This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
File:                     M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json)
Hash identifier:          N7NioXQs9wRcClzJRm4Vaizp6/1RPSKYfU0WazPj1Wc=
Subject key identifier:   84:92:F7:3F:D4:E9:8B:DE:FC:AA:54:EE:83:1E:2B:38:C1:EB:C0:B2
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Certificate issuer:       /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial:       0C2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
Manifest number:          0C23
Signing time:             Thu 18 Dec 2025 18:27:50 +0000
Manifest this update:     Thu 18 Dec 2025 18:27:49 +0000
Manifest next update:     Thu 25 Dec 2025 18:27:49 +0000
Files and hashes:         1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: pOAzyCScWw7VF7oNhexJhqK6o3S2N05G/693xgwnuTE=)
                          2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: +qrgEBTBD6O+YCDXfGBARZb1S4AOeFFb2M6qsvbOdkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
                          rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3117 (0xc2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
        Validity
            Not Before: Dec 18 18:27:49 2025 GMT
            Not After : Dec 25 18:27:49 2025 GMT
        Subject: CN=694447a6-4a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:b3:82:69:80:e5:6c:1f:5d:a3:53:0b:bc:
                    fd:12:0c:57:70:29:f8:8a:94:16:45:6a:ee:8f:30:
                    b6:ec:d3:62:39:0d:ba:8d:3c:4f:06:a0:66:36:f3:
                    c4:65:40:a1:9c:a6:7c:30:52:49:2e:d7:f4:da:4e:
                    c8:cf:04:d2:ba:57:e9:01:b9:de:29:2b:32:7f:2c:
                    16:08:4f:18:d2:f3:47:df:b9:06:c4:2b:a6:10:9a:
                    39:78:15:5a:cb:01:fe:a4:0d:b3:f9:d1:0d:d4:ca:
                    4b:bd:9e:cb:8d:77:0d:a6:07:bb:bf:d3:b1:e4:4b:
                    7e:10:fc:58:19:2a:88:71:b3:7e:e2:de:48:b4:00:
                    45:9f:a1:1d:5a:d6:91:7d:0c:a0:20:dd:85:ad:1e:
                    c2:01:69:4e:45:ab:e4:4b:12:7b:e7:76:50:98:4d:
                    c3:b0:6f:83:2d:74:32:c2:90:8a:21:cb:91:97:57:
                    2b:7d:79:86:fe:27:ee:25:80:97:72:be:5e:51:c9:
                    39:d7:16:71:5a:01:63:81:01:07:42:75:11:15:12:
                    4e:c4:7e:2e:85:72:0d:3d:b9:0f:63:00:ba:91:da:
                    d5:68:c2:65:67:76:00:2c:35:47:0b:23:96:69:7c:
                    2e:d9:71:48:8f:21:5c:09:a6:2f:7c:df:82:9a:39:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:92:F7:3F:D4:E9:8B:DE:FC:AA:54:EE:83:1E:2B:38:C1:EB:C0:B2
            X509v3 Authority Key Identifier:
                keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:d6:fa:11:22:ea:0f:63:b1:73:25:d8:51:1b:92:fa:47:
         0b:35:d4:5b:e1:50:ef:ab:f6:77:ee:1c:b7:59:c6:61:a8:c5:
         4d:09:9c:90:8a:ef:d6:e3:9b:65:bc:f1:5b:6e:95:1b:07:ba:
         18:35:c9:10:8b:9a:50:2f:4f:da:1b:00:25:06:a0:ba:d6:66:
         c3:03:a5:ec:fd:ee:12:4e:d7:2f:ef:90:cf:19:7e:6b:ef:bb:
         21:ce:d1:86:35:69:58:e3:77:ce:09:7e:5d:71:fd:ab:eb:58:
         f9:28:b0:7f:47:9f:06:ca:34:ed:14:1c:64:aa:67:0b:19:46:
         9e:71:e4:e3:e5:a1:86:33:5f:66:3b:e1:8b:7c:ea:f5:b5:c5:
         89:c2:fd:b3:0b:68:ae:aa:38:32:13:a2:35:1e:4d:d4:51:53:
         12:6c:be:4f:da:21:da:3c:b1:48:8c:e1:61:93:bf:19:37:77:
         47:d5:33:18:76:ff:b7:1f:1c:ca:33:52:19:fb:ac:34:1f:77:
         75:66:51:65:4d:09:1b:f2:c6:12:d7:33:5e:b3:d9:18:61:ed:
         ce:bf:81:39:9e:95:e7:09:55:fc:0d:50:30:0f:2c:69:9c:96:
         23:b5:36:fb:01:d5:36:dc:87:55:6d:bb:7b:ff:19:b5:78:ad:
         9c:2b:20:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0
MDg5MTg3NDIwHhcNMjUxMjE4MTgyNzQ5WhcNMjUxMjI1MTgyNzQ5WjAYMRYwFAYD
VQQDDA02OTQ0NDdhNi00YTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYGzgmmA5WwfXaNTC7z9EgxXcCn4ipQWRWrujzC27NNiOQ26jTxPBqBmNvPE
ZUChnKZ8MFJJLtf02k7IzwTSulfpAbneKSsyfywWCE8Y0vNH37kGxCumEJo5eBVa
ywH+pA2z+dEN1MpLvZ7LjXcNpge7v9Ox5Et+EPxYGSqIcbN+4t5ItABFn6EdWtaR
fQygIN2FrR7CAWlORavkSxJ753ZQmE3DsG+DLXQywpCKIcuRl1crfXmG/ifuJYCX
cr5eUck51xZxWgFjgQEHQnURFRJOxH4uhXINPbkPYwC6kdrVaMJlZ3YALDVHCyOW
aXwu2XFIjyFcCaYvfN+CmjnEtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISS9z/U
6Yve/KpU7oMeKzjB68CyMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG
QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS
ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQ0tb6ESLqD2OxcyXYURuS+kcLNdRb4VDvq/Z37hy3WcZhqMVNCZyQ
iu/W45tlvPFbbpUbB7oYNckQi5pQL0/aGwAlBqC61mbDA6Xs/e4STtcv75DPGX5r
77shztGGNWlY43fOCX5dcf2r61j5KLB/R58GyjTtFBxkqmcLGUaeceTj5aGGM19m
O+GLfOr1tcWJwv2zC2iuqjgyE6I1Hk3UUVMSbL5P2iHaPLFIjOFhk78ZN3dH1TMY
dv+3HxzKM1IZ+6w0H3d1ZlFlTQkb8sYS1zNes9kYYe3Ov4E5npXnCVX8DVAwDyxp
nJYjtTb7AdU23IdVbbt7/xm1eK2cKyCU
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:49:40 2025 by rpki-client