This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
File:                     No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json)
Hash identifier:          aHsACirFBYr4Q0vMZsEOHIQikAec6cDxwaC8a7VwKK8=
Subject key identifier:   94:13:59:DB:C0:03:43:A8:14:B3:54:C6:0F:17:4F:B0:2A:0A:C5:E1
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       17C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
Manifest number:          171D
Signing time:             Sat 20 Dec 2025 16:21:12 +0000
Manifest this update:     Sat 20 Dec 2025 16:21:11 +0000
Manifest next update:     Sat 27 Dec 2025 16:21:11 +0000
Files and hashes:         1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: e4K9uWCyvHG6J+UF5rl5f8CHIkI26vox+Imrumeobxg=)
                          2: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: S7+wUQWXWYyVNfVrHQD8NP/Kenz4c8yGRRnN25FwcFg=)
                          3: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: QKniKB0i9U/qZ82wwtBMU77bAEO0dwptMvMlVYHgVtE=)
                          4: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: D5/phfHv7NRnNh1uVB5OcYl3HKLOcCjwwCcn5LIOY04=)
                          5: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: z4J2zWK+daoCcDWCwroSrs4nVvB5wPQCYZ736zqUbvA=)
                          6: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: t0aqBhUy2E1vHGSzZ+V/fFaWtfLzEKA+l6C3kep9pTU=)
                          7: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: 3qsyI1RYdC4IxoOEtj35JjtCqUJZACqFj6a64FAn/R4=)
                          8: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: +baJ4IIlVuI0qFlzRCIAXw8ieoi3Maif+6sxqFCGNb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6085 (0x17c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Validity
            Not Before: Dec 20 16:21:11 2025 GMT
            Not After : Dec 27 16:21:11 2025 GMT
        Subject: CN=6946ccf8-b536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:53:78:99:ed:15:bd:2a:00:e5:88:29:72:
                    37:42:28:f3:ee:b0:81:40:84:61:06:68:2e:6e:c4:
                    4a:e0:bc:73:86:00:49:98:46:77:e6:c0:63:e0:b4:
                    71:ff:da:13:07:54:bd:cf:02:63:e2:66:8e:39:52:
                    4d:ca:7f:c7:bc:59:d6:8b:f8:03:31:a8:08:bc:3b:
                    fe:b8:b8:e7:6a:6a:17:b4:94:04:fe:74:6f:4e:0b:
                    77:b6:29:bc:f3:f4:19:63:a1:d9:cb:ad:55:6d:08:
                    1f:57:c6:92:15:3e:cd:27:fc:1d:3b:6c:66:16:08:
                    41:a3:d6:25:76:3f:e2:7c:47:f8:72:ac:0c:40:7a:
                    67:fb:89:bd:b1:58:07:d6:65:25:89:77:8b:52:4f:
                    45:6f:0b:58:4a:ff:a6:ba:2b:50:a8:9c:20:9b:fe:
                    d3:e9:c2:07:42:54:0d:60:bd:63:55:1a:39:b3:b3:
                    fb:3e:d5:80:37:7c:a5:f4:66:e9:9e:fc:f6:2e:c0:
                    9f:db:ea:db:0b:a2:ae:54:e4:48:c6:50:5d:27:50:
                    aa:8d:1c:8e:c6:68:4a:15:22:df:a9:b8:eb:4a:8e:
                    ff:e5:08:4a:ec:72:9c:95:12:44:39:1b:e6:cf:09:
                    1e:66:ca:d5:c3:41:b3:50:e5:37:19:32:ee:50:b8:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:13:59:DB:C0:03:43:A8:14:B3:54:C6:0F:17:4F:B0:2A:0A:C5:E1
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:77:c0:9f:fd:5a:dc:1b:2c:80:b2:71:e9:1b:67:02:29:9b:
         d4:ab:a5:47:96:38:99:55:33:f2:d1:88:30:fa:b8:8a:c2:af:
         29:d8:79:a1:6f:da:73:6b:37:ee:cd:0b:31:9a:4c:b4:23:a9:
         a6:fa:3a:8b:b3:27:01:e0:de:d7:d7:26:a1:ba:a7:da:e2:dd:
         4d:2c:22:86:12:dc:a3:7c:54:4a:e8:e4:4c:5d:20:c5:69:23:
         ce:80:c5:71:59:fc:71:c3:db:ca:09:9e:e1:a0:81:c8:84:c7:
         9d:40:e8:50:31:17:8d:7d:0f:00:fb:e8:80:7b:4a:61:99:e3:
         30:a4:ca:47:19:51:ee:4a:17:21:b9:57:93:c9:a9:2b:46:2c:
         bb:dc:9a:bb:9e:07:ff:c6:02:f5:bb:42:74:5f:41:15:48:cd:
         14:3d:75:b4:11:0a:28:98:98:61:57:d7:24:dc:cf:5b:2a:c9:
         25:d3:3f:b4:d1:88:53:6b:f2:84:c6:e4:27:f0:21:bb:f4:0f:
         90:f4:00:2a:07:4e:3e:01:fb:0d:ed:50:ff:d6:02:12:b5:58:
         7a:1a:5c:27:b0:17:7c:19:48:ef:c2:07:f8:6c:ba:38:45:d9:
         3d:ad:80:3d:f2:6e:0c:0d:a1:b6:bb:01:78:d1:a1:f3:6c:5a:
         31:ec:fd:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG
Q0ZFOTFFN0UwHhcNMjUxMjIwMTYyMTExWhcNMjUxMjI3MTYyMTExWjAYMRYwFAYD
VQQDDA02OTQ2Y2NmOC1iNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnzRTeJntFb0qAOWIKXI3Qijz7rCBQIRhBmgubsRK4LxzhgBJmEZ35sBj4LRx
/9oTB1S9zwJj4maOOVJNyn/HvFnWi/gDMagIvDv+uLjnamoXtJQE/nRvTgt3tim8
8/QZY6HZy61VbQgfV8aSFT7NJ/wdO2xmFghBo9Yldj/ifEf4cqwMQHpn+4m9sVgH
1mUliXeLUk9FbwtYSv+muitQqJwgm/7T6cIHQlQNYL1jVRo5s7P7PtWAN3yl9Gbp
nvz2LsCf2+rbC6KuVORIxlBdJ1CqjRyOxmhKFSLfqbjrSo7/5QhK7HKclRJEORvm
zwkeZsrVw0GzUOU3GTLuULh2CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQTWdvA
A0OoFLNUxg8XT7AqCsXhMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx
RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC
SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4d8Cf/VrcGyyAsnHpG2cCKZvUq6VHljiZVTPy0Ygw+riKwq8p2Hmh
b9pzazfuzQsxmky0I6mm+jqLsycB4N7X1yahuqfa4t1NLCKGEtyjfFRK6ORMXSDF
aSPOgMVxWfxxw9vKCZ7hoIHIhMedQOhQMReNfQ8A++iAe0phmeMwpMpHGVHuShch
uVeTyakrRiy73Jq7ngf/xgL1u0J0X0EVSM0UPXW0EQoomJhhV9ck3M9bKskl0z+0
0YhTa/KExuQn8CG79A+Q9AAqB04+AfsN7VD/1gIStVh6GlwnsBd8GUjvwgf4bLo4
Rdk9rYA98m4MDaG2uwF40aHzbFox7P1+
-----END CERTIFICATE-----
Generated at Sun Dec 21 18:01:26 2025 by rpki-client