This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
File:                     10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json)
Hash identifier:          8E/aOVVCrLDUCW5hpXk8UhxFXe2sE0Ssp61AXH9zffk=
Subject key identifier:   90:DF:D2:E6:F9:75:99:A9:23:02:BD:04:22:BD:E0:E4:10:FF:26:B6
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Certificate issuer:       /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial:       0B3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
Manifest number:          0B2B
Signing time:             Thu 18 Dec 2025 18:56:59 +0000
Manifest this update:     Thu 18 Dec 2025 18:56:58 +0000
Manifest next update:     Thu 25 Dec 2025 18:56:58 +0000
Files and hashes:         1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: Pi1wSP/a+ya7UEhhsblMeibJtSg9PKm17mFdrgeBuM8=)
                          2: DDFB4716AB0D11F0A533CC38C4F9AE02.roa (hash: ST+eEmFvXhm94+Eq+HZ5fYqUNUrS3+2d6gwKeVG/128=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
                          rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
        Validity
            Not Before: Dec 18 18:56:58 2025 GMT
            Not After : Dec 25 18:56:58 2025 GMT
        Subject: CN=69444e7b-7016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:cc:f9:3f:1e:d9:8e:82:5a:26:f2:4f:d6:
                    f0:d7:68:e2:8b:27:9a:33:7b:16:10:7d:71:40:0e:
                    2e:b5:32:2c:3f:8e:1a:67:28:72:d4:34:99:d7:e3:
                    b2:a0:02:68:11:14:b7:63:d7:40:88:27:1e:42:ce:
                    19:66:d2:92:62:10:11:5b:fc:0b:4d:03:b6:7f:b7:
                    55:e7:61:8d:4e:bc:57:7f:77:b9:31:2b:24:1f:c4:
                    19:4b:79:ac:96:31:be:9b:f7:b6:f7:33:bd:b7:40:
                    d5:45:2f:f4:d1:b2:20:40:c2:c3:45:40:f3:81:0d:
                    2c:7b:f1:6d:65:57:62:26:2a:c2:e1:ac:07:ac:f0:
                    77:4d:06:90:fb:11:71:29:78:aa:74:fc:92:ce:aa:
                    24:74:37:02:e9:31:bf:19:26:28:35:8e:12:df:97:
                    5a:f5:b8:28:6a:0c:06:1d:e8:1f:f4:ce:76:4d:c6:
                    59:be:7d:b0:7c:b3:f4:ab:42:9d:04:e2:66:4b:da:
                    91:5e:06:74:26:01:7e:87:39:25:51:b3:ff:15:89:
                    53:79:50:dc:0c:db:57:99:0c:c3:73:6d:88:21:7d:
                    66:52:3c:9f:cc:e4:36:de:7e:2e:5c:6d:9c:5d:1d:
                    7f:29:da:7b:88:1c:92:ab:29:83:a5:dd:32:af:72:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DF:D2:E6:F9:75:99:A9:23:02:BD:04:22:BD:E0:E4:10:FF:26:B6
            X509v3 Authority Key Identifier:
                keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:c9:fe:f8:63:0e:2d:f4:26:9d:f2:bb:87:3b:06:f6:e3:
         95:2f:91:5e:1d:88:c8:aa:40:87:99:94:a6:e0:07:cc:05:d8:
         72:6e:05:18:bc:6d:69:6e:ca:26:82:01:d3:cb:d4:e5:b5:96:
         4e:f3:91:4f:c9:89:d5:7a:fc:65:bf:f7:62:e7:79:7e:22:86:
         bf:b0:c7:92:20:08:19:2e:18:22:42:39:6d:a8:95:b0:f0:69:
         72:1b:c3:be:49:db:9c:03:48:bd:a1:eb:b7:82:0b:6b:ca:d0:
         26:a9:1f:38:bd:54:ae:b6:51:f1:a2:59:0b:e5:85:e3:6c:e9:
         91:aa:49:18:e0:10:7d:f4:65:82:dd:a2:5b:d1:63:7b:88:19:
         c6:bb:bd:bb:57:59:62:67:9a:a9:8f:31:eb:07:af:01:f2:85:
         49:1f:be:f0:3e:f9:38:a8:c2:ae:86:47:33:46:7d:90:35:3a:
         f2:0c:a6:d5:93:7d:de:a1:56:dd:41:1a:cd:a7:3f:3a:30:f2:
         fb:2c:ba:79:b4:5f:e0:a8:97:54:4d:f9:42:ac:02:b8:d5:c6:
         02:16:0c:f7:ec:c4:16:df:ce:27:ef:5a:12:af:47:b7:ae:80:
         4a:82:0d:c8:5b:fb:b2:3e:6c:34:0e:89:e6:7d:7a:f4:2b:51:
         34:c3:b1:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE
Q0IwRTIzNkQwHhcNMjUxMjE4MTg1NjU4WhcNMjUxMjI1MTg1NjU4WjAYMRYwFAYD
VQQDDA02OTQ0NGU3Yi03MDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlTbM+T8e2Y6CWibyT9bw12jiiyeaM3sWEH1xQA4utTIsP44aZyhy1DSZ1+Oy
oAJoERS3Y9dAiCceQs4ZZtKSYhARW/wLTQO2f7dV52GNTrxXf3e5MSskH8QZS3ms
ljG+m/e29zO9t0DVRS/00bIgQMLDRUDzgQ0se/FtZVdiJirC4awHrPB3TQaQ+xFx
KXiqdPySzqokdDcC6TG/GSYoNY4S35da9bgoagwGHegf9M52TcZZvn2wfLP0q0Kd
BOJmS9qRXgZ0JgF+hzklUbP/FYlTeVDcDNtXmQzDc22IIX1mUjyfzOQ23n4uXG2c
XR1/Kdp7iBySqymDpd0yr3KXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDf0ub5
dZmpIwK9BCK94OQQ/ya2MB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy
RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTcyNi82REJGQTM4QTUyRDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVr
UDhzdm1RVzhVZHZjc09JMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZHMn++GMOLfQmnfK7hzsG9uOVL5FeHYjIqkCHmZSm4AfMBdhybgUY
vG1pbsomggHTy9TltZZO85FPyYnVevxlv/di53l+Ioa/sMeSIAgZLhgiQjltqJWw
8GlyG8O+SducA0i9oeu3ggtrytAmqR84vVSutlHxolkL5YXjbOmRqkkY4BB99GWC
3aJb0WN7iBnGu727V1liZ5qpjzHrB68B8oVJH77wPvk4qMKuhkczRn2QNTryDKbV
k33eoVbdQRrNpz86MPL7LLp5tF/gqJdUTflCrAK41cYCFgz37MQW384n71oSr0e3
roBKgg3IW/uyPmw0DonmfXr0K1E0w7Hq
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:57:35 2025 by rpki-client