This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
File:                     MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft (raw, json)
Hash identifier:          xBW9sKqz6KOjQmqIaFEl60HobwwI8ToHdAWurMoEK6o=
Subject key identifier:   F1:97:1C:85:0C:DC:2E:7F:B5:E6:19:6E:C1:35:62:3E:BB:39:44:44
Authority key identifier: 31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5
Certificate issuer:       /CN=A918337F/serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
Certificate serial:       2748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
Manifest number:          2727
Signing time:             Thu 18 Dec 2025 15:35:56 +0000
Manifest this update:     Thu 18 Dec 2025 15:35:56 +0000
Manifest next update:     Thu 25 Dec 2025 15:35:56 +0000
Files and hashes:         1: MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl (hash: 1o2g5TPFhO34ro5kZIw85NLRqwNvstKHWnixf4UKWXw=)
                          2: 783D3BDABCE011EA81F10855C4F9AE02.roa (hash: DAi7XHb5iPgy6jmEfDMNPj813+qw6g8bFNaplUoWq+0=)
                          3: EC9B786E9D8811EB80D73886C4F9AE02.roa (hash: KTBWDh6bIJ/cDfWyxQBynd9/3uuoZ/l6tAvGlwlZJZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl
                          rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10056 (0x2748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918337F, serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
        Validity
            Not Before: Dec 18 15:35:56 2025 GMT
            Not After : Dec 25 15:35:56 2025 GMT
        Subject: CN=69441f5c-ce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:f6:d9:3b:12:17:30:78:5a:d7:45:4a:18:
                    46:64:96:0f:79:6e:52:b4:50:67:31:93:3c:78:e5:
                    24:f8:bb:11:3c:60:10:c2:43:26:ca:d1:2b:f8:aa:
                    a1:f9:ff:ad:c1:1a:ca:53:cd:65:ce:41:ab:d5:51:
                    d3:f4:e3:13:96:75:ff:6d:09:9f:c2:f9:15:56:cf:
                    ec:e9:57:1b:6e:13:73:10:39:3d:b6:5a:84:77:c6:
                    26:89:14:51:08:49:98:04:99:c7:9a:06:8c:a1:59:
                    1a:ae:a9:e2:aa:ec:e2:b3:6c:40:4d:4b:55:bc:dd:
                    61:36:63:8b:bd:d9:4e:7c:14:09:63:e7:01:e7:77:
                    49:96:0a:77:df:a2:01:e3:36:f6:d2:28:91:5e:be:
                    cd:e7:db:c4:d5:07:f0:19:16:0f:7f:1a:ac:69:7a:
                    a6:38:0d:88:bf:f1:99:f6:08:ac:1f:44:6b:90:07:
                    ca:dc:ce:68:d4:f3:ed:3c:8e:ca:f5:23:d2:a4:80:
                    b4:92:62:69:26:ea:20:48:94:22:ba:8e:3d:e9:54:
                    7e:92:a5:a2:e8:f9:ed:81:0c:a9:b4:51:8c:a2:c0:
                    4d:01:9b:2d:9c:5f:c3:f3:13:a9:36:4c:e9:b1:78:
                    d4:74:96:de:31:03:97:25:3c:4e:72:79:40:e5:69:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:97:1C:85:0C:DC:2E:7F:B5:E6:19:6E:C1:35:62:3E:BB:39:44:44
            X509v3 Authority Key Identifier:
                keyid:31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ee:49:1d:4b:78:0e:1c:b4:d4:83:c3:4f:f6:01:0d:76:e5:
         d8:b3:91:25:90:2d:5b:12:95:2c:55:d5:eb:cb:64:1c:13:b1:
         2b:1f:9d:ce:16:06:72:ff:45:31:5a:71:6d:7f:33:df:fe:52:
         96:42:97:ca:8e:0e:fa:0d:04:2a:6b:00:52:6d:d0:c0:68:9d:
         1c:36:ec:1a:06:83:e1:e8:33:6c:51:78:78:2a:60:29:f6:3c:
         fe:e4:77:b8:80:b5:e8:bd:39:dd:25:83:b8:c8:67:2a:10:8b:
         c1:28:a4:3b:a9:74:0a:30:8f:41:fb:07:3d:a7:a4:05:77:1a:
         35:78:fb:0d:48:43:db:16:ac:91:a0:eb:0e:ca:e8:b7:90:ab:
         42:16:17:ce:60:3f:cb:e7:7b:ad:64:a4:5d:ec:96:c7:f0:84:
         98:5d:62:a6:9a:eb:eb:e8:d6:c2:ba:da:2c:a1:3f:dc:0a:f8:
         62:f4:bb:b9:41:ad:be:77:e2:54:c9:2a:82:29:11:70:30:de:
         a7:c0:ca:43:f1:4d:2c:76:62:cf:16:ed:64:d3:d6:19:36:f9:
         7d:7c:8d:1f:08:3f:e8:84:77:8f:64:f9:db:08:78:e3:78:22:
         b1:3e:df:2f:00:85:38:05:cb:4f:06:18:ef:ff:5c:24:5a:98:
         62:1d:01:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMzN0YxMTAvBgNVBAUTKDMxRTdCMTBGNzE4QjExODlBMDMxOUQ2NDQ3RTEzRjZD
NDY0MDdBQTUwHhcNMjUxMjE4MTUzNTU2WhcNMjUxMjI1MTUzNTU2WjAYMRYwFAYD
VQQDDA02OTQ0MWY1Yy1jZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn4X22TsSFzB4WtdFShhGZJYPeW5StFBnMZM8eOUk+LsRPGAQwkMmytEr+Kqh
+f+twRrKU81lzkGr1VHT9OMTlnX/bQmfwvkVVs/s6VcbbhNzEDk9tlqEd8YmiRRR
CEmYBJnHmgaMoVkarqniquzis2xATUtVvN1hNmOLvdlOfBQJY+cB53dJlgp336IB
4zb20iiRXr7N59vE1QfwGRYPfxqsaXqmOA2Iv/GZ9gisH0RrkAfK3M5o1PPtPI7K
9SPSpIC0kmJpJuogSJQiuo496VR+kqWi6PntgQyptFGMosBNAZstnF/D8xOpNkzp
sXjUdJbeMQOXJTxOcnlA5WkNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGXHIUM
3C5/teYZbsE1Yj67OUREMB8GA1UdIwQYMBaAFDHnsQ9xixGJoDGdZEfhP2xGQHql
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzM3Ri80NjhFRjcyNkQ2
QUYxMUU0QjM3MTcxNDFDNEY5QUUwMi9NZWV4RDNHTEVZbWdNWjFrUi1FX2JFWkFl
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01lZXhEM0dMRVltZ01aMWtSLUVfYkVaQWVxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzM3Ri80NjhFRjcyNkQ2QUYxMUU0QjM3MTcxNDFDNEY5QUUwMi9NZWV4RDNHTEVZ
bWdNWjFrUi1FX2JFWkFlcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAx7kkdS3gOHLTUg8NP9gENduXYs5ElkC1bEpUsVdXry2QcE7ErH53O
FgZy/0UxWnFtfzPf/lKWQpfKjg76DQQqawBSbdDAaJ0cNuwaBoPh6DNsUXh4KmAp
9jz+5He4gLXovTndJYO4yGcqEIvBKKQ7qXQKMI9B+wc9p6QFdxo1ePsNSEPbFqyR
oOsOyui3kKtCFhfOYD/L53utZKRd7JbH8ISYXWKmmuvr6NbCutosoT/cCvhi9Lu5
Qa2+d+JUySqCKRFwMN6nwMpD8U0sdmLPFu1k09YZNvl9fI0fCD/ohHePZPnbCHjj
eCKxPt8vAIU4BctPBhjv/1wkWphiHQH8
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:33 2025 by rpki-client