This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
File:                     u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json)
Hash identifier:          2TKstcF2F81tucwT4E3RSqtYNWe7/5saDmiof4Ks27g=
Subject key identifier:   6B:E2:8D:E7:2B:19:C5:EE:15:B6:6C:91:3F:D5:AA:CA:4E:FA:D0:D9
Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
Certificate issuer:       /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
Manifest number:          07A7
Signing time:             Thu 18 Dec 2025 20:54:21 +0000
Manifest this update:     Thu 18 Dec 2025 20:54:20 +0000
Manifest next update:     Thu 25 Dec 2025 20:54:20 +0000
Files and hashes:         1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: hZBi7na3S31JWmR0Jfu9+UWTDdGYCIpqYKs6WB5VBy0=)
                          2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=)
                          3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl
                          rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
        Validity
            Not Before: Dec 18 20:54:20 2025 GMT
            Not After : Dec 25 20:54:20 2025 GMT
        Subject: CN=694469fd-71c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:06:6a:fc:7a:6a:97:dd:9d:7a:88:e6:e6:
                    7f:5b:bd:3a:f5:89:c4:6e:5e:74:27:8c:e6:85:ce:
                    7f:d3:24:32:b5:88:78:6b:8a:f9:cc:68:43:cf:d7:
                    6e:ad:6b:06:8d:82:0f:79:30:e7:a5:1a:34:68:1b:
                    19:b6:96:83:b9:c4:f4:f6:14:85:c1:b9:33:69:a9:
                    a1:87:3a:63:14:3a:98:fb:ef:56:df:d9:b8:54:5e:
                    9f:10:ab:a7:5f:a3:ad:09:14:5a:1e:e2:95:79:d6:
                    df:8f:e1:6c:93:9f:04:ea:6f:fe:97:87:d4:52:00:
                    ca:a8:1a:0f:0b:7f:44:92:e1:90:3a:83:27:2f:5b:
                    c1:2c:df:3a:03:8d:63:5e:eb:e7:9e:15:39:1a:48:
                    b5:66:17:f6:b1:5b:b3:6f:65:3f:36:2b:1a:51:b7:
                    9d:e3:e0:19:8e:89:9e:0b:8b:2e:4c:25:6f:8e:a1:
                    cf:9b:df:35:49:a6:6e:18:04:8c:d7:29:1f:6b:ef:
                    8d:ab:de:9d:f5:24:bf:10:4e:d7:ab:ef:06:b4:c0:
                    5a:ad:c8:dd:2d:35:8d:84:06:55:c8:fc:2e:26:02:
                    89:17:26:3b:d0:a3:e5:af:14:a0:9e:e7:41:4e:ca:
                    28:c6:d8:87:57:a5:e5:29:49:0d:e3:6d:1f:e6:2f:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:8D:E7:2B:19:C5:EE:15:B6:6C:91:3F:D5:AA:CA:4E:FA:D0:D9
            X509v3 Authority Key Identifier:
                keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:25:b0:b4:f9:79:13:51:70:49:5b:7e:b4:be:2c:91:dd:
         08:05:71:12:9c:9f:65:ba:73:ba:4f:c5:60:fa:7b:da:bf:9b:
         80:cf:8b:10:c8:11:e6:9d:86:fc:df:fb:96:99:46:66:44:87:
         75:23:94:fc:8d:54:81:87:64:d6:1f:9e:57:21:46:aa:ff:b2:
         4e:a5:ee:a2:f2:63:74:19:c0:e4:8c:1a:fa:1e:01:b5:76:34:
         a0:e7:02:bd:c0:02:a5:a1:8d:b7:23:4e:f4:37:1c:9d:62:66:
         49:c1:ad:9c:d9:3a:07:c3:5b:75:63:43:62:ee:7b:2a:5d:d1:
         8a:c3:9c:fa:fa:0e:e9:4a:ea:81:10:97:90:04:7c:3c:a7:35:
         43:e7:49:62:3f:8c:16:2b:58:5e:7d:59:bc:74:e6:0c:09:3d:
         de:15:c2:be:0c:77:25:a4:47:fe:e5:c8:99:e4:ac:f1:ee:94:
         1e:0b:b7:e6:2a:65:f0:8d:d2:36:42:81:c6:4a:b0:f6:80:ee:
         4b:21:06:9c:48:d3:d5:02:6a:b4:30:c7:04:9a:f7:9d:b4:12:
         d6:e2:18:b4:9a:02:c6:e7:16:f8:be:4e:84:f4:ff:db:80:df:
         75:80:df:87:90:d3:f2:83:cb:b1:e3:e6:31:5e:bc:94:a7:c1:
         d1:7c:a3:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURBRjExMTAvBgNVBAUTKEJCOUY0MkNGQ0UzODhFREM0QjI5RUE2NURFQjYxNjJC
MjU2RDIxMDIwHhcNMjUxMjE4MjA1NDIwWhcNMjUxMjI1MjA1NDIwWjAYMRYwFAYD
VQQDDA02OTQ0NjlmZC03MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoN8Gavx6apfdnXqI5uZ/W7069YnEbl50J4zmhc5/0yQytYh4a4r5zGhDz9du
rWsGjYIPeTDnpRo0aBsZtpaDucT09hSFwbkzaamhhzpjFDqY++9W39m4VF6fEKun
X6OtCRRaHuKVedbfj+Fsk58E6m/+l4fUUgDKqBoPC39EkuGQOoMnL1vBLN86A41j
XuvnnhU5Gki1Zhf2sVuzb2U/NisaUbed4+AZjomeC4suTCVvjqHPm981SaZuGASM
1ykfa++Nq96d9SS/EE7Xq+8GtMBarcjdLTWNhAZVyPwuJgKJFyY70KPlrxSgnudB
TsooxtiHV6XlKUkN420f5i8Q5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvijecr
GcXuFbZskT/VqspO+tDZMB8GA1UdIwQYMBaAFLufQs/OOI7cSynqZd62FislbSEC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REFGMS8wQjJCOTBBNDJE
NzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0eExLZXBsM3JZV0t5VnRJ
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1OUN6ODQ0anR4TEtlcGwzcllXS3lWdElRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REFGMS8wQjJCOTBBNDJENzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0
eExLZXBsM3JZV0t5VnRJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvniWwtPl5E1FwSVt+tL4skd0IBXESnJ9lunO6T8Vg+nvav5uAz4sQ
yBHmnYb83/uWmUZmRId1I5T8jVSBh2TWH55XIUaq/7JOpe6i8mN0GcDkjBr6HgG1
djSg5wK9wAKloY23I070NxydYmZJwa2c2ToHw1t1Y0Ni7nsqXdGKw5z6+g7pSuqB
EJeQBHw8pzVD50liP4wWK1hefVm8dOYMCT3eFcK+DHclpEf+5ciZ5Kzx7pQeC7fm
KmXwjdI2QoHGSrD2gO5LIQacSNPVAmq0MMcEmvedtBLW4hi0mgLG5xb4vk6E9P/b
gN91gN+HkNPyg8ux4+YxXryUp8HRfKOE
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:33 2025 by rpki-client