:63:46:E6:E5:84:89:A8:EF:BD:FA:87:D8:D3:22:37:F5:B7
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Certificate issuer:       /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
Manifest number:          6C
Signing time:             Fri 19 Dec 2025 06:06:22 +0000
Manifest this update:     Fri 19 Dec 2025 06:06:21 +0000
Manifest next update:     Fri 26 Dec 2025 06:06:21 +0000
Files and hashes:         1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: 3YnNfNYUSe5u/BkpcOSIN6wYcTcpPdd72bTWqQ6NlrU=)
                          2: 4567CDC2A0EE11F081D8CB27C4F9AE02.roa (hash: NZk8gPQKW1EfRq0UDEGtez/4CFQTjjGfw0ouBgNdDzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
        Validity
            Not Before: Dec 19 06:06:21 2025 GMT
            Not After : Dec 26 06:06:21 2025 GMT
        Subject: CN=6944eb5e-dce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:71:26:69:5f:48:e1:ab:8e:a0:b4:64:6c:
                    03:dd:44:8e:4f:9d:6e:d3:6e:42:2a:bc:d8:4a:76:
                    ba:9e:ae:3b:52:3d:92:d6:b5:8b:fa:32:d3:18:28:
                    29:0c:e7:25:49:d6:14:f5:9d:3e:b5:b8:c1:f8:cd:
                    de:df:5c:15:50:72:34:dd:4a:ff:a3:20:62:43:3d:
                    21:ed:db:47:71:8a:ae:da:a5:ea:36:43:5c:61:5d:
                    b4:e3:14:04:f7:03:34:df:fd:56:39:29:1b:83:1a:
                    46:59:0f:58:bb:53:a5:90:45:4a:c5:e3:98:fc:e3:
                    9e:e4:d5:98:56:16:ce:ba:e0:35:c4:0d:84:45:d4:
                    c5:51:a2:48:5f:4b:70:03:fa:36:b2:ab:9e:8a:b9:
                    69:6a:6b:6f:21:94:92:5c:d6:c7:6c:35:bb:bc:0d:
                    67:3f:db:4e:88:e6:bb:84:ea:a7:b1:9a:93:ae:ab:
                    f0:78:80:3a:1a:12:85:22:e3:27:c9:c2:dc:d1:06:
                    35:01:41:c8:30:54:e7:45:0e:9a:7c:1b:e9:df:69:
                    bb:b0:b3:5c:e8:55:d4:ab:0c:4c:cf:92:4a:c5:5d:
                    f2:fc:6e:2a:d2:20:81:85:8e:54:62:22:87:33:c4:
                    fe:42:82:b1:7a:79:2a:00:0b:2d:c3:6d:05:2b:4b:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:C9:63:46:E6:E5:84:89:A8:EF:BD:FA:87:D8:D3:22:37:F5:B7
            X509v3 Authority Key Identifier:
                keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:fe:5e:90:b2:36:1e:96:e0:d3:29:91:47:1d:bd:c3:50:
         87:03:ac:38:d1:e2:69:a2:5e:5b:94:87:79:2b:7d:95:4c:79:
         0e:da:0d:df:fc:78:14:bd:e8:8b:ee:c3:31:80:ed:ad:83:ca:
         45:af:4a:ed:c2:95:c3:87:89:bf:d5:d0:14:77:6a:38:80:c4:
         bd:a0:15:ac:e7:5d:e9:d9:6c:29:fd:8d:79:66:eb:be:a0:dc:
         1f:24:48:65:68:2f:15:cc:96:cc:9d:49:0c:de:e5:95:b5:3b:
         64:e9:0b:c0:81:41:81:c8:0d:67:68:b4:54:8a:f7:e6:ce:bf:
         b3:88:a9:11:fc:e0:c1:6a:b4:d1:fc:e2:19:f2:22:43:f6:c8:
         46:c4:93:e7:65:e5:b0:8d:94:36:c0:0b:7a:82:09:16:f5:ed:
         e2:bf:94:ed:3f:b5:40:01:56:7b:11:97:3d:24:6f:77:8d:a9:
         68:fe:78:f7:87:4c:57:df:88:97:dd:f4:93:ef:d5:43:3c:ec:
         83:49:02:cc:31:a1:b9:a7:e2:67:54:4c:20:98:55:49:8d:68:
         1e:89:0c:2a:4e:ee:18:32:09:6b:c9:17:85:26:62:00:20:19:
         70:e3:05:c8:29:f2:1a:ac:2e:c3:84:47:7d:7b:38:62:ab:b9:
         74:07:15:45
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Njk1RTExMC8GA1UEBRMoMjEyODE4OTA3NTg5QjJDQTg0NkI0OUQxMDlERDMzQUM5
RTJFQjU0MzAeFw0yNTEyMTkwNjA2MjFaFw0yNTEyMjYwNjA2MjFaMBgxFjAUBgNV
BAMMDTY5NDRlYjVlLWRjZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMDHEmaV9I4auOoLRkbAPdRI5PnW7TbkIqvNhKdrqerjtSPZLWtYv6MtMYKCkM
5yVJ1hT1nT61uMH4zd7fXBVQcjTdSv+jIGJDPSHt20dxiq7apeo2Q1xhXbTjFAT3
AzTf/VY5KRuDGkZZD1i7U6WQRUrF45j8457k1ZhWFs664DXEDYRF1MVRokhfS3AD
+jayq56KuWlqa28hlJJc1sdsNbu8DWc/206I5ruE6qexmpOuq/B4gDoaEoUi4yfJ
wtzRBjUBQcgwVOdFDpp8G+nfabuws1zoVdSrDEzPkkrFXfL8birSIIGFjlRiIocz
xP5CgrF6eSoACy3DbQUrS5jhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpOLJY0bm
5YSJqO+9+ofY0yI39bcwHwYDVR0jBBgwFoAUISgYkHWJssqEa0nRCd0zrJ4utUMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0U3QjM0OTcyNTM0
MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3NxRWEwblJDZDB6cko0dXRV
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSVNnWWtIV0pzc3FFYTBuUkNkMHpySjR1dFVNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
OTVFL0U3QjM0OTcyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3Nx
RWEwblJDZDB6cko0dXRVTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAD8d/l6QsjYeluDTKZFHHb3DUIcDrDjR4mmiXluUh3krfZVMeQ7aDd/8
eBS96IvuwzGA7a2DykWvSu3ClcOHib/V0BR3ajiAxL2gFaznXenZbCn9jXlm676g
3B8kSGVoLxXMlsydSQze5ZW1O2TpC8CBQYHIDWdotFSK9+bOv7OIqRH84MFqtNH8
4hnyIkP2yEbEk+dl5bCNlDbAC3qCCRb17eK/lO0/tUABVnsRlz0kb3eNqWj+ePeH
TFffiJfd9JPv1UM87INJAswxobmn4mdUTCCYVUmNaB6JDCpO7hgyCWvJF4UmYgAg
GXDjBcgp8hqsLsOER317OGKruXQHFUU=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:59:07 2025 by rpki-client