This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          tnh4+B/DSAIGlpc7UnNF1InE7OjK/x/S6C82HmNPyl8=
Subject key identifier:   F7:BE:E3:DF:9D:6F:7A:97:D6:02:0F:AA:2D:CE:A0:A2:EC:31:E3:F9
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1FD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1D27
Signing time:             Sat 20 Dec 2025 16:05:07 +0000
Manifest this update:     Sat 20 Dec 2025 16:05:06 +0000
Manifest next update:     Sat 27 Dec 2025 16:05:06 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: N3RjkPhltLgfMuC3AIfuZlefxxgl5/gFGPwL7FMWYmA=)
                          2: E32743EEBCE711EFA920D83FC4F9AE02.roa (hash: eMzSKyuI2c+XZ+PgHwwi8mk0yO/7VQK2ipuwWBEgmiw=)
                          3: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: iWkHjXOrmmMyudZnFP7UPWo3G/SVzy0m5OG/H6qexGA=)
                          4: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: KwfuEN2GtNIeymat9QicYfvjGAixMAdsbfteX7WUvEg=)
                          5: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: w2SR4epUhMFSAcQK3/dc+xj2nRxXuAifHwZUSCbmzIY=)
                          6: 9D1066F8474111F08A856E0FC4F9AE02.roa (hash: osyXK4bFAXBaALZNfhA8dh2eViVUfO9fCufB9qUWT7E=)
                          7: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: dSsX5nHKXYb9bOl0U0xbwpvb4MLDdOQ/bdm2Sv2pyUc=)
                          8: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: xjE1wzsHVmSRCzFdeF0NIrknzjRrx9wDvb8yKtaqn18=)
                          9: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: mgxcBaGr7BI/56HJBlh6MCkHXWiHbJ+08mgJcXvNvJg=)
                          10: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: mtne+bMEBaQqJowTZo2wwhS1IpnM92WcDfLdziefH6w=)
                          11: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: dcnIGRDuhe/YVo11t/zCICa2zZu3fwNbXzjiiNbdEso=)
                          12: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: uysLyPq5b4frr5fJrVPEOfj4Wx/jhSmFE2Cw3P/UT04=)
                          13: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 0j38Uo+iFQdO5kEPFTuORuug7S4L8ZW5Ebjy0sA1lBc=)
                          14: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: Rq28F8DG0yv7BlbarhDxq9/F29Ep/HSvPI5qoAbvOgs=)
                          15: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 1S4Ze1eJ69z/bmw/D2eNMgh3uJmMcwiAvB3cJQ/oA/Q=)
                          16: BD58F50404D311E9A6452047C4F9AE02.roa (hash: 4P793Jb0fesAoesXcB5RaDkBjyGdPNj+Zecm5mMaFtk=)
                          17: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: Lu3Y+Q2rBWizIKedIuUpiTCds7UJqOjm7hhsvOgcCcc=)
                          18: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: E6jvgXL/Ix4dKJJZE/v870wInYVV+abXs6FhDuV8FYs=)
                          19: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: oBbIK682wSEUP5TvritJ4KxrBNWU5rxHl4orE4VE3u4=)
                          20: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: APuEYDobiTkr+yjV+CCWI8xd4BdBtVmmm5ve6mCT6Qw=)
                          21: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: pzwrfGOBC1aqTT139+tbu2nilQDwKj9t+kR3PSIwn0Y=)
                          22: 50550748066011EEA5F59657C4F9AE02.roa (hash: 85uNE5EA4RwePX68ecsox54cbRTW2BiV90sMJiT4zJc=)
                          23: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: y1hSxpTcRmvGSlokMiKmUttArX3J3HAaJ4mrrIaV/Z0=)
                          24: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: b5kRJtBI/pSUmP5v9Ia63CXCRGEXjqKz2TLjOK18uWc=)
                          25: 152C69AA6E7211F082AE972AC4F9AE02.roa (hash: W2cA7bbeIhpFV8O+ABzw9pSF/dGb8bzFrzfYIIuUe70=)
                          26: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: 3R0caWlbq1LOK9PMe9S0/RNrK2xglF1D20u07isPD7I=)
                          27: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: 6CETeBmdxLp575yCFO+woa7316cbcGtcb5tHB4lGr3U=)
                          28: F59F290A459B11F0AE80E433C4F9AE02.roa (hash: 9MfeAv3ExGwlQsjIUPGrk5ZfzNC4IazKk+fMrC6V7cQ=)
                          29: A42AF5D0559111F08D8D0584C4F9AE02.roa (hash: FkUa4Y4fE67M165KQOCXOv0uBb3P1ghowmi2/pRPoi0=)
                          30: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: Lvk9jUc2nOmVqiloTp/GHNCkrAD4k8B4c9WxpWLobz0=)
                          31: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: nXSnzDLmzp0BLqr6LnwQS+rSkrXmy8a6H9txoxxzEAU=)
                          32: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: CEIRp2CrdEBIU6s4i+N/CMh7EJRlFmiCG/zfxxnrcFA=)
                          33: F3309B3004D011E994985639C4F9AE02.roa (hash: cBlfvRvu5XPZeGK26Yrs2RLgQwg2/ERxPdd95ScxBkY=)
                          34: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: 2qn9NXSOf21uSxk9HsnL18AqcQ0bhCjIV+9nqDhn33Y=)
                          35: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: CT9oR+mour9icf2SXlc68B/oJLLnyCcyaxA9b5EH/aA=)
                          36: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: hL2Zdvxv4XI+3HFMfaS+1/ZokoAN1ShisW4m73K9Neo=)
                          37: E3FFB7282B1F11F09AACBB33C4F9AE02.roa (hash: eSBvSr9bRn6jhbrK6BtpitmGa1/YLUvUvJZQp7St0dE=)
                          38: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: x2K4iGB4XiPQaLbpOQU46N5zgaAZ4UmMEd3zJ7RSB2Q=)
                          39: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: RV8EJBlleyhzVkG95IjKL2zXI9QzuqZSxvDEwW6Abdc=)
                          40: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: gPqt9BXjKpUpT8BxS+2RF03m6ynmeK5bKK/XmFQPRsc=)
                          41: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: ILtcyDU15URhGSa5Kjj9yOQZtiWVIFSi4W87UvdNp7k=)
                          42: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: bhR5rDRi92lQT+/4ZT+LwH+kvujHBgyqcJUxAMDwnCU=)
                          43: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: y7yNxeywRY1r8qYqNTXpqknUD3wMI4iVn5vIBSPv3v0=)
                          44: C362F1FC6E8A11F0BCC1991BC4F9AE02.roa (hash: ydv6JHZX5HxYCcM81vwZWeWAlo+E2UnhpXtUpF9b09s=)
                          45: F5CC48A804D011E994985639C4F9AE02.roa (hash: doD+yTdaGVyKwIsSSZCRhj5n7eg36BNqzqq+qHdoKjY=)
                          46: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: kamFVk5Lhqt3swGOQVtx9Xo8vPBROM2IhuUHDFxP/BE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8147 (0x1fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Dec 20 16:05:06 2025 GMT
            Not After : Dec 27 16:05:06 2025 GMT
        Subject: CN=6946c933-ff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:f3:a8:27:9e:2c:82:af:5a:8d:6e:1e:fd:
                    ad:22:a3:6c:2d:95:2e:3c:7b:0e:e8:a1:e1:d9:23:
                    20:f4:7c:2e:29:57:6b:29:97:62:7b:ec:8f:3a:d8:
                    ff:72:a0:3e:a6:b0:18:8b:b7:d4:1e:dc:a2:2a:ea:
                    24:2f:e0:15:7f:62:81:32:a7:e8:1f:cf:bb:71:6e:
                    23:16:0e:48:9a:a7:a9:51:11:e3:42:a1:51:1e:2f:
                    99:62:a0:7a:70:f7:d7:9f:df:41:4f:f0:4b:6c:5a:
                    39:1a:51:2b:0d:dc:0f:97:da:eb:33:7d:8b:bd:55:
                    81:dc:37:df:5e:0f:d6:84:1f:0d:00:08:f6:f4:bb:
                    2d:ee:9e:66:36:3d:95:72:d0:34:b9:0d:66:e0:50:
                    42:55:48:7b:d5:5c:b8:4c:f7:ef:51:6f:81:b8:67:
                    c9:61:de:00:e3:c8:48:a8:b5:1c:3b:20:76:e5:d4:
                    20:93:dd:1f:9c:60:17:67:0c:1b:74:d8:e3:4e:8a:
                    70:57:10:3e:ad:d0:53:89:91:df:86:75:09:bf:8a:
                    86:3e:8f:e6:73:8c:54:53:a0:a9:7c:72:b4:8e:22:
                    12:14:93:39:43:11:ac:f8:6f:d7:c0:4a:e4:87:31:
                    26:17:39:de:62:0f:4f:97:29:19:30:3a:7b:c5:a8:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:E3:DF:9D:6F:7A:97:D6:02:0F:AA:2D:CE:A0:A2:EC:31:E3:F9
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:c6:e4:cc:47:f6:3a:89:61:4e:a0:21:bb:c7:31:04:09:
         66:ea:57:62:78:44:cf:01:50:51:6a:55:f7:45:58:4b:e9:da:
         be:05:8b:57:c3:a0:a4:48:f7:32:49:34:34:cf:22:72:81:08:
         ef:3a:9f:93:0f:e2:b5:68:52:a0:06:43:80:83:98:24:e8:2e:
         a9:f4:25:51:10:1a:02:b5:f8:9f:a1:9e:7b:74:3f:2a:3b:40:
         33:50:cd:37:6d:cd:21:7d:cf:07:f6:7b:28:ff:62:e6:32:6a:
         53:31:45:78:f9:a5:24:af:ba:d2:7e:76:fd:ba:73:45:3d:ff:
         19:e3:07:97:aa:55:69:e5:d8:65:47:fa:56:9c:70:68:26:67:
         28:c0:87:ca:57:22:b4:1f:06:ac:85:da:c4:d1:b0:9f:5c:b0:
         4f:d8:09:18:17:a8:f9:26:02:b9:60:45:32:f3:9f:bd:f4:47:
         bc:66:61:cc:88:c5:a0:9d:06:ef:b6:2e:7a:a5:9a:8e:09:57:
         b7:0a:a8:9d:ee:ac:78:8a:f5:b5:21:10:02:01:eb:47:22:05:
         bf:8b:93:90:ba:85:97:50:ad:e1:7f:2a:9c:2a:89:6c:90:17:
         b2:b9:26:ac:80:c0:c3:cc:96:76:91:40:d0:52:fc:41:23:25:
         e8:e3:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----