This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File:                     t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier:          k8waW3iTZ8QVW0YQ4Z54SFuKj/C7kKDPIroBWE2czqI=
Subject key identifier:   C6:EC:9B:7C:98:CE:FE:33:83:61:2B:91:96:B7:55:02:5D:F8:A1:07
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer:       /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number:          19
Signing time:             Fri 19 Dec 2025 06:48:14 +0000
Manifest this update:     Fri 19 Dec 2025 06:48:13 +0000
Manifest next update:     Fri 26 Dec 2025 06:48:13 +0000
Files and hashes:         1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: pSQ7j+QTbi7WCu/okqBJWF5NXHaLe/N1FQIuWMqee3o=)
                          2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: hF8DeZYpmqlhlmu2g+0RpyAdwYJmeUUmrRx6H3p2TpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
        Validity
            Not Before: Dec 19 06:48:13 2025 GMT
            Not After : Dec 26 06:48:13 2025 GMT
        Subject: CN=6944f52e-8658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:79:43:4f:f1:c0:a6:b7:e2:34:4f:f4:d9:
                    d3:2e:16:f1:9e:28:a3:b3:7b:d1:b0:45:22:90:6c:
                    6d:f6:be:55:74:ef:8b:7d:a2:c8:cf:46:90:c9:04:
                    8b:e2:7d:e9:d7:9f:c9:71:f6:40:a8:b6:5d:bb:12:
                    5d:fc:ff:ae:1d:55:2c:47:01:48:e2:d6:88:42:3f:
                    8e:15:e1:28:82:8c:67:65:41:6e:3d:9c:6d:f7:01:
                    32:40:67:2e:2a:8a:64:46:99:33:ee:49:6d:8c:45:
                    5b:d3:fc:30:48:c2:ab:66:f7:c8:5c:15:2c:b6:92:
                    ac:f2:ab:d9:57:8e:53:56:50:6a:14:3d:e2:93:64:
                    75:c9:de:d7:88:b2:9b:53:c9:e5:1c:3b:14:7f:4c:
                    ba:c9:91:31:88:d2:37:fa:da:f5:e9:0b:10:3e:ce:
                    3a:b9:ee:ee:f0:5a:53:24:cc:9a:a7:c2:1e:e7:5f:
                    01:ae:7d:60:ec:31:d5:4d:ca:21:fd:cd:ca:91:b2:
                    52:38:b5:5b:20:d7:9a:3f:2e:76:82:49:c8:c0:72:
                    73:a3:57:25:bd:cc:de:da:20:8c:31:56:a2:69:4a:
                    92:81:26:20:5b:2c:35:62:44:33:30:0b:00:3e:58:
                    be:30:ea:79:06:69:33:ae:b2:a4:2d:d4:1f:c0:39:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:9B:7C:98:CE:FE:33:83:61:2B:91:96:B7:55:02:5D:F8:A1:07
            X509v3 Authority Key Identifier:
                keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:0a:65:7a:7e:23:f4:82:0e:24:e8:c7:e0:3f:90:c1:f8:
         36:a8:99:2b:b4:37:94:3b:9c:82:3c:0c:cb:48:ba:df:73:22:
         c1:a5:9a:b7:47:f1:7c:ec:94:d8:1d:0d:8f:a8:80:0b:b6:88:
         7e:73:08:48:b0:08:3e:e1:c6:8c:d9:2d:20:a7:4f:82:d2:81:
         a2:84:81:76:b8:92:39:ea:84:15:77:72:a6:d3:3a:0c:01:76:
         a4:05:97:b1:a5:24:ab:02:db:39:aa:ae:d4:d8:ff:71:53:ce:
         07:a0:3c:67:c2:bf:51:a1:58:4d:ec:41:7b:77:c0:4d:dc:5e:
         fe:88:21:2b:8e:e5:04:fd:d7:13:2f:1c:90:f0:d2:14:1c:c5:
         d9:95:f7:d6:46:58:a8:f7:e9:02:28:4d:f5:a9:64:51:71:7d:
         56:9b:40:ce:02:21:40:aa:73:8e:48:17:bf:b0:27:6e:08:b0:
         be:89:89:bc:c7:00:da:fc:f6:e8:c1:bf:eb:05:7a:fe:09:47:
         86:36:97:50:96:3e:0c:7e:d4:b1:42:5e:be:46:cc:61:90:f5:
         8f:f7:f0:05:fc:60:4c:fa:ac:ac:66:89:89:5f:e7:56:0e:f0:
         76:97:06:ea:38:ee:e6:c5:3d:5a:54:15:7e:74:a2:33:88:7f:
         b1:b6:16:a4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTM4QTExMC8GA1UEBRMoQjdGQjgzRDFDOUMyRjdDMzhCNzAwMjcxNDY0QUMyMzM2
NEUyRTdENzAeFw0yNTEyMTkwNjQ4MTNaFw0yNTEyMjYwNjQ4MTNaMBgxFjAUBgNV
BAMMDTY5NDRmNTJlLTg2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkGXlDT/HAprfiNE/02dMuFvGeKKOze9GwRSKQbG32vlV074t9osjPRpDJBIvi
fenXn8lx9kCotl27El38/64dVSxHAUji1ohCP44V4SiCjGdlQW49nG33ATJAZy4q
imRGmTPuSW2MRVvT/DBIwqtm98hcFSy2kqzyq9lXjlNWUGoUPeKTZHXJ3teIsptT
yeUcOxR/TLrJkTGI0jf62vXpCxA+zjq57u7wWlMkzJqnwh7nXwGufWDsMdVNyiH9
zcqRslI4tVsg15o/LnaCScjAcnOjVyW9zN7aIIwxVqJpSpKBJiBbLDViRDMwCwA+
WL4w6nkGaTOusqQt1B/AORfrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxuybfJjO
/jODYSuRlrdVAl34oQcwHwYDVR0jBBgwFoAUt/uD0cnC98OLcAJxRkrCM2Ti59cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMzhBL0E0MEQ0NUYwQzA0
NzExRjBBNzBGN0I3OEM0RjlBRTAyL3RfdUQwY25DOThPTGNBSnhSa3JDTTJUaTU5
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdF91RDBjbkM5OE9MY0FKeFJrckNNMlRpNTljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
MzhBL0E0MEQ0NUYwQzA0NzExRjBBNzBGN0I3OEM0RjlBRTAyL3RfdUQwY25DOThP
TGNBSnhSa3JDTTJUaTU5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFlGCmV6fiP0gg4k6MfgP5DB+DaomSu0N5Q7nII8DMtIut9zIsGlmrdH
8XzslNgdDY+ogAu2iH5zCEiwCD7hxozZLSCnT4LSgaKEgXa4kjnqhBV3cqbTOgwB
dqQFl7GlJKsC2zmqrtTY/3FTzgegPGfCv1GhWE3sQXt3wE3cXv6IISuO5QT91xMv
HJDw0hQcxdmV99ZGWKj36QIoTfWpZFFxfVabQM4CIUCqc45IF7+wJ24IsL6JibzH
ANr89ujBv+sFev4JR4Y2l1CWPgx+1LFCXr5GzGGQ9Y/38AX8YEz6rKxmiYlf51YO
8HaXBuo47ubFPVpUFX50ojOIf7G2FqQ=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:42:12 2025 by rpki-client