This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File:                     ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier:          I8Jkwgz4iKTHh4Jv5XHCS9I80QvtpUJj+x8DZ8Yk97o=
Subject key identifier:   C2:E8:74:10:AB:6A:E2:0E:2B:E4:DA:69:71:CC:D4:EE:BE:76:D1:06
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer:       /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number:          061C
Signing time:             Tue 30 Dec 2025 22:06:06 +0000
Manifest this update:     Tue 30 Dec 2025 22:06:05 +0000
Manifest next update:     Tue 06 Jan 2026 22:06:05 +0000
Files and hashes:         1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: Muuw9R64t9SoY48lmafgoQHkdXFMhbs2iJzHXdALX+U=)
                          2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: Ycz9v+eZG5FQXPhAuSFsBVjW1iX+esZOzCHIixi5/fU=)
                          3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: dl0uRjksEQ8ouPFjWtFEQYhqznByz7T89bL2Fq93vqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
                          rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
        Validity
            Not Before: Dec 30 22:06:05 2025 GMT
            Not After : Jan  6 22:06:05 2026 GMT
        Subject: CN=69544cce-ae34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:d1:78:68:2c:bb:95:39:b6:ea:03:27:9a:
                    cc:d7:fe:bb:38:dc:00:0f:cd:60:51:be:ab:c2:7d:
                    c5:df:92:5f:28:10:fc:2f:57:13:04:d5:85:d3:0f:
                    a8:33:21:89:a6:da:d0:96:bc:a6:34:eb:47:f2:ac:
                    88:b0:fe:4f:a4:5c:91:d1:25:3f:42:cd:12:b5:73:
                    52:c0:26:58:58:5a:0c:e8:56:65:22:d4:5a:8f:01:
                    10:f5:57:d2:84:a0:ee:4a:34:c3:71:1d:35:4d:fd:
                    cd:81:7f:08:09:55:c6:f8:76:81:70:38:72:4c:cf:
                    e9:82:3d:f0:bb:76:63:4b:6d:66:27:f4:02:3a:d2:
                    86:3d:d4:f4:76:6f:a2:dd:e6:63:b4:00:87:34:49:
                    23:25:c3:33:20:7a:62:5c:7b:02:15:f8:3d:fe:7b:
                    03:90:ff:cd:8e:e3:ad:0a:04:97:7b:24:c6:84:7d:
                    30:ab:f4:70:80:88:fe:b5:2c:a2:48:8c:5d:e4:dc:
                    43:ab:b2:ad:11:25:38:c4:e7:79:43:f5:b9:9f:7c:
                    c5:d8:b3:3e:74:90:fe:05:d6:fe:5d:a3:4e:fb:d3:
                    72:5f:6f:b3:59:5b:33:23:a6:ee:b1:67:46:43:a1:
                    7f:60:f2:52:65:40:df:f2:03:2e:a4:fe:da:c3:a4:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E8:74:10:AB:6A:E2:0E:2B:E4:DA:69:71:CC:D4:EE:BE:76:D1:06
            X509v3 Authority Key Identifier:
                keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:05:97:d6:4e:5f:e2:29:a2:50:16:ca:da:83:0c:a5:08:
         3c:47:e1:ff:8c:52:e6:8e:3b:03:4c:7e:e6:b2:d2:59:0d:2d:
         8b:f4:9a:b1:ba:43:c8:93:0e:a0:96:ce:98:b1:2d:2f:8b:ce:
         bc:aa:a0:00:9c:0a:bb:b1:45:85:bf:7e:24:06:ca:83:b4:cd:
         31:47:4f:28:02:07:13:4e:62:34:c7:95:12:f0:44:de:45:07:
         c9:35:e4:b4:d8:31:db:34:5c:3c:a0:9d:4e:bb:dd:95:d9:d2:
         94:df:5a:2c:e4:62:cf:c9:91:72:6b:ac:36:5c:c5:c6:bf:fb:
         7c:ec:b9:fd:70:b5:78:4c:3a:66:78:24:5f:c7:f2:91:93:3f:
         f7:52:26:34:b1:b8:dd:0c:ff:7d:80:d4:01:69:4f:ee:b2:4f:
         00:77:48:36:cf:53:1a:56:ab:d9:c2:2d:0a:5c:20:fc:2c:cc:
         c5:8a:95:28:c9:f4:eb:d2:84:ba:46:b0:99:af:30:2c:0a:2c:
         25:c5:47:e9:a4:3f:f0:fe:83:e5:e8:33:72:6d:95:1e:6f:6b:
         90:b5:79:a6:f1:69:7e:5a:ae:f2:1e:27:ce:ab:19:b5:3d:af:
         9d:08:87:38:40:59:ee:80:d5:b5:b2:f1:ae:a9:0a:0a:3f:6e:
         ef:4e:e4:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDQjYxMTAvBgNVBAUTKDAxMTBCQjNBQjUwRTNBMEQ0NDkwQzMyMTAzQkJDNDA1
NERDNjgyMUUwHhcNMjUxMjMwMjIwNjA1WhcNMjYwMTA2MjIwNjA1WjAYMRYwFAYD
VQQDDA02OTU0NGNjZS1hZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSDReGgsu5U5tuoDJ5rM1/67ONwAD81gUb6rwn3F35JfKBD8L1cTBNWF0w+o
MyGJptrQlrymNOtH8qyIsP5PpFyR0SU/Qs0StXNSwCZYWFoM6FZlItRajwEQ9VfS
hKDuSjTDcR01Tf3NgX8ICVXG+HaBcDhyTM/pgj3wu3ZjS21mJ/QCOtKGPdT0dm+i
3eZjtACHNEkjJcMzIHpiXHsCFfg9/nsDkP/NjuOtCgSXeyTGhH0wq/RwgIj+tSyi
SIxd5NxDq7KtESU4xOd5Q/W5n3zF2LM+dJD+Bdb+XaNO+9NyX2+zWVszI6busWdG
Q6F/YPJSZUDf8gMupP7aw6RT/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLodBCr
auIOK+TaaXHM1O6+dtEGMB8GA1UdIwQYMBaAFAEQuzq1DjoNRJDDIQO7xAVNxoIe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkNCNi8yQUI3Q0M1QUND
RjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09nMUVrTU1oQTd2RUJVM0dn
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FSQzdPclVPT2cxRWtNTWhBN3ZFQlUzR2doNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkNCNi8yQUI3Q0M1QUNDRjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09n
MUVrTU1oQTd2RUJVM0dnaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXrgWX1k5f4imiUBbK2oMMpQg8R+H/jFLmjjsDTH7mstJZDS2L9Jqx
ukPIkw6gls6YsS0vi868qqAAnAq7sUWFv34kBsqDtM0xR08oAgcTTmI0x5US8ETe
RQfJNeS02DHbNFw8oJ1Ou92V2dKU31os5GLPyZFya6w2XMXGv/t87Ln9cLV4TDpm
eCRfx/KRkz/3UiY0sbjdDP99gNQBaU/usk8Ad0g2z1MaVqvZwi0KXCD8LMzFipUo
yfTr0oS6RrCZrzAsCiwlxUfppD/w/oPl6DNybZUeb2uQtXmm8Wl+Wq7yHifOqxm1
Pa+dCIc4QFnugNW1svGuqQoKP27vTuTI
-----END CERTIFICATE-----
Generated at Wed Dec 31 08:16:27 2025 by rpki-client