This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File:                     ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier:          spjF7prLoy2kwvr9G7H79BiLgeR6Cq2i3Av2Eo1/2Bg=
Subject key identifier:   29:33:4E:B9:73:CA:7F:96:79:67:5F:53:F9:FE:56:6E:0A:FA:1A:12
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer:       /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number:          010F
Signing time:             Fri 19 Dec 2025 04:06:24 +0000
Manifest this update:     Fri 19 Dec 2025 04:06:23 +0000
Manifest next update:     Fri 26 Dec 2025 04:06:23 +0000
Files and hashes:         1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: QD216BaZzWO2kB8W83sUxLp/6MY22/kJ9+sJVeKd7o0=)
                          2: A8051CC4508011EF81053074C4F9AE02.roa (hash: iZKi03yPXyvt2gp9n65NJaRxsO6y4f9eMVz9ZTKKOUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
                          rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
        Validity
            Not Before: Dec 19 04:06:23 2025 GMT
            Not After : Dec 26 04:06:23 2025 GMT
        Subject: CN=6944cf40-1403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:e1:5b:5f:f5:90:0d:0e:28:ac:41:88:a3:
                    22:0b:4d:22:14:9f:80:60:56:54:8a:ac:42:c1:40:
                    71:ae:2c:3b:dc:60:75:e8:b5:43:81:0e:e3:a7:b8:
                    40:0f:be:85:91:6e:09:d1:2c:1e:48:4d:18:b3:8b:
                    d4:65:72:60:ae:0c:ab:56:58:0f:22:6a:4c:88:f2:
                    8f:6b:cd:ac:00:ac:e4:6a:74:f3:7a:2b:25:b1:63:
                    28:54:90:a3:fd:2a:1d:39:bf:f7:ad:30:1e:86:70:
                    e7:b4:f5:dd:4b:e3:44:9e:80:f7:2d:76:2e:d4:ec:
                    7d:e8:36:30:43:9f:a9:aa:c9:a3:d6:2d:5b:f7:33:
                    36:3e:be:4e:11:6b:7d:cf:5f:64:d1:c0:ae:cb:f1:
                    62:5a:8c:93:78:10:7a:14:ae:79:62:ab:9a:8a:0d:
                    d8:55:7d:3b:96:d1:b3:77:d0:fb:4f:45:4b:00:36:
                    1e:9b:6f:14:a8:47:1b:4b:39:d2:a4:26:f6:51:13:
                    7a:33:7c:16:7b:4b:52:00:0e:5d:f5:c3:90:38:63:
                    96:da:36:b6:0a:1f:46:9f:5c:5f:d0:37:6b:6e:bc:
                    d7:4a:d2:e7:88:19:93:1e:e7:75:4e:7f:e7:79:67:
                    b8:c5:98:bb:86:3e:93:aa:bf:4b:8c:59:f5:1b:a3:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:4E:B9:73:CA:7F:96:79:67:5F:53:F9:FE:56:6E:0A:FA:1A:12
            X509v3 Authority Key Identifier:
                keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:30:ae:1e:9e:65:9c:57:bd:da:16:97:ba:4a:0d:c0:f2:
         64:d3:b4:b1:f1:a8:4c:5e:79:b5:86:90:1f:6f:7c:ab:de:03:
         b9:d9:46:7c:5f:35:bc:33:93:e2:df:c7:b3:1b:bf:e5:11:32:
         2a:7b:02:e3:92:d9:ea:81:0d:8b:23:3c:89:ab:1f:02:0a:25:
         74:50:b5:44:75:4f:b9:48:f2:a2:4b:92:db:ca:50:17:45:67:
         b0:d4:6d:b8:9b:d6:f8:85:3c:d0:1a:3d:8b:36:5d:55:79:b1:
         76:d3:9b:a2:28:9f:39:fc:aa:c8:a1:2d:77:43:f8:b2:d9:a4:
         3f:64:73:82:25:60:97:90:04:db:e9:5c:dc:fa:93:5c:e8:87:
         ab:c9:5d:0e:a0:e7:6e:63:28:09:14:37:66:15:bd:d3:19:29:
         01:6e:ee:35:68:b1:fb:b4:f9:99:b6:2b:6c:52:0c:b5:7f:d1:
         fb:0d:7d:8e:da:a3:f6:7a:01:af:0d:19:77:83:35:96:01:9a:
         2f:17:0e:b9:07:c3:33:47:dc:c2:17:51:a0:98:5d:77:99:ad:
         ad:ae:b4:ec:60:1d:9a:de:25:ce:14:5a:4c:cd:af:d8:a7:08:
         87:15:ce:99:6e:c3:05:84:c7:62:5d:22:ca:ef:37:53:f8:5f:
         14:3c:79:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz
MjMwMzJGMTgwHhcNMjUxMjE5MDQwNjIzWhcNMjUxMjI2MDQwNjIzWjAYMRYwFAYD
VQQDDA02OTQ0Y2Y0MC0xNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVLhW1/1kA0OKKxBiKMiC00iFJ+AYFZUiqxCwUBxriw73GB16LVDgQ7jp7hA
D76FkW4J0SweSE0Ys4vUZXJgrgyrVlgPImpMiPKPa82sAKzkanTzeislsWMoVJCj
/SodOb/3rTAehnDntPXdS+NEnoD3LXYu1Ox96DYwQ5+pqsmj1i1b9zM2Pr5OEWt9
z19k0cCuy/FiWoyTeBB6FK55Yquaig3YVX07ltGzd9D7T0VLADYem28UqEcbSznS
pCb2URN6M3wWe0tSAA5d9cOQOGOW2ja2Ch9Gn1xf0DdrbrzXStLniBmTHud1Tn/n
eWe4xZi7hj6Tqr9LjFn1G6OTEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkzTrlz
yn+WeWdfU/n+Vm4K+hoSMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0
MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4
T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPUDCuHp5lnFe92haXukoNwPJk07Sx8ahMXnm1hpAfb3yr3gO52UZ8
XzW8M5Pi38ezG7/lETIqewLjktnqgQ2LIzyJqx8CCiV0ULVEdU+5SPKiS5LbylAX
RWew1G24m9b4hTzQGj2LNl1VebF205uiKJ85/KrIoS13Q/iy2aQ/ZHOCJWCXkATb
6Vzc+pNc6IeryV0OoOduYygJFDdmFb3TGSkBbu41aLH7tPmZtitsUgy1f9H7DX2O
2qP2egGvDRl3gzWWAZovFw65B8MzR9zCF1GgmF13ma2trrTsYB2a3iXOFFpMza/Y
pwiHFc6ZbsMFhMdiXSLK7zdT+F8UPHk3
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:10 2025 by rpki-client