This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          w8nQ5f53O3zfsZ61jnNAnaPGnhstQBqHlEB8MpoJL+E=
Subject key identifier:   42:3C:4E:78:23:52:08:1A:FF:15:64:03:83:DB:15:7A:07:AD:E1:29
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0B04
Signing time:             Sat 20 Dec 2025 18:52:31 +0000
Manifest this update:     Sat 20 Dec 2025 18:52:30 +0000
Manifest next update:     Sat 27 Dec 2025 18:52:30 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: 1yAs7Lyo7Bi8YV/uBCULQQ/vGR366uCGnlJ7NsigQ18=)
                          2: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: RmVYNHYfUoObhkbihnttp8Rj/50L3+Abf6f8TD5bCmE=)
                          3: 13B5A626CEB811F09E67F582C4F9AE02.roa (hash: hSG17ji4neWYb8zqn3kEdlNXvs/O/fdjoZB1bSLDIps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Dec 20 18:52:30 2025 GMT
            Not After : Dec 27 18:52:30 2025 GMT
        Subject: CN=6946f06f-8c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:d9:ad:b0:42:da:da:ef:6e:0a:c1:15:24:
                    ba:18:a0:0f:e9:af:b9:21:85:e1:03:05:9d:10:46:
                    9e:a1:e9:82:55:96:4c:4d:4d:d2:f3:0a:de:48:d7:
                    cd:e9:4d:c1:fa:9c:65:13:54:0e:bb:09:54:73:6a:
                    09:57:17:4a:30:67:21:71:1a:7a:e7:36:79:41:d2:
                    9b:7f:d3:68:3d:f7:04:11:75:27:cb:06:bb:f7:93:
                    c5:bb:07:19:aa:60:01:3f:5d:f9:74:4b:33:1e:a0:
                    c0:fb:83:68:d1:25:1c:81:f1:5c:15:28:8e:4c:33:
                    b0:4a:c5:d7:92:34:64:60:31:7f:dd:d0:40:06:1d:
                    11:d7:2d:41:f5:1d:05:82:90:d5:7c:06:6f:53:e4:
                    39:ba:32:1f:6a:ef:4a:b3:2d:15:fe:c1:de:15:a9:
                    7d:5e:73:08:dd:de:c0:fc:d6:88:85:19:06:56:8d:
                    01:51:44:16:f6:43:3b:93:35:c0:45:2b:b0:70:a0:
                    2d:a4:a6:c9:39:ce:4f:1f:ef:69:6b:28:11:cc:0d:
                    0a:ef:e8:06:80:ec:d0:9d:7e:4d:78:9a:a2:5c:e7:
                    a7:36:b9:66:2c:7e:d3:2e:98:41:3c:62:36:4e:93:
                    47:84:13:1e:f1:b1:b8:c6:8c:bb:b3:f8:c0:18:b4:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3C:4E:78:23:52:08:1A:FF:15:64:03:83:DB:15:7A:07:AD:E1:29
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:d9:f2:77:3e:0b:51:0a:ac:d4:66:ae:1e:c9:4c:75:9b:
         91:78:f9:a4:34:c7:02:ad:49:30:7d:40:63:34:60:09:15:e7:
         89:47:cc:27:e7:18:d6:ac:18:0c:b7:91:ca:fa:41:9c:8c:b1:
         98:67:a4:b9:75:08:ed:6e:ae:d6:df:f0:47:03:ed:96:41:3a:
         2d:f5:ce:63:c0:24:fa:8f:94:b8:f3:b9:22:4b:ea:a0:e3:88:
         18:91:1f:41:75:49:2a:06:1c:5f:bb:9e:2d:ce:5e:c0:50:96:
         11:2d:76:24:25:29:dc:00:e3:7c:59:b4:2d:98:66:de:81:ba:
         42:c9:77:b8:ed:82:14:a1:33:0d:70:88:d8:be:74:ae:5f:07:
         53:2c:4d:5f:2d:16:97:2f:45:70:7e:1d:3b:1a:ce:a5:02:67:
         f2:2f:b4:23:85:af:06:af:c8:98:33:c3:53:28:38:69:2a:de:
         17:7e:8a:d5:80:f8:c0:a1:32:40:c7:8c:c9:d6:10:0f:72:9c:
         c7:f8:64:a1:e9:90:f9:90:7d:12:74:36:f3:3a:d2:1a:7b:76:
         bc:64:b9:6a:77:56:d2:47:73:41:85:a1:59:3d:cd:c7:81:17:
         db:74:d4:6c:2d:d0:e6:30:81:1d:6a:e5:a4:2a:e7:3d:38:ca:
         c1:3e:e3:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE
MDAwM0NEQ0MwHhcNMjUxMjIwMTg1MjMwWhcNMjUxMjI3MTg1MjMwWjAYMRYwFAYD
VQQDDA02OTQ2ZjA2Zi04Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmG7ZrbBC2trvbgrBFSS6GKAP6a+5IYXhAwWdEEaeoemCVZZMTU3S8wreSNfN
6U3B+pxlE1QOuwlUc2oJVxdKMGchcRp65zZ5QdKbf9NoPfcEEXUnywa795PFuwcZ
qmABP135dEszHqDA+4No0SUcgfFcFSiOTDOwSsXXkjRkYDF/3dBABh0R1y1B9R0F
gpDVfAZvU+Q5ujIfau9Ksy0V/sHeFal9XnMI3d7A/NaIhRkGVo0BUUQW9kM7kzXA
RSuwcKAtpKbJOc5PH+9paygRzA0K7+gGgOzQnX5NeJqiXOenNrlmLH7TLphBPGI2
TpNHhBMe8bG4xoy7s/jAGLRg1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI8Tngj
Ugga/xVkA4PbFXoHreEpMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2
RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu
M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCT19nydz4LUQqs1GauHslMdZuRePmkNMcCrUkwfUBjNGAJFeeJR8wn
5xjWrBgMt5HK+kGcjLGYZ6S5dQjtbq7W3/BHA+2WQTot9c5jwCT6j5S487kiS+qg
44gYkR9BdUkqBhxfu54tzl7AUJYRLXYkJSncAON8WbQtmGbegbpCyXe47YIUoTMN
cIjYvnSuXwdTLE1fLRaXL0Vwfh07Gs6lAmfyL7Qjha8Gr8iYM8NTKDhpKt4XforV
gPjAoTJAx4zJ1hAPcpzH+GSh6ZD5kH0SdDbzOtIae3a8ZLlqd1bSR3NBhaFZPc3H
gRfbdNRsLdDmMIEdauWkKuc9OMrBPuNl
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:44:19 2025 by rpki-client