This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File:                     RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier:          WjiCEy7/mIUvVSzzRfTs7e5ASSXg6VmZSpaYCO6scZM=
Subject key identifier:   5F:F8:0B:9A:C2:DA:CB:5D:F0:A5:49:D5:22:7D:E8:F9:B7:1B:5E:E5
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number:          01CE
Signing time:             Tue 23 Dec 2025 01:54:32 +0000
Manifest this update:     Tue 23 Dec 2025 01:54:32 +0000
Manifest next update:     Tue 30 Dec 2025 01:54:32 +0000
Files and hashes:         1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: JMLkK44o4v4Iu8cJnB1YMvCJAiEnu3/TthidhHYVr4w=)
                          2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: XnWp92AmTPtSu6Jzs1H6oYDA0Jzt4kFyQDKDMllH+MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Dec 23 01:54:32 2025 GMT
            Not After : Dec 30 01:54:32 2025 GMT
        Subject: CN=6949f658-d69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:16:96:5f:15:e3:28:fd:bb:e5:dd:02:62:
                    ac:7a:6e:9a:8b:c1:4b:1a:07:90:8b:cb:84:f4:be:
                    03:20:5d:df:fe:34:4a:0e:c5:d7:d6:b2:2b:af:f7:
                    d5:b1:97:4a:ff:3e:25:4c:25:89:7e:a9:10:a6:ef:
                    bc:7e:fe:4b:8a:bf:d5:08:4d:a5:62:e9:5b:5e:89:
                    c6:ec:1f:c7:0c:9a:32:68:c7:6d:c1:e6:06:f2:6d:
                    e1:34:bf:79:7c:54:fe:b4:0a:2e:40:e7:23:f0:e5:
                    73:54:f0:7d:6d:33:d4:67:78:25:8d:b2:4d:48:dc:
                    8a:3a:ab:b9:9d:37:73:74:37:f4:97:00:63:34:7b:
                    86:a8:ec:e4:ad:2f:e5:a9:4b:13:18:a8:f0:42:02:
                    75:66:1d:3f:61:03:7c:e2:9c:86:fc:a7:4d:e7:6c:
                    c0:ba:44:c1:5e:f6:24:66:95:6f:55:98:6c:a6:4e:
                    61:f4:1e:13:45:7f:8b:17:2e:01:d2:ed:ea:99:7a:
                    cd:42:83:3e:fa:22:7d:9a:87:fb:95:b0:15:70:1b:
                    5f:10:d9:cc:9b:ea:d2:0f:da:31:72:b2:76:bd:71:
                    ec:c4:04:c0:11:28:8f:51:1e:b8:fa:94:53:b7:6b:
                    ca:aa:c2:6d:a6:85:4a:cf:91:5d:80:95:d4:7a:75:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F8:0B:9A:C2:DA:CB:5D:F0:A5:49:D5:22:7D:E8:F9:B7:1B:5E:E5
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:c0:d8:b0:79:4d:3d:71:28:44:8d:a2:9f:f6:58:b5:96:
         75:c6:94:0d:4a:1e:8e:63:36:e1:d2:52:a0:8c:b0:d2:75:03:
         6b:6f:18:03:73:a7:a7:33:ec:37:48:03:03:ab:f0:8d:8d:a0:
         1d:21:ff:04:fb:1a:d7:cc:ec:7e:78:a1:75:02:b1:db:1a:87:
         f8:f9:b7:2d:9b:1e:fd:12:10:35:3a:3a:24:60:25:b3:48:c9:
         a1:cb:2a:a0:b0:86:d3:f5:a3:1f:c7:e5:5d:2e:96:6c:da:42:
         aa:2c:ab:b3:25:65:76:da:30:03:71:7c:cd:8e:7d:d7:1d:ce:
         ce:27:7b:de:60:10:50:28:f8:7d:4b:cf:a1:2d:34:bd:de:0d:
         cb:22:82:e1:f0:65:0d:8f:c0:78:58:df:f2:3a:ab:eb:76:fd:
         64:64:8a:30:55:0c:46:ac:15:5c:e6:fe:d1:6f:9a:6a:9e:15:
         c8:90:fb:c0:c1:62:fd:30:c7:66:43:c3:f0:48:5f:c6:3a:b2:
         60:18:11:7e:8f:10:f7:a4:7b:85:ba:59:7f:2d:01:97:71:6e:
         36:6c:20:ba:87:08:c6:61:b1:f1:30:66:29:31:41:dc:79:6f:
         90:30:1a:de:bf:a0:9a:3b:f9:c3:44:ce:f4:24:c1:18:de:df:
         66:39:5b:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYwMDQxMTAvBgNVBAUTKDQ0NEVCNzUzNTRDMzcwNkUzOURFQTA4RkU5NTA0NENE
MjY2M0Q2QUUwHhcNMjUxMjIzMDE1NDMyWhcNMjUxMjMwMDE1NDMyWjAYMRYwFAYD
VQQDDA02OTQ5ZjY1OC1kNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbwWll8V4yj9u+XdAmKsem6ai8FLGgeQi8uE9L4DIF3f/jRKDsXX1rIrr/fV
sZdK/z4lTCWJfqkQpu+8fv5Lir/VCE2lYulbXonG7B/HDJoyaMdtweYG8m3hNL95
fFT+tAouQOcj8OVzVPB9bTPUZ3gljbJNSNyKOqu5nTdzdDf0lwBjNHuGqOzkrS/l
qUsTGKjwQgJ1Zh0/YQN84pyG/KdN52zAukTBXvYkZpVvVZhspk5h9B4TRX+LFy4B
0u3qmXrNQoM++iJ9mof7lbAVcBtfENnMm+rSD9oxcrJ2vXHsxATAESiPUR64+pRT
t2vKqsJtpoVKz5FdgJXUenX1VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/4C5rC
2std8KVJ1SJ96Pm3G17lMB8GA1UdIwQYMBaAFEROt1NUw3BuOd6gj+lQRM0mY9au
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjAwNC8yMDFGNjg2MDFF
RjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNHNDUzcUNQNlZCRXpTWmox
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFNjNVMVREY0c0NTNxQ1A2VkJFelNaajFxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjAwNC8yMDFGNjg2MDFFRjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNH
NDUzcUNQNlZCRXpTWmoxcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOAcDYsHlNPXEoRI2in/ZYtZZ1xpQNSh6OYzbh0lKgjLDSdQNrbxgD
c6enM+w3SAMDq/CNjaAdIf8E+xrXzOx+eKF1ArHbGof4+bctmx79EhA1OjokYCWz
SMmhyyqgsIbT9aMfx+VdLpZs2kKqLKuzJWV22jADcXzNjn3XHc7OJ3veYBBQKPh9
S8+hLTS93g3LIoLh8GUNj8B4WN/yOqvrdv1kZIowVQxGrBVc5v7Rb5pqnhXIkPvA
wWL9MMdmQ8PwSF/GOrJgGBF+jxD3pHuFull/LQGXcW42bCC6hwjGYbHxMGYpMUHc
eW+QMBrev6CaO/nDRM70JMEY3t9mOVs7
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:52:03 2025 by rpki-client