This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File:                     bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier:          iLbVNKdMIfkyIsTszZZL/bijBWYacu48JvewO6Cfup4=
Subject key identifier:   40:E3:07:57:8E:AE:EF:3B:80:FC:BE:C8:16:9F:DC:AF:2C:48:18:F1
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       13F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number:          13CD
Signing time:             Sat 20 Dec 2025 16:43:13 +0000
Manifest this update:     Sat 20 Dec 2025 16:43:12 +0000
Manifest next update:     Sat 27 Dec 2025 16:43:12 +0000
Files and hashes:         1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: u8/l0DvTJzgP450k5IWOrtOQ80UZv/Oh4hwb5fkomzQ=)
                          2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: UjuTxiRAP/X58Z72XiuqvHNz63YuSaMMCGvUPVkyPaA=)
                          3: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: DcZGy4PWZzTwOUNtpL1rLlMb1gqaFihjq3bAlb0Tfo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5112 (0x13f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Dec 20 16:43:12 2025 GMT
            Not After : Dec 27 16:43:12 2025 GMT
        Subject: CN=6946d221-5700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:f5:1c:05:a0:75:6c:cd:ba:58:ad:94:38:
                    d4:0c:63:d1:3c:71:bc:58:1b:2b:02:2e:ea:46:71:
                    3c:52:a9:77:67:0e:e0:a2:5a:2b:0e:55:6c:9a:65:
                    fc:54:d8:a3:87:4d:d9:93:56:d9:66:37:02:f1:6a:
                    b9:50:ef:bf:c7:19:da:bb:59:29:31:f2:42:ec:ad:
                    67:b1:89:67:a2:ee:44:b6:c4:b3:8f:94:9e:ba:56:
                    0d:7d:ba:d1:1a:b4:e6:7f:82:20:c7:af:2f:03:f7:
                    7d:b5:e0:81:7a:da:6f:94:65:98:07:5a:1d:42:37:
                    a2:0b:22:41:1f:f4:0d:8d:ce:6f:65:98:cb:ea:42:
                    07:91:bc:af:09:f7:79:6b:3d:bd:22:03:40:bc:89:
                    09:5c:65:de:28:f0:ff:fc:92:4e:35:ee:27:a4:62:
                    ed:cd:96:b7:bc:4a:55:7c:1b:25:bd:7a:4e:c6:85:
                    24:20:00:e7:62:a1:92:0f:d8:05:cc:e9:4e:a3:a1:
                    c9:d0:be:8c:06:59:57:aa:d8:34:13:b9:6f:5a:2b:
                    ed:03:11:07:1c:f4:b1:f6:4f:a8:a5:03:8e:f2:b5:
                    0e:68:15:32:13:5b:b3:5b:4f:3d:08:19:8f:f7:79:
                    0c:0c:1c:c8:ab:c2:90:e9:e1:a5:1b:63:63:22:ee:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E3:07:57:8E:AE:EF:3B:80:FC:BE:C8:16:9F:DC:AF:2C:48:18:F1
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:13:c2:8e:15:1c:00:e4:40:ea:ee:d1:ae:67:12:8e:d3:4e:
         88:36:ab:50:31:0d:61:47:51:44:d7:b4:42:cd:2d:9b:06:a1:
         e0:d3:f7:45:f4:2c:24:80:6d:bb:3b:ad:23:97:b4:ab:48:0f:
         98:e2:d0:08:d1:78:25:93:04:e5:3c:4a:12:e9:1c:b1:a4:a5:
         97:3d:f3:84:e2:35:25:7d:64:23:91:b8:50:d7:29:ae:b6:af:
         f4:47:63:82:d1:fa:f6:4b:ab:41:0b:14:de:11:b8:fd:b8:e3:
         69:e5:46:50:3c:02:2e:3f:d3:b7:88:9e:41:1d:01:50:80:4d:
         f8:88:19:b7:b9:30:be:4f:81:e8:6f:b5:90:02:92:df:83:5c:
         e1:66:de:ae:bc:00:32:23:b4:05:45:3f:8c:13:7f:76:6f:c8:
         02:00:9d:95:77:a3:6b:5c:69:22:83:50:d6:3f:e9:34:7f:01:
         73:5e:ff:e6:38:a8:ce:97:b0:eb:ad:7a:cd:81:03:a6:79:20:
         c3:af:d9:4e:24:c2:4f:7c:be:91:bd:88:df:98:52:88:87:51:
         b4:d4:ba:84:34:f2:36:2c:94:d0:f2:32:3f:3f:c3:61:5a:50:
         2f:50:46:c1:54:7f:f4:2a:6b:d9:9e:8c:5b:a8:5f:23:49:1c:
         61:92:1b:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG
MDNBNjA1QzMwHhcNMjUxMjIwMTY0MzEyWhcNMjUxMjI3MTY0MzEyWjAYMRYwFAYD
VQQDDA02OTQ2ZDIyMS01NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjbT1HAWgdWzNulitlDjUDGPRPHG8WBsrAi7qRnE8Uql3Zw7golorDlVsmmX8
VNijh03Zk1bZZjcC8Wq5UO+/xxnau1kpMfJC7K1nsYlnou5EtsSzj5SeulYNfbrR
GrTmf4Igx68vA/d9teCBetpvlGWYB1odQjeiCyJBH/QNjc5vZZjL6kIHkbyvCfd5
az29IgNAvIkJXGXeKPD//JJONe4npGLtzZa3vEpVfBslvXpOxoUkIADnYqGSD9gF
zOlOo6HJ0L6MBllXqtg0E7lvWivtAxEHHPSx9k+opQOO8rUOaBUyE1uzW089CBmP
93kMDBzIq8KQ6eGlG2NjIu7HcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDjB1eO
ru87gPy+yBaf3K8sSBjxMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3
NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm
TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtE8KOFRwA5EDq7tGuZxKO006INqtQMQ1hR1FE17RCzS2bBqHg0/dF
9CwkgG27O60jl7SrSA+Y4tAI0XglkwTlPEoS6RyxpKWXPfOE4jUlfWQjkbhQ1ymu
tq/0R2OC0fr2S6tBCxTeEbj9uONp5UZQPAIuP9O3iJ5BHQFQgE34iBm3uTC+T4Ho
b7WQApLfg1zhZt6uvAAyI7QFRT+ME392b8gCAJ2Vd6NrXGkig1DWP+k0fwFzXv/m
OKjOl7DrrXrNgQOmeSDDr9lOJMJPfL6RvYjfmFKIh1G01LqENPI2LJTQ8jI/P8Nh
WlAvUEbBVH/0KmvZnoxbqF8jSRxhkhtz
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:16:13 2025 by rpki-client