This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
File:                     A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json)
Hash identifier:          YH8pLOCx+P+vx0XLTnuf1yHQb9UGDzYTsj3WSU0AemI=
Subject key identifier:   20:0D:CB:4E:B7:71:C0:A8:5A:70:DE:42:0E:6D:C5:32:FA:C7:C6:6E
Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
Certificate issuer:       /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
Manifest number:          0141
Signing time:             Fri 19 Dec 2025 03:30:33 +0000
Manifest this update:     Fri 19 Dec 2025 03:30:32 +0000
Manifest next update:     Fri 26 Dec 2025 03:30:32 +0000
Files and hashes:         1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: S15CzLQloMkhISdnkhqwLKjm1CY357mOF82iyYqzRwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
        Validity
            Not Before: Dec 19 03:30:32 2025 GMT
            Not After : Dec 26 03:30:32 2025 GMT
        Subject: CN=6944c6d8-7edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:31:b3:ac:b8:4b:d8:61:5d:fc:dd:b2:90:
                    bc:d9:02:61:74:45:70:43:17:7f:e2:ec:ea:36:f8:
                    db:04:23:92:80:a1:91:7f:71:b1:a4:ff:06:94:e7:
                    1d:cd:b5:8d:d4:d9:ef:8d:76:7c:a5:7c:d7:20:50:
                    ed:78:a8:4c:ee:f1:48:f2:3f:fa:01:3b:99:28:04:
                    1f:e9:cc:9f:b6:23:43:be:ef:65:4b:31:02:4a:8f:
                    4e:bd:2d:17:67:b0:c0:51:bc:33:1b:b3:f4:13:ca:
                    8c:2a:88:ea:3b:f7:b4:b0:b1:3e:7c:a9:a1:14:dc:
                    22:32:9f:ac:45:97:06:83:b2:57:86:65:4c:1c:a6:
                    17:77:5f:2d:e4:79:ca:4a:87:7d:94:a8:3a:72:90:
                    d9:bb:d4:a1:8d:37:ea:89:fe:5a:cf:dc:f1:26:22:
                    05:37:43:42:ce:39:af:45:4e:63:60:a2:c2:98:a5:
                    c7:68:d2:1b:5c:76:ed:51:e3:35:6d:ee:60:89:b2:
                    09:97:47:0a:31:6e:24:f8:d1:a5:62:34:7f:2b:ad:
                    39:9c:09:bc:87:53:54:73:38:33:a1:01:2b:b1:8b:
                    5d:37:e2:eb:ac:7f:61:01:13:66:bc:22:83:6a:ee:
                    02:e0:8b:6a:a5:58:ad:10:87:a7:2b:34:3b:75:17:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:CB:4E:B7:71:C0:A8:5A:70:DE:42:0E:6D:C5:32:FA:C7:C6:6E
            X509v3 Authority Key Identifier:
                keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:74:c5:28:3b:73:fa:32:46:dc:d8:90:bd:53:1e:73:e4:50:
         62:a8:0c:48:0e:5e:b1:81:d1:2f:88:62:3f:7b:51:e4:bb:35:
         57:9c:de:ef:dd:6a:06:91:e2:9b:da:18:73:13:d4:a4:c2:97:
         63:70:6e:43:87:67:ae:15:ac:11:ba:c1:22:37:40:c3:f7:55:
         b3:79:14:7b:47:5c:2f:78:bc:3b:27:ff:5b:79:08:b4:02:49:
         64:4a:b9:c4:79:06:d8:94:c3:94:a1:a2:ae:13:ef:73:bc:eb:
         e1:32:19:ef:82:e2:3c:a3:e1:3a:5c:f9:d2:90:ae:27:9b:16:
         a8:f2:78:5a:a1:70:19:35:2d:5f:51:82:a0:e1:b6:c1:77:e9:
         45:4a:32:0e:9a:28:43:6b:e7:44:c6:6e:f1:64:4e:36:52:54:
         89:0e:95:bc:be:35:78:b1:0f:7f:25:f4:b5:84:a1:5e:98:62:
         d5:d5:8f:ef:6d:46:0c:b8:d1:be:5b:3b:b3:58:06:59:9b:c1:
         d7:9c:a4:42:0a:57:f0:09:4d:44:b5:36:83:be:46:1c:4a:13:
         71:ba:79:af:8b:0e:a4:d6:3d:e5:aa:27:3f:78:85:54:1a:67:
         54:78:86:4e:34:36:64:8b:6c:a1:9e:e4:d4:d5:ad:cb:23:d5:
         a1:ce:2c:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC
MzM3ODlDNDMwHhcNMjUxMjE5MDMzMDMyWhcNMjUxMjI2MDMzMDMyWjAYMRYwFAYD
VQQDDA02OTQ0YzZkOC03ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJkxs6y4S9hhXfzdspC82QJhdEVwQxd/4uzqNvjbBCOSgKGRf3GxpP8GlOcd
zbWN1NnvjXZ8pXzXIFDteKhM7vFI8j/6ATuZKAQf6cyftiNDvu9lSzECSo9OvS0X
Z7DAUbwzG7P0E8qMKojqO/e0sLE+fKmhFNwiMp+sRZcGg7JXhmVMHKYXd18t5HnK
Sod9lKg6cpDZu9ShjTfqif5az9zxJiIFN0NCzjmvRU5jYKLCmKXHaNIbXHbtUeM1
be5gibIJl0cKMW4k+NGlYjR/K605nAm8h1NUczgzoQErsYtdN+LrrH9hARNmvCKD
au4C4ItqpVitEIenKzQ7dRfGCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCANy063
ccCoWnDeQg5txTL6x8ZuMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB
MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu
RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I
T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIdMUoO3P6Mkbc2JC9Ux5z5FBiqAxIDl6xgdEviGI/e1HkuzVXnN7v
3WoGkeKb2hhzE9SkwpdjcG5Dh2euFawRusEiN0DD91WzeRR7R1wveLw7J/9beQi0
AklkSrnEeQbYlMOUoaKuE+9zvOvhMhnvguI8o+E6XPnSkK4nmxao8nhaoXAZNS1f
UYKg4bbBd+lFSjIOmihDa+dExm7xZE42UlSJDpW8vjV4sQ9/JfS1hKFemGLV1Y/v
bUYMuNG+WzuzWAZZm8HXnKRCClfwCU1EtTaDvkYcShNxunmviw6k1j3lqic/eIVU
GmdUeIZONDZki2yhnuTU1a3LI9WhzixI
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:33 2025 by rpki-client