This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
File:                     15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json)
Hash identifier:          O8CkKFhtqe8sUdrt3mGYwLsbLo1Ustl5Xm+/rm+dkjs=
Subject key identifier:   C3:DE:E4:0C:09:0D:3E:A7:C5:97:9C:B9:97:AD:EB:59:09:AA:D8:6E
Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4
Certificate issuer:       /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
Manifest number:          EA
Signing time:             Fri 19 Dec 2025 04:29:00 +0000
Manifest this update:     Fri 19 Dec 2025 04:29:00 +0000
Manifest next update:     Fri 26 Dec 2025 04:29:00 +0000
Files and hashes:         1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: KFnzh6lhcTv0f2DG3CwJMykN5Wava6C1j/WHm23qJeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
        Validity
            Not Before: Dec 19 04:29:00 2025 GMT
            Not After : Dec 26 04:29:00 2025 GMT
        Subject: CN=6944d48c-4b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:4b:06:18:81:e0:4a:9c:3f:e4:29:c9:98:
                    70:c2:7c:b2:d2:b8:b0:25:1b:85:c3:71:09:5b:b0:
                    55:69:67:8f:b4:47:67:50:4b:0c:32:67:9e:92:fd:
                    60:22:fb:c1:f7:9f:0d:a6:3d:57:64:3d:e1:cb:39:
                    7c:8d:bb:ae:e6:d5:a3:a9:e7:b7:b4:bc:c6:d1:03:
                    b6:e4:81:ee:5e:f9:e2:c3:36:9b:25:e4:82:4b:d3:
                    d5:4b:31:a7:38:30:a1:3b:20:37:50:1c:e0:e6:cf:
                    b2:e7:18:99:b8:14:cd:6c:9e:e8:b9:eb:1f:09:c0:
                    7c:ef:47:b9:90:50:08:8a:98:85:b9:c8:49:c0:69:
                    16:ef:8f:a3:2a:6d:11:fa:aa:1c:10:14:29:46:e8:
                    83:49:e9:82:7a:b0:dc:05:6b:2a:54:5c:98:21:0d:
                    fa:c5:27:ea:20:e3:42:fc:99:b8:ea:6b:c9:27:e6:
                    3f:5e:1a:49:01:59:d6:c7:87:48:fa:18:ea:c3:07:
                    68:df:20:76:38:2d:ee:6a:c3:94:df:6b:61:a9:e9:
                    77:df:9c:84:61:1c:c4:da:95:2b:78:9f:cb:03:1f:
                    0c:31:3a:76:39:8e:55:c5:f4:68:a4:b0:17:93:0a:
                    53:1d:94:30:43:42:10:55:83:0a:07:8c:ba:76:ed:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DE:E4:0C:09:0D:3E:A7:C5:97:9C:B9:97:AD:EB:59:09:AA:D8:6E
            X509v3 Authority Key Identifier:
                keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:34:e8:fd:92:8a:a3:e9:89:93:11:3b:68:5a:5c:e8:63:
         a9:12:8b:dc:01:a1:58:cc:03:52:a6:5c:9a:18:6b:35:a8:ae:
         03:95:e3:61:47:c8:f6:1a:ad:80:df:5c:ec:f2:6d:86:57:6a:
         61:4b:63:b2:79:9b:00:3f:fa:92:3d:57:68:2f:c9:ac:ea:36:
         0f:86:b9:60:f8:4f:23:d9:33:33:5d:fc:5d:96:13:14:16:99:
         88:73:bd:81:45:6e:f8:99:8b:5d:3a:f0:d9:b0:2d:de:2c:0c:
         b0:01:dc:9b:c0:cf:3d:cc:7c:ba:0c:ff:59:8e:ed:09:45:6e:
         f2:da:fb:c3:83:e2:39:22:83:d8:d9:ef:b5:12:b2:c5:dc:aa:
         bd:89:04:d7:49:f5:99:09:32:88:95:7c:4b:0a:96:8b:0b:56:
         d0:6a:00:b3:81:5a:32:5a:2f:31:75:2d:e0:1f:2a:65:d8:42:
         9f:dd:e3:e7:34:e9:70:a8:84:ca:68:ba:c2:cb:e6:bb:c5:b0:
         95:95:d8:47:61:32:45:8f:a9:92:03:ac:37:00:9e:16:84:1b:
         b0:93:2e:a9:a5:bc:78:cf:f1:20:74:20:a3:f6:b5:1a:91:af:
         3e:72:75:25:d5:18:9d:c1:3d:95:7f:44:61:7c:07:81:c9:2d:
         87:5c:73:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVEMDRFRTUyOTIw
RTkwQjdBQzQwHhcNMjUxMjE5MDQyOTAwWhcNMjUxMjI2MDQyOTAwWjAYMRYwFAYD
VQQDDA02OTQ0ZDQ4Yy00YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkbdLBhiB4EqcP+QpyZhwwnyy0riwJRuFw3EJW7BVaWePtEdnUEsMMmeekv1g
IvvB958Npj1XZD3hyzl8jbuu5tWjqee3tLzG0QO25IHuXvniwzabJeSCS9PVSzGn
ODChOyA3UBzg5s+y5xiZuBTNbJ7ouesfCcB870e5kFAIipiFuchJwGkW74+jKm0R
+qocEBQpRuiDSemCerDcBWsqVFyYIQ36xSfqIONC/Jm46mvJJ+Y/XhpJAVnWx4dI
+hjqwwdo3yB2OC3uasOU32thqel335yEYRzE2pUreJ/LAx8MMTp2OY5VxfRopLAX
kwpTHZQwQ0IQVYMKB4y6du3Z0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPe5AwJ
DT6nxZecuZet61kJqthuMB8GA1UdIwQYMBaAFNeb/YObnQ4J0EBe0E7lKSDpC3rE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BRjg4NUY2Njcz
RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERnblFRRjdRVHVVcElPa0xl
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERn
blFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6AzTo/ZKKo+mJkxE7aFpc6GOpEovcAaFYzANSplyaGGs1qK4DleNh
R8j2Gq2A31zs8m2GV2phS2OyeZsAP/qSPVdoL8ms6jYPhrlg+E8j2TMzXfxdlhMU
FpmIc72BRW74mYtdOvDZsC3eLAywAdybwM89zHy6DP9Zju0JRW7y2vvDg+I5IoPY
2e+1ErLF3Kq9iQTXSfWZCTKIlXxLCpaLC1bQagCzgVoyWi8xdS3gHypl2EKf3ePn
NOlwqITKaLrCy+a7xbCVldhHYTJFj6mSA6w3AJ4WhBuwky6ppbx4z/EgdCCj9rUa
ka8+cnUl1RidwT2Vf0RhfAeByS2HXHOQ
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:43 2025 by rpki-client