This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File:                     R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier:          POM4XCK2riiZqo/FxhwiDmTDrOI364sxZkkG8evRTBA=
Subject key identifier:   6C:FA:14:C4:B3:DB:27:E9:57:6E:EF:0F:3E:2E:4B:3B:1E:B0:48:D2
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       069F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number:          068B
Signing time:             Sat 20 Dec 2025 21:49:20 +0000
Manifest this update:     Sat 20 Dec 2025 21:49:19 +0000
Manifest next update:     Sat 27 Dec 2025 21:49:19 +0000
Files and hashes:         1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: +AJ+RbwwARElpMsl+LropYIR46ipZXDJj6Jcz9BHklg=)
                          2: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=)
                          3: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=)
                          4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: Dec 20 21:49:19 2025 GMT
            Not After : Dec 27 21:49:19 2025 GMT
        Subject: CN=694719e0-5482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:c5:4a:2a:57:45:4a:98:97:cb:25:9d:09:
                    24:74:44:3a:32:ac:11:fd:06:b3:ca:6c:55:b8:76:
                    91:77:8e:34:40:17:11:e4:74:39:27:cb:9d:08:17:
                    0a:40:34:05:65:73:4d:e5:2f:fe:2e:ba:93:de:f8:
                    62:18:64:35:57:bb:e7:49:ac:42:af:17:e7:9c:69:
                    a8:4b:fd:24:5c:fe:4a:12:7c:e7:27:7a:fb:f5:ae:
                    4d:07:d0:3d:ac:49:80:8f:0f:a2:ad:fe:8c:98:fe:
                    e9:48:87:84:20:75:b5:b1:5e:7c:9f:25:ae:fd:9e:
                    fd:fc:6a:97:6d:3a:42:cd:7f:d7:22:36:d2:22:49:
                    5b:e4:07:59:a0:8d:5d:56:50:d0:29:c6:27:7c:b7:
                    be:03:99:5e:41:8c:5a:12:d2:81:47:85:57:fe:df:
                    f4:ac:fb:2f:c7:04:83:3b:e3:03:5b:cd:30:ac:b2:
                    f7:48:db:f2:3d:3b:fa:ff:30:1a:cf:bf:2f:8a:39:
                    7b:1b:c5:77:49:2a:08:46:62:8f:92:70:9f:33:71:
                    b5:95:9c:76:16:59:15:b9:1b:25:05:5f:e5:43:6a:
                    98:10:da:f4:e3:94:89:f1:9e:0b:9d:1c:0c:d5:48:
                    48:15:9f:db:63:69:b6:80:b1:fd:d6:09:2a:75:50:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:14:C4:B3:DB:27:E9:57:6E:EF:0F:3E:2E:4B:3B:1E:B0:48:D2
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:74:e3:6b:b6:1e:93:76:2c:8c:96:37:ae:24:d1:cd:04:
         50:9b:e7:47:63:5b:0c:61:a4:1b:33:6d:a8:16:cb:d6:6c:74:
         9a:16:f4:5f:51:4b:41:cc:ca:c7:1f:c4:b2:86:1e:bd:cc:45:
         06:07:2a:81:f7:a5:b9:d4:11:fb:12:a3:df:62:90:69:96:b3:
         48:38:c2:3d:94:84:90:7f:34:04:d3:bf:96:48:b0:b6:4c:22:
         62:9a:50:d3:b5:05:67:f6:08:ff:4b:9c:7b:99:cd:2c:42:bb:
         9f:6e:28:92:16:40:52:9d:7e:a4:a5:7a:02:96:32:ce:52:eb:
         7b:ff:0e:80:27:04:b8:4f:66:39:7e:28:d5:58:95:3f:66:e3:
         a3:53:ee:52:67:cc:1c:6c:5b:ee:7d:4c:b2:0a:cc:34:ef:63:
         e4:b0:93:cf:a6:5a:c6:27:8f:00:9b:0c:cd:47:ac:b0:86:b2:
         27:67:e5:be:7b:5e:e9:9b:9a:e1:07:b5:cf:6b:c2:99:11:73:
         8c:0d:07:51:75:2e:92:11:c2:05:d3:c2:7f:b1:fe:c4:48:b6:
         47:a5:be:95:2d:b7:3b:eb:da:80:96:7a:dd:cf:46:3b:11:7a:
         c8:f1:12:6c:79:96:e7:87:d7:c1:ea:e8:3d:ac:16:d3:fc:c0:
         c4:de:a0:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1
NjNBMkNFOTQwHhcNMjUxMjIwMjE0OTE5WhcNMjUxMjI3MjE0OTE5WjAYMRYwFAYD
VQQDDA02OTQ3MTllMC01NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmPFSipXRUqYl8slnQkkdEQ6MqwR/QazymxVuHaRd440QBcR5HQ5J8udCBcK
QDQFZXNN5S/+LrqT3vhiGGQ1V7vnSaxCrxfnnGmoS/0kXP5KEnznJ3r79a5NB9A9
rEmAjw+irf6MmP7pSIeEIHW1sV58nyWu/Z79/GqXbTpCzX/XIjbSIklb5AdZoI1d
VlDQKcYnfLe+A5leQYxaEtKBR4VX/t/0rPsvxwSDO+MDW80wrLL3SNvyPTv6/zAa
z78vijl7G8V3SSoIRmKPknCfM3G1lZx2FlkVuRslBV/lQ2qYENr045SJ8Z4LnRwM
1UhIFZ/bY2m2gLH91gkqdVBgXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGz6FMSz
2yfpV27vDz4uSzsesEjSMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF
OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW
TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9dHTja7Yek3YsjJY3riTRzQRQm+dHY1sMYaQbM22oFsvWbHSaFvRf
UUtBzMrHH8Syhh69zEUGByqB96W51BH7EqPfYpBplrNIOMI9lISQfzQE07+WSLC2
TCJimlDTtQVn9gj/S5x7mc0sQrufbiiSFkBSnX6kpXoCljLOUut7/w6AJwS4T2Y5
fijVWJU/ZuOjU+5SZ8wcbFvufUyyCsw072PksJPPplrGJ48AmwzNR6ywhrInZ+W+
e17pm5rhB7XPa8KZEXOMDQdRdS6SEcIF08J/sf7ESLZHpb6VLbc769qAlnrdz0Y7
EXrI8RJseZbnh9fB6ug9rBbT/MDE3qDn
-----END CERTIFICATE-----
Generated at Sun Dec 21 12:01:29 2025 by rpki-client