This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
File:                     Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json)
Hash identifier:          4LRn7I3bZwgqYJcG/1XxF/WhZ2vJSM4pSGoOlCSeTg0=
Subject key identifier:   F4:79:89:9A:54:0C:A8:5C:4F:FD:93:93:86:FD:C5:D5:28:DD:41:FA
Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC
Certificate issuer:       /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
Certificate serial:       0877
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
Manifest number:          0871
Signing time:             Thu 18 Dec 2025 20:07:13 +0000
Manifest this update:     Thu 18 Dec 2025 20:07:12 +0000
Manifest next update:     Thu 25 Dec 2025 20:07:12 +0000
Files and hashes:         1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: vH6KJ1wr13ieH2uxjwhAvP7daho2ff9qVbdU86nVLqk=)
                          2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl
                          rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
        Validity
            Not Before: Dec 18 20:07:12 2025 GMT
            Not After : Dec 25 20:07:12 2025 GMT
        Subject: CN=69445ef1-041c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:a9:b9:19:43:83:44:e7:bf:a9:ba:b1:fc:
                    db:0e:11:76:b4:3d:2e:17:e7:67:96:68:c6:fc:6d:
                    41:62:76:03:c1:d3:04:df:6e:29:53:be:b1:f5:b8:
                    2a:c0:12:5f:ea:a9:05:98:52:a6:1b:10:96:75:77:
                    41:91:d5:dd:ec:ba:7e:04:17:11:39:c3:66:db:17:
                    4a:a8:8b:5e:61:31:e8:d1:5a:4c:f7:b8:85:74:7d:
                    3a:59:4d:5b:e1:a3:0d:1a:22:60:f5:f5:1c:d3:67:
                    37:7c:ac:bc:6e:f0:26:32:aa:a4:30:c8:22:7a:2e:
                    82:cd:f4:e8:20:95:63:38:00:6f:bd:d4:3d:11:51:
                    87:5e:cb:d5:e2:cf:6e:4b:9e:ec:b2:0b:3d:02:a9:
                    e8:00:6f:b5:4c:e2:b5:7a:2d:5b:6f:54:53:b2:33:
                    5c:6b:0e:4e:d5:4a:86:2c:7e:9a:a1:90:09:66:3e:
                    f2:ee:64:b9:82:20:9e:56:4f:94:92:8e:60:ee:3e:
                    2c:0a:65:54:12:1c:f2:4c:f8:3a:dc:3b:b3:df:43:
                    96:64:de:e1:bb:0e:fd:c0:75:8f:cf:22:76:bd:09:
                    d9:29:9a:35:ec:b7:67:9e:f0:e5:a5:63:37:23:95:
                    5b:97:29:f1:a9:03:99:4c:85:5f:85:dc:02:ce:66:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:79:89:9A:54:0C:A8:5C:4F:FD:93:93:86:FD:C5:D5:28:DD:41:FA
            X509v3 Authority Key Identifier:
                keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:42:e8:db:fa:fc:5c:ea:7d:a3:5a:44:86:f2:d4:ac:1d:
         f8:a3:c5:db:5a:1d:ff:76:3f:7b:f4:69:bd:85:75:5f:4b:08:
         c6:ee:88:a4:a7:d8:68:b4:8b:d9:35:72:0c:8a:e4:6e:77:dd:
         fe:39:53:dc:d5:ad:67:d1:97:52:f3:fd:1d:ad:e2:f4:41:80:
         75:35:51:3f:4f:19:e6:d2:76:2d:19:d2:fc:60:0d:e1:2c:e2:
         6f:fa:5d:62:f8:5d:42:bd:fe:49:27:7a:c0:fc:a6:04:cb:d6:
         17:4a:a8:93:19:2a:43:38:b3:52:78:a0:ad:46:0e:0b:ae:4d:
         31:6e:50:fb:9f:99:07:86:75:3a:bf:7a:91:49:b8:3a:9a:91:
         7f:93:09:c8:e3:ce:93:09:9c:13:d1:95:a4:81:9e:4a:98:66:
         81:23:49:3a:d1:55:cc:0b:7d:04:c0:9b:fe:ed:70:cf:34:90:
         bd:bf:01:d3:8f:b5:d3:07:90:13:2c:57:69:f6:e8:be:10:14:
         36:e1:9c:34:e4:6d:ac:e1:1a:28:ef:3d:b0:9a:55:9c:90:5d:
         9b:55:24:f6:10:85:61:4b:1f:32:4d:36:86:ea:67:6c:8b:be:
         69:ec:0f:c1:30:71:30:b0:28:28:a4:f9:b6:97:ab:d3:fe:5f:
         cd:bc:95:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw
OTlENTQ3Q0MwHhcNMjUxMjE4MjAwNzEyWhcNMjUxMjI1MjAwNzEyWjAYMRYwFAYD
VQQDDA02OTQ0NWVmMS0wNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/WpuRlDg0Tnv6m6sfzbDhF2tD0uF+dnlmjG/G1BYnYDwdME324pU76x9bgq
wBJf6qkFmFKmGxCWdXdBkdXd7Lp+BBcROcNm2xdKqIteYTHo0VpM97iFdH06WU1b
4aMNGiJg9fUc02c3fKy8bvAmMqqkMMgiei6CzfToIJVjOABvvdQ9EVGHXsvV4s9u
S57ssgs9AqnoAG+1TOK1ei1bb1RTsjNcaw5O1UqGLH6aoZAJZj7y7mS5giCeVk+U
ko5g7j4sCmVUEhzyTPg63Duz30OWZN7huw79wHWPzyJ2vQnZKZo17LdnnvDlpWM3
I5VblynxqQOZTIVfhdwCzmb6rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR5iZpU
DKhcT/2Tk4b9xdUo3UH6MB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC
QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr
STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIVkLo2/r8XOp9o1pEhvLUrB34o8XbWh3/dj979Gm9hXVfSwjG7oik
p9hotIvZNXIMiuRud93+OVPc1a1n0ZdS8/0dreL0QYB1NVE/Txnm0nYtGdL8YA3h
LOJv+l1i+F1Cvf5JJ3rA/KYEy9YXSqiTGSpDOLNSeKCtRg4Lrk0xblD7n5kHhnU6
v3qRSbg6mpF/kwnI486TCZwT0ZWkgZ5KmGaBI0k60VXMC30EwJv+7XDPNJC9vwHT
j7XTB5ATLFdp9ui+EBQ24Zw05G2s4Roo7z2wmlWckF2bVST2EIVhSx8yTTaG6mds
i75p7A/BMHEwsCgopPm2l6vT/l/NvJWV
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:09 2025 by rpki-client