This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
File:                     hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json)
Hash identifier:          /S1uFcWAup0amTX2+At3zeoh238BS4qzOxhphWcaQ8U=
Subject key identifier:   CB:93:46:69:53:A2:11:B7:16:9F:11:A2:D3:3C:C9:8A:82:36:76:F1
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Certificate issuer:       /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
Manifest number:          0208
Signing time:             Fri 19 Dec 2025 01:34:28 +0000
Manifest this update:     Fri 19 Dec 2025 01:34:27 +0000
Manifest next update:     Fri 26 Dec 2025 01:34:27 +0000
Files and hashes:         1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: ZQL3HzVmmdYOS3UN4loUGawRAP9vEfnRo+wgdQD789o=)
                          2: 5576D030D61711EEB983D919C4F9AE02.roa (hash: UaaSyqLY1EU1feMuBNb93HrMgg8A6BJd78TyE8+TiZU=)
                          3: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: JeP8VoOcpiutGG7hGzbyaQvIgNDCVBOYu3S0WeuVu3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
                          rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
        Validity
            Not Before: Dec 19 01:34:27 2025 GMT
            Not After : Dec 26 01:34:27 2025 GMT
        Subject: CN=6944aba3-78d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:b0:c8:f1:16:e2:d6:b6:97:0e:33:06:37:
                    6f:b2:da:b8:ba:78:84:ab:71:56:05:5c:ef:45:a3:
                    bd:f0:81:b6:6b:76:f5:5c:6b:de:3f:a1:e5:6f:f2:
                    73:20:d9:4d:9d:cc:d9:f8:47:63:a7:e7:ac:30:02:
                    86:22:7c:3c:26:ca:f9:26:4f:d8:ca:cd:36:86:00:
                    c2:a7:90:ad:00:99:9e:c8:42:9b:be:2a:7b:67:73:
                    14:f7:9c:4d:b9:1b:53:32:27:bd:74:82:a4:ea:df:
                    0b:09:28:4e:c6:9d:c7:3c:7a:0a:39:8f:25:09:89:
                    3c:44:dd:31:48:06:ed:50:bf:4b:47:d2:ae:a4:8a:
                    5f:a9:0a:0e:6b:f5:7c:f1:23:0d:83:6b:09:a4:f9:
                    d6:c5:50:c9:05:24:ec:f8:bb:13:c0:e6:ce:f3:11:
                    37:15:cd:b6:37:62:b6:ae:49:ba:1a:48:08:b4:2a:
                    e7:91:b2:07:1a:b6:25:19:4e:44:ec:66:7b:ca:96:
                    b7:97:7b:51:22:26:94:69:64:5e:c2:d7:02:03:a8:
                    a6:fb:08:83:20:02:7d:3b:3f:c3:46:ee:40:79:d5:
                    70:6e:15:72:80:f7:e8:09:77:48:20:2b:a9:5c:e8:
                    01:d0:86:ce:4c:f3:5d:5f:0e:45:94:da:bd:d8:b5:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:93:46:69:53:A2:11:B7:16:9F:11:A2:D3:3C:C9:8A:82:36:76:F1
            X509v3 Authority Key Identifier:
                keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:87:20:0a:f7:2f:7c:4d:26:ee:c6:d3:93:a2:c3:59:44:1b:
         62:1a:b6:b3:22:2e:5e:ef:48:e0:bc:15:c6:eb:2a:13:25:ce:
         5c:d7:45:4d:77:9a:62:83:8c:c3:52:a7:4a:5a:5b:eb:55:2c:
         15:1d:6b:33:8a:77:d7:f1:da:44:52:cc:c5:46:68:fb:e5:ab:
         79:74:9e:98:88:54:f7:1f:13:af:82:87:f8:05:30:7a:28:a6:
         19:98:85:09:8a:db:82:05:ff:f4:21:4d:56:8e:b2:1f:4f:36:
         10:83:e8:fa:a2:93:00:da:a8:43:c3:a9:a9:88:f0:7e:32:6a:
         35:94:86:27:2a:59:ea:4f:4a:05:97:b1:73:24:12:57:15:86:
         11:21:c5:6b:50:f6:ef:ec:9f:e4:38:c6:22:36:8f:3f:b1:a7:
         52:70:59:0b:0f:ce:41:90:ad:77:17:00:fd:1e:03:4e:fa:55:
         e4:46:da:87:69:6d:66:53:7b:f8:7f:c4:69:e0:99:c5:45:87:
         c9:1c:1b:00:e0:13:0f:6f:40:fa:58:22:8b:8a:8b:97:25:ef:
         6f:93:0a:bf:df:e5:a9:35:0c:f2:4c:22:d0:8c:d2:30:a1:f2:
         d9:cd:0e:3f:e7:98:5e:f6:40:c3:b8:ac:49:0f:b3:ff:d0:41:
         cf:b1:69:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz
NTgyQTIwRUIwHhcNMjUxMjE5MDEzNDI3WhcNMjUxMjI2MDEzNDI3WjAYMRYwFAYD
VQQDDA02OTQ0YWJhMy03OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRywyPEW4ta2lw4zBjdvstq4uniEq3FWBVzvRaO98IG2a3b1XGveP6Hlb/Jz
INlNnczZ+Edjp+esMAKGInw8Jsr5Jk/Yys02hgDCp5CtAJmeyEKbvip7Z3MU95xN
uRtTMie9dIKk6t8LCShOxp3HPHoKOY8lCYk8RN0xSAbtUL9LR9KupIpfqQoOa/V8
8SMNg2sJpPnWxVDJBSTs+LsTwObO8xE3Fc22N2K2rkm6GkgItCrnkbIHGrYlGU5E
7GZ7ypa3l3tRIiaUaWRewtcCA6im+wiDIAJ9Oz/DRu5AedVwbhVygPfoCXdIICup
XOgB0IbOTPNdXw5FlNq92LWn2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuTRmlT
ohG3Fp8RotM8yYqCNnbxMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy
MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI
Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwhyAK9y98TSbuxtOTosNZRBtiGrazIi5e70jgvBXG6yoTJc5c10VN
d5pig4zDUqdKWlvrVSwVHWszinfX8dpEUszFRmj75at5dJ6YiFT3HxOvgof4BTB6
KKYZmIUJituCBf/0IU1WjrIfTzYQg+j6opMA2qhDw6mpiPB+Mmo1lIYnKlnqT0oF
l7FzJBJXFYYRIcVrUPbv7J/kOMYiNo8/sadScFkLD85BkK13FwD9HgNO+lXkRtqH
aW1mU3v4f8Rp4JnFRYfJHBsA4BMPb0D6WCKLiouXJe9vkwq/3+WpNQzyTCLQjNIw
ofLZzQ4/55he9kDDuKxJD7P/0EHPsWk1
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:12:46 2025 by rpki-client