This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
File:                     3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json)
Hash identifier:          fMJnJIm61mlqR6KzwhjGafoROX/NFFw3ynaZjYF4zMo=
Subject key identifier:   3D:30:B6:31:5E:56:79:E5:7D:1F:4F:B1:20:5B:7A:34:84:B1:3A:38
Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
Certificate issuer:       /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
Manifest number:          03F0
Signing time:             Fri 26 Dec 2025 23:34:42 +0000
Manifest this update:     Fri 26 Dec 2025 23:34:42 +0000
Manifest next update:     Fri 02 Jan 2026 23:34:42 +0000
Files and hashes:         1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: BM7JNUSjp81XmCGAgT9DBQEKkW7MNpR8oVeYtRJNfdM=)
                          2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
                          rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 22:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
        Validity
            Not Before: Dec 26 23:34:42 2025 GMT
            Not After : Jan  2 23:34:42 2026 GMT
        Subject: CN=694f1b92-ec37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:0c:0d:30:2f:c6:99:a0:4b:fa:2c:81:4c:
                    26:a9:20:d3:f7:13:d5:cb:d2:93:e7:0f:93:31:93:
                    bb:a3:13:e0:b3:17:9e:b1:ff:48:21:8e:5d:6f:7d:
                    f1:a2:48:9d:89:46:64:91:99:ab:e0:e3:ee:a5:69:
                    56:5f:2c:e6:3d:d6:56:3f:9c:2f:01:cf:72:01:cb:
                    fc:d2:f7:15:b2:06:fb:e3:f3:52:ba:81:17:7a:5f:
                    2d:c8:7b:27:c3:3a:53:8e:a6:8d:4d:cb:a1:6a:3b:
                    29:b3:94:b4:59:4e:92:fc:21:73:6a:ea:23:b3:60:
                    fb:c5:fa:2f:5e:d7:6b:66:62:48:b7:ed:d4:d0:21:
                    ed:57:b9:35:3b:e0:39:20:f7:0b:a8:2d:13:17:72:
                    ba:64:af:07:5f:75:02:55:dd:c4:20:1f:ce:24:e5:
                    00:70:24:c7:28:00:9d:af:ee:4d:38:0c:81:9d:7b:
                    13:7f:24:89:2e:01:21:09:9a:d6:e1:08:e0:84:0f:
                    8f:56:83:cd:4c:dc:f6:80:a5:77:13:33:22:fa:b4:
                    f6:a0:7f:3a:e0:b1:f2:7e:d3:8f:9b:4c:26:64:a0:
                    55:07:ee:9d:41:30:92:d2:1d:29:18:47:da:c0:84:
                    e4:b6:32:f8:24:ce:11:ee:8d:52:eb:36:87:7d:f9:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:B6:31:5E:56:79:E5:7D:1F:4F:B1:20:5B:7A:34:84:B1:3A:38
            X509v3 Authority Key Identifier:
                keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8c:9c:a1:35:97:18:bf:99:c2:d3:1f:db:af:fc:91:71:24:
         df:58:eb:6d:4f:2b:a7:85:01:24:7a:63:86:d1:03:18:52:3f:
         6d:50:33:91:59:78:ae:31:5b:46:3f:14:85:88:13:01:d0:df:
         49:22:b1:e0:7b:9b:87:43:c0:56:47:0e:40:b5:71:d9:25:ac:
         76:ef:66:bd:b7:59:77:6b:3b:17:ab:58:32:66:64:b3:6a:6a:
         ff:34:d4:21:0c:e4:8d:73:96:3d:71:e4:b1:b7:b1:58:bf:f5:
         26:24:aa:14:28:fa:7c:e4:83:c2:34:a0:9b:37:14:53:8b:6b:
         22:d2:ab:50:13:73:d7:77:46:2f:1e:53:7f:f6:84:ea:d9:1a:
         95:f5:d9:c8:99:ac:ab:b8:4e:dc:3a:97:3d:dc:bf:e4:3d:cc:
         9f:ad:b5:7d:c6:ea:45:0b:28:e6:44:b4:67:90:c1:e1:de:21:
         6d:a0:f9:db:35:5d:6c:b2:cb:19:bc:95:4c:c2:a7:75:34:be:
         6e:67:c9:6a:7a:fb:f0:82:af:89:02:fb:b5:39:29:89:56:6e:
         86:9d:b0:da:73:a2:f6:91:0e:aa:25:43:f4:1a:f8:17:77:79:
         07:d4:e2:55:a8:f0:66:06:25:77:a2:ad:56:17:49:62:08:1a:
         00:a0:0a:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0
MTZCMzFFMUMwHhcNMjUxMjI2MjMzNDQyWhcNMjYwMTAyMjMzNDQyWjAYMRYwFAYD
VQQDDA02OTRmMWI5Mi1lYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgwMDTAvxpmgS/osgUwmqSDT9xPVy9KT5w+TMZO7oxPgsxeesf9IIY5db33x
okidiUZkkZmr4OPupWlWXyzmPdZWP5wvAc9yAcv80vcVsgb74/NSuoEXel8tyHsn
wzpTjqaNTcuhajsps5S0WU6S/CFzauojs2D7xfovXtdrZmJIt+3U0CHtV7k1O+A5
IPcLqC0TF3K6ZK8HX3UCVd3EIB/OJOUAcCTHKACdr+5NOAyBnXsTfySJLgEhCZrW
4QjghA+PVoPNTNz2gKV3EzMi+rT2oH864LHyftOPm0wmZKBVB+6dQTCS0h0pGEfa
wITktjL4JM4R7o1S6zaHffnqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0wtjFe
VnnlfR9PsSBbejSEsTo4MB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0
MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK
bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKjJyhNZcYv5nC0x/br/yRcSTfWOttTyunhQEkemOG0QMYUj9tUDOR
WXiuMVtGPxSFiBMB0N9JIrHge5uHQ8BWRw5AtXHZJax272a9t1l3azsXq1gyZmSz
amr/NNQhDOSNc5Y9ceSxt7FYv/UmJKoUKPp85IPCNKCbNxRTi2si0qtQE3PXd0Yv
HlN/9oTq2RqV9dnImayruE7cOpc93L/kPcyfrbV9xupFCyjmRLRnkMHh3iFtoPnb
NV1ssssZvJVMwqd1NL5uZ8lqevvwgq+JAvu1OSmJVm6GnbDac6L2kQ6qJUP0GvgX
d3kH1OJVqPBmBiV3oq1WF0liCBoAoAq2
-----END CERTIFICATE-----
Generated at Sat Dec 27 02:34:30 2025 by rpki-client