This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          R/+HROedAUqnS6jC6RJeiSBWMqU85ctxoA0NbCQMmK4=
Subject key identifier:   D6:88:DF:8F:88:35:73:EA:C9:6F:14:54:A9:15:2D:D4:BA:33:7C:11
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          349C
Signing time:             Thu 18 Dec 2025 15:15:57 +0000
Manifest this update:     Thu 18 Dec 2025 15:15:56 +0000
Manifest next update:     Thu 25 Dec 2025 15:15:56 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: ncCNNsHIC9jFywpRtacp+M4lcvjJVkthmP6AINXGQoM=)
                          2: B91BEB86943711F08A09E30CC4F9AE02.roa (hash: rqhFHdH1mwKgqSSyyXkH5ldhQsleRwxsMAJOjz75ruU=)
                          3: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=)
                          4: DD1805369A8311F0A54CE65CC4F9AE02.roa (hash: g1Jd3IDpPYg+NNjbiAV63UaTfld83t8qWBUIDkeII+w=)
                          5: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=)
                          6: A2239B14782011F0A1950D84C4F9AE02.roa (hash: uRH2cuGSTKJvgNoy+Zb1UaKolBxs7SYQUUNOq8LSf4M=)
                          7: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=)
                          8: 26E8E0566DF011F0B88F3F58C4F9AE02.roa (hash: 3byGRjTOjwf1xthbWEUAa+eHuN1uN4XXcTWnaRVW6NM=)
                          9: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=)
                          10: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=)
                          11: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=)
                          12: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=)
                          13: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=)
                          14: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=)
                          15: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=)
                          16: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: GKPeCAs7yCzcTtRwWFCku8oUh6Rtkvw9ICbK+vHtQ5Y=)
                          17: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=)
                          18: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13684 (0x3574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Dec 18 15:15:56 2025 GMT
            Not After : Dec 25 15:15:56 2025 GMT
        Subject: CN=69441aad-ad58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:94:95:12:3f:80:3b:83:78:0e:05:7f:8e:
                    ca:d0:bb:39:7b:2b:b6:b2:48:56:87:a6:8d:40:ea:
                    ad:c9:31:fc:4d:26:b0:3d:df:d5:6c:86:bc:65:80:
                    56:62:08:22:37:8f:5b:dd:49:c3:af:55:75:10:e3:
                    57:3d:03:27:91:1c:5f:4b:80:95:e7:7b:14:89:69:
                    81:ff:e6:57:01:b4:7d:5a:34:d6:86:a5:37:5a:61:
                    b6:5d:bf:f7:8c:4b:69:9b:93:22:3b:89:01:b8:d1:
                    70:76:17:81:d6:d6:cf:ae:1b:cc:99:a0:f7:60:e8:
                    af:dd:33:6a:cc:10:6c:55:a8:b9:41:56:18:cf:7b:
                    3e:03:b4:42:b2:39:0d:56:72:a5:0f:b2:1c:02:07:
                    32:74:56:38:8b:1b:34:5b:aa:87:21:ec:5e:4f:68:
                    e0:be:96:65:17:ce:9c:c1:98:3c:01:28:2b:f5:4c:
                    fc:57:10:89:53:f4:5b:f2:85:53:a6:c0:b6:a0:3c:
                    64:7a:73:6e:ce:23:13:da:dc:bb:85:21:78:5a:6d:
                    d7:46:d4:30:f0:cd:7c:66:12:31:19:86:b7:cf:89:
                    59:49:fc:ba:69:52:50:e6:a9:66:78:38:62:0d:b1:
                    90:03:ad:0b:95:a7:7c:2c:c9:09:15:b4:2f:be:51:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:88:DF:8F:88:35:73:EA:C9:6F:14:54:A9:15:2D:D4:BA:33:7C:11
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:ee:6c:7e:1f:78:49:7d:ac:23:96:32:87:63:37:da:71:
         49:92:6c:f5:25:3a:9d:52:f5:8d:8d:85:78:79:19:cb:e4:1e:
         ec:35:d0:56:08:9f:74:32:b7:3d:6d:4c:e7:97:c0:b8:a4:a9:
         ef:aa:33:11:f6:83:0e:d9:cd:a0:5a:79:71:17:03:a1:55:1e:
         81:31:e3:30:73:b2:e0:34:a3:95:5e:5d:f5:d4:0f:cd:ea:8d:
         85:3b:8b:e5:03:61:b4:0e:1b:b1:4a:0c:f2:d6:cd:b5:16:9e:
         74:15:c0:c0:65:69:6c:9d:7c:50:e4:79:09:a7:bb:33:77:e7:
         22:94:b6:cd:04:49:54:92:bb:31:6c:00:31:69:c0:21:ac:c5:
         8d:26:f2:35:14:fe:c5:93:5d:c5:06:74:cb:e3:84:0e:05:f9:
         75:ca:b2:f4:3c:0b:49:04:f4:a6:47:43:c0:50:a1:43:16:6a:
         70:0e:67:07:d6:54:db:48:3e:d5:f2:2f:93:a5:95:d8:92:5e:
         6e:94:3f:a3:93:c9:7c:29:97:e2:db:33:be:72:8d:8d:84:c6:
         c8:5f:b0:50:14:d7:6a:71:2d:4f:a7:d1:09:ce:e1:7a:92:52:
         84:b3:99:32:7c:61:42:44:5f:f7:90:bf:83:71:c5:4e:e1:72:
         2c:52:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:57:25 2025 by rpki-client