This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          7NAPID5SK0VmPi0H0fuTtVklRoABwIIWZz56YhzpuOg=
Subject key identifier:   23:97:28:88:23:01:A9:3C:C6:D4:5B:93:82:E4:59:2B:98:D6:89:A5
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C1C
Signing time:             Mon 22 Dec 2025 18:19:16 +0000
Manifest this update:     Mon 22 Dec 2025 18:19:16 +0000
Manifest next update:     Mon 29 Dec 2025 18:19:16 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: l8KaDSR14fVvhCtlY/1RYT8i7QAal5XE8ptjkuUFm4g=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: ioWxXkHuwgM2086xjsQFXghAivhpj/YnVGLVGuciV/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3108 (0xc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Dec 22 18:19:16 2025 GMT
            Not After : Dec 29 18:19:16 2025 GMT
        Subject: CN=69498ba4-a780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:80:2d:28:f7:dc:b0:7c:52:22:19:9a:d1:
                    ad:64:22:38:37:59:6b:ee:58:17:d3:dd:07:ff:7f:
                    7b:29:dc:92:97:c3:34:ba:11:7c:57:a5:ff:1d:65:
                    07:88:c9:34:4d:e6:0d:50:d4:1c:b4:98:ca:c8:8c:
                    56:00:f4:e0:f5:0e:6d:bf:36:1b:cd:08:52:f8:b1:
                    ed:aa:38:44:ae:82:d6:d3:1d:ce:58:bc:5c:fe:84:
                    bf:7f:b6:40:9c:cc:f5:0c:e4:55:60:7e:9c:7d:12:
                    ef:87:07:64:a5:59:19:a0:23:ed:b9:fc:da:18:ee:
                    1d:4f:70:7b:62:f1:68:af:95:c2:d1:1c:a8:41:20:
                    5f:a4:a2:0c:4c:89:ff:83:82:73:65:dd:ea:9f:a8:
                    c3:a6:c8:65:23:3c:75:fd:9c:71:6c:95:5a:0f:f6:
                    12:3b:0a:b5:f0:19:cb:c6:1f:12:79:c0:fe:ba:45:
                    4c:03:e1:ee:6f:98:d9:03:76:57:1a:ef:da:0b:26:
                    79:6d:e1:50:39:f9:dc:a9:61:4c:62:b0:3e:dc:ec:
                    db:be:23:42:65:ff:b5:ba:32:30:8e:cb:5d:bc:74:
                    82:1c:30:47:18:cf:24:0e:22:6d:e1:63:09:68:64:
                    17:fc:e9:8f:d9:18:f6:bc:76:d4:72:fc:ae:35:2f:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:28:88:23:01:A9:3C:C6:D4:5B:93:82:E4:59:2B:98:D6:89:A5
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:07:07:53:40:4c:a7:2b:53:5d:d0:44:53:ba:da:99:15:b2:
         10:bf:ce:30:e4:a5:91:87:3b:17:aa:54:57:fb:6a:14:4b:4d:
         2d:a3:f4:a9:e3:e6:4a:77:46:56:30:d0:69:ee:c8:ca:9f:f5:
         cc:36:64:13:e2:6b:dd:71:64:34:ba:30:7a:f2:43:0f:9b:a6:
         36:22:a3:4b:ce:2c:9d:71:50:cd:90:48:a8:cb:f4:37:96:0c:
         22:44:4e:1d:d5:00:94:e9:ba:82:1b:31:43:91:30:56:2e:4e:
         a3:e6:e1:e1:5b:f6:87:00:cf:25:b2:2b:cf:0e:e2:ac:f6:b6:
         7b:19:7e:cb:38:2d:9d:01:b5:da:6d:39:4f:4f:ba:9c:a2:a4:
         be:ac:29:30:f6:20:d9:b3:2a:89:f6:d9:36:09:22:04:a9:6e:
         a4:06:4b:3b:a6:01:d2:cc:65:ec:80:b5:e4:40:f8:bb:99:43:
         79:11:cd:d9:ec:f2:cb:2f:9a:6e:93:c9:68:4d:db:fb:40:a0:
         59:5e:0f:60:12:bf:36:b9:0b:5a:b2:3f:bf:04:32:0e:96:c7:
         8e:76:3d:75:7a:d6:2f:e0:15:5e:d5:e2:d1:10:9e:4c:17:af:
         d9:2e:ae:39:1f:41:7c:95:a6:f0:24:0c:47:a1:ae:d4:92:45:
         6a:9d:64:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3
NzU4MzAwRjkwHhcNMjUxMjIyMTgxOTE2WhcNMjUxMjI5MTgxOTE2WjAYMRYwFAYD
VQQDDA02OTQ5OGJhNC1hNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn++ALSj33LB8UiIZmtGtZCI4N1lr7lgX090H/397KdySl8M0uhF8V6X/HWUH
iMk0TeYNUNQctJjKyIxWAPTg9Q5tvzYbzQhS+LHtqjhEroLW0x3OWLxc/oS/f7ZA
nMz1DORVYH6cfRLvhwdkpVkZoCPtufzaGO4dT3B7YvFor5XC0RyoQSBfpKIMTIn/
g4JzZd3qn6jDpshlIzx1/ZxxbJVaD/YSOwq18BnLxh8SecD+ukVMA+Hub5jZA3ZX
Gu/aCyZ5beFQOfncqWFMYrA+3OzbviNCZf+1ujIwjstdvHSCHDBHGM8kDiJt4WMJ
aGQX/OmP2Rj2vHbUcvyuNS80oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOXKIgj
Aak8xtRbk4LkWSuY1omlMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx
MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF
YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgBwdTQEynK1Nd0ERTutqZFbIQv84w5KWRhzsXqlRX+2oUS00to/Sp
4+ZKd0ZWMNBp7sjKn/XMNmQT4mvdcWQ0ujB68kMPm6Y2IqNLziydcVDNkEioy/Q3
lgwiRE4d1QCU6bqCGzFDkTBWLk6j5uHhW/aHAM8lsivPDuKs9rZ7GX7LOC2dAbXa
bTlPT7qcoqS+rCkw9iDZsyqJ9tk2CSIEqW6kBks7pgHSzGXsgLXkQPi7mUN5Ec3Z
7PLLL5puk8loTdv7QKBZXg9gEr82uQtasj+/BDIOlseOdj11etYv4BVe1eLREJ5M
F6/ZLq45H0F8labwJAxHoa7UkkVqnWR4
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:32 2025 by rpki-client