This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File:                     R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier:          zpmQ+Mm0RquUU7yzMhY/+MeNdtz1BnVHTaR8wAqaNAk=
Subject key identifier:   B0:4D:D9:D8:C9:61:DE:15:70:20:40:9D:56:48:A9:27:11:D1:E0:34
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer:       /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number:          0212
Signing time:             Wed 31 Dec 2025 01:29:56 +0000
Manifest this update:     Wed 31 Dec 2025 01:29:55 +0000
Manifest next update:     Wed 07 Jan 2026 01:29:55 +0000
Files and hashes:         1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: OtvNtWcRr+g8M0jpsF+hBlZwmDDGMS4EcpT1RR+C80I=)
                          2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
                          rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 01:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
        Validity
            Not Before: Dec 31 01:29:55 2025 GMT
            Not After : Jan  7 01:29:55 2026 GMT
        Subject: CN=69547c93-ac00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:e1:93:f7:11:a9:9c:be:fd:30:2b:19:48:
                    8c:fa:49:f3:d0:11:1e:9d:cf:f0:bd:fa:48:cd:99:
                    81:aa:33:f7:a6:b5:84:e0:15:fb:0e:dc:2a:93:f9:
                    fe:c8:83:d3:1a:b7:a5:41:a9:c0:7f:f3:c1:06:d2:
                    37:9d:c8:cb:dd:54:13:e5:65:2c:30:3b:c2:c7:cf:
                    6c:d5:68:91:13:52:8b:d0:71:b8:07:0e:b9:d6:58:
                    cd:c2:bc:c0:2e:1a:92:64:7e:f1:1d:af:7d:43:8f:
                    e6:1b:60:6a:ee:68:2a:cc:90:50:70:70:7d:fe:e8:
                    7b:cf:59:e8:cb:bb:a7:3a:b8:2f:dd:62:9f:77:6a:
                    c2:23:2b:f3:09:8e:15:11:19:b7:71:98:a6:38:97:
                    f7:41:72:75:89:29:11:d6:40:23:1c:ef:71:b9:b3:
                    d7:df:10:5f:94:17:c7:f9:b0:2d:fc:18:9a:b7:35:
                    a2:54:43:c8:40:be:da:60:75:fd:68:f7:54:fb:0b:
                    28:1c:80:06:86:54:fd:ad:ef:e9:65:89:81:d4:92:
                    86:5f:0a:01:43:3a:72:bd:ce:ac:2c:fe:c6:46:2b:
                    58:17:cd:c2:78:33:27:f2:43:31:e7:e8:ee:8d:06:
                    be:b5:4d:71:4b:4e:f2:97:5d:1a:4c:1e:e0:27:48:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:D9:D8:C9:61:DE:15:70:20:40:9D:56:48:A9:27:11:D1:E0:34
            X509v3 Authority Key Identifier:
                keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:07:58:25:d0:44:8d:3b:4f:d5:a4:ab:65:97:d6:4c:e7:
         9c:f8:05:6b:f6:04:c6:ff:47:d0:39:15:a3:c8:c6:b2:fc:2f:
         15:4b:b3:f6:72:77:df:2b:8c:63:01:9b:32:fa:f5:6c:01:2b:
         e5:57:85:de:75:e9:22:cb:09:81:cd:da:f0:7e:ef:f8:b0:c6:
         b0:00:82:28:00:30:14:71:3f:61:3a:f0:31:37:23:c4:4f:a2:
         f2:96:78:06:ca:40:c2:ef:da:5e:55:72:30:1d:d3:21:21:87:
         3a:5a:79:81:52:85:80:3f:8c:56:a9:84:6f:0d:f9:62:7f:29:
         75:19:79:51:e4:e1:7b:9c:2f:8d:a9:12:0f:a8:13:0f:13:f8:
         b0:e3:6d:73:f4:00:88:a5:f4:ab:16:f2:12:14:12:9c:63:fa:
         d5:83:62:23:9b:1b:d3:06:5d:a6:54:8b:67:e7:6a:3a:a5:fa:
         ab:5c:23:31:e1:25:50:2c:a1:c3:27:32:38:f7:47:93:7b:35:
         b2:e4:4f:a8:45:f4:e5:18:e0:7f:4a:3e:13:7f:18:1e:a0:90:
         7c:a3:cf:3e:8a:00:29:0a:25:ef:36:0c:39:71:bd:d3:5e:d4:
         27:a6:46:17:70:b2:fe:38:30:a2:5c:79:53:3e:49:42:87:5b:
         71:13:cb:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0
OEJCOUUxMjMwHhcNMjUxMjMxMDEyOTU1WhcNMjYwMTA3MDEyOTU1WjAYMRYwFAYD
VQQDDA02OTU0N2M5My1hYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppfhk/cRqZy+/TArGUiM+knz0BEenc/wvfpIzZmBqjP3prWE4BX7Dtwqk/n+
yIPTGrelQanAf/PBBtI3ncjL3VQT5WUsMDvCx89s1WiRE1KL0HG4Bw651ljNwrzA
LhqSZH7xHa99Q4/mG2Bq7mgqzJBQcHB9/uh7z1noy7unOrgv3WKfd2rCIyvzCY4V
ERm3cZimOJf3QXJ1iSkR1kAjHO9xubPX3xBflBfH+bAt/BiatzWiVEPIQL7aYHX9
aPdU+wsoHIAGhlT9re/pZYmB1JKGXwoBQzpyvc6sLP7GRitYF83CeDMn8kMx5+ju
jQa+tU1xS07yl10aTB7gJ0iraQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBN2djJ
Yd4VcCBAnVZIqScR0eA0MB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4
MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx
ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdnwdYJdBEjTtP1aSrZZfWTOec+AVr9gTG/0fQORWjyMay/C8VS7P2
cnffK4xjAZsy+vVsASvlV4XedekiywmBzdrwfu/4sMawAIIoADAUcT9hOvAxNyPE
T6LylngGykDC79peVXIwHdMhIYc6WnmBUoWAP4xWqYRvDflifyl1GXlR5OF7nC+N
qRIPqBMPE/iw421z9ACIpfSrFvISFBKcY/rVg2IjmxvTBl2mVItn52o6pfqrXCMx
4SVQLKHDJzI490eTezWy5E+oRfTlGOB/Sj4TfxgeoJB8o88+igApCiXvNgw5cb3T
XtQnpkYXcLL+ODCiXHlTPklCh1txE8tw
-----END CERTIFICATE-----
Generated at Wed Dec 31 23:30:46 2025 by rpki-client