This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
File:                     t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json)
Hash identifier:          kLrC1cnn6s8lXqprj/SOV7yoz/bXimO9DRdhk2/4sqU=
Subject key identifier:   D6:53:F3:A9:67:B7:96:D6:C8:0A:96:52:29:13:79:57:FA:C7:3B:D3
Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
Certificate issuer:       /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Certificate serial:       089F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
Manifest number:          0890
Signing time:             Fri 26 Dec 2025 19:54:50 +0000
Manifest this update:     Fri 26 Dec 2025 19:54:50 +0000
Manifest next update:     Fri 02 Jan 2026 19:54:50 +0000
Files and hashes:         1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: Av++mqzFKOJg9mKUqWdZsv7iMX274oMHjBMrTk4paag=)
                          2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
                          rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
        Validity
            Not Before: Dec 26 19:54:50 2025 GMT
            Not After : Jan  2 19:54:50 2026 GMT
        Subject: CN=694ee80a-690d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:19:08:52:29:ca:be:3f:f5:71:cb:ba:c7:
                    94:36:63:fb:6c:b2:32:a3:06:e5:17:8e:9f:d1:1e:
                    02:ed:fe:49:94:9f:6c:6c:d7:c3:36:0e:f2:b5:84:
                    15:02:82:62:57:d8:f6:35:db:6d:d4:8d:de:f4:5c:
                    87:9a:de:6e:6a:ae:44:50:c0:f8:aa:58:e2:24:60:
                    6f:50:9a:0f:36:06:38:a8:15:2b:c6:29:58:3d:3f:
                    e8:a4:04:2b:37:83:40:18:53:60:08:d6:5c:88:49:
                    a5:99:17:80:4d:38:8d:d9:c5:c9:d3:b1:d0:6e:a8:
                    1a:0a:ef:81:7f:f6:ad:65:18:cf:f3:9d:ec:b6:e7:
                    4f:15:49:73:ef:30:70:72:f0:e5:8d:5f:b1:ef:95:
                    42:33:f4:b2:9a:5e:1a:42:6c:a4:ae:59:70:41:1e:
                    79:5b:56:7c:0b:bf:9b:e2:17:a7:26:72:ae:70:21:
                    52:c2:f1:7e:72:16:0e:6b:57:e8:74:58:fb:66:05:
                    48:4c:d6:04:4c:3a:1b:c7:8b:a5:88:c7:f4:25:05:
                    da:f2:e2:5c:fb:8c:e1:2a:92:58:b9:4b:43:51:77:
                    ad:42:21:d8:82:e5:d9:93:11:e4:7a:c9:f4:76:b9:
                    33:b8:5c:97:11:53:8d:86:92:3f:7b:85:95:c9:62:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:53:F3:A9:67:B7:96:D6:C8:0A:96:52:29:13:79:57:FA:C7:3B:D3
            X509v3 Authority Key Identifier:
                keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:4f:3f:bc:89:cb:b4:da:1b:12:38:a9:f5:90:fa:08:62:5c:
         52:51:4e:35:ee:22:41:ae:b4:2e:68:ed:3f:25:e8:1a:e3:48:
         54:16:8c:b7:2a:42:72:15:4c:56:80:06:0c:06:21:fc:01:85:
         aa:74:bb:a4:b5:56:04:f4:a2:53:46:fe:98:b9:27:be:a4:50:
         52:a5:26:c5:20:3c:d6:a8:10:64:d2:b7:73:44:e1:e6:b6:ec:
         14:25:04:c4:1f:6f:79:d7:0f:22:dd:87:45:65:86:6d:d1:99:
         93:1d:a8:23:77:92:91:7d:51:83:4b:2a:fc:f2:10:84:a2:c4:
         fd:37:9f:a2:66:2c:18:f0:61:60:57:1a:5f:65:12:dd:2d:4b:
         68:81:93:7c:95:96:3b:b2:9c:14:15:c2:7d:9d:d8:86:4c:30:
         3e:15:6b:51:db:4b:56:aa:3f:ee:39:b8:82:46:be:86:cb:bc:
         9b:cf:fb:ab:31:c9:04:1f:ac:fd:ca:8e:c4:4a:97:df:03:2b:
         c8:77:37:9e:45:ea:ee:82:0f:65:43:50:9f:23:62:f4:78:5e:
         7d:7d:11:b6:f1:fc:74:a2:17:f2:9a:d8:d8:1c:35:83:c0:81:
         e2:f1:d5:3a:72:2d:15:8e:79:5f:bb:77:fc:eb:e4:58:e7:e4:
         2a:97:e2:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2
MEE2Mzc5MEUwHhcNMjUxMjI2MTk1NDUwWhcNMjYwMTAyMTk1NDUwWjAYMRYwFAYD
VQQDDA02OTRlZTgwYS02OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HcZCFIpyr4/9XHLuseUNmP7bLIyowblF46f0R4C7f5JlJ9sbNfDNg7ytYQV
AoJiV9j2Ndtt1I3e9FyHmt5uaq5EUMD4qljiJGBvUJoPNgY4qBUrxilYPT/opAQr
N4NAGFNgCNZciEmlmReATTiN2cXJ07HQbqgaCu+Bf/atZRjP853studPFUlz7zBw
cvDljV+x75VCM/Syml4aQmykrllwQR55W1Z8C7+b4henJnKucCFSwvF+chYOa1fo
dFj7ZgVITNYETDobx4uliMf0JQXa8uJc+4zhKpJYuUtDUXetQiHYguXZkxHkesn0
drkzuFyXEVONhpI/e4WVyWIt0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZT86ln
t5bWyAqWUikTeVf6xzvTMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2
NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh
cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGTz+8icu02hsSOKn1kPoIYlxSUU417iJBrrQuaO0/Jega40hUFoy3
KkJyFUxWgAYMBiH8AYWqdLuktVYE9KJTRv6YuSe+pFBSpSbFIDzWqBBk0rdzROHm
tuwUJQTEH2951w8i3YdFZYZt0ZmTHagjd5KRfVGDSyr88hCEosT9N5+iZiwY8GFg
VxpfZRLdLUtogZN8lZY7spwUFcJ9ndiGTDA+FWtR20tWqj/uObiCRr6Gy7ybz/ur
MckEH6z9yo7ESpffAyvIdzeeRerugg9lQ1CfI2L0eF59fRG28fx0ohfymtjYHDWD
wIHi8dU6ci0Vjnlfu3f86+RY5+Qql+LO
-----END CERTIFICATE-----
Generated at Sat Dec 27 17:37:57 2025 by rpki-client