This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File:                     P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier:          yRPm0nutQL1BwwL7sD06ToJ25B4k6Yi3KYur+Z/LDNI=
Subject key identifier:   F8:BC:04:C5:1E:F8:AF:87:24:E0:C0:65:53:8D:F4:6D:91:A5:71:14
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer:       /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial:       159A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number:          157F
Signing time:             Sat 20 Dec 2025 16:33:03 +0000
Manifest this update:     Sat 20 Dec 2025 16:33:03 +0000
Manifest next update:     Sat 27 Dec 2025 16:33:03 +0000
Files and hashes:         1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: HjPnZQEdUy6pTRhWyzpdC+HEQUi2KPGxNjaZxfR/eQk=)
                          2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=)
                          3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=)
                          4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
                          rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5530 (0x159a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
        Validity
            Not Before: Dec 20 16:33:03 2025 GMT
            Not After : Dec 27 16:33:03 2025 GMT
        Subject: CN=6946cfbf-fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:1f:37:4b:b8:aa:51:d3:a9:29:14:4f:f9:
                    f8:4e:ea:f1:ec:a3:a8:6a:67:ef:ed:01:02:35:9b:
                    6e:bf:4b:2d:23:ba:29:92:21:88:db:c9:88:fb:b4:
                    8e:ec:31:07:cd:a0:76:7e:c2:17:50:e9:42:3a:0e:
                    39:57:0f:7c:ae:71:7b:2c:88:53:04:67:90:98:8a:
                    a8:0a:86:76:ba:84:43:f4:9c:86:da:73:65:a9:a6:
                    04:b4:11:ef:e8:1c:e6:7c:fd:ea:62:b3:e3:3d:3d:
                    8f:c0:9e:d4:ae:86:ed:90:ed:72:b8:43:21:7a:7f:
                    88:af:51:c7:cf:e9:c8:21:fe:dd:5b:d4:df:56:9f:
                    9a:e9:db:55:21:f4:89:50:a5:6f:50:0b:e9:19:dd:
                    22:0c:9f:b7:f8:ed:ca:2f:35:ec:d6:45:7b:f1:14:
                    a5:3a:2a:e8:0f:b9:a3:75:ab:a1:22:7d:d0:af:61:
                    2d:7c:fa:d5:55:3e:70:c9:71:16:39:7b:ab:1c:cc:
                    17:1f:4b:a1:54:9b:1f:92:01:9d:24:6c:93:94:c7:
                    a0:c9:d2:70:4a:0c:29:9b:da:b5:24:61:af:a5:4e:
                    9b:99:a7:48:7a:e0:79:4a:19:f7:f2:df:24:ff:fe:
                    e1:3e:3d:6f:51:83:c6:54:11:97:ff:7a:3f:4e:18:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BC:04:C5:1E:F8:AF:87:24:E0:C0:65:53:8D:F4:6D:91:A5:71:14
            X509v3 Authority Key Identifier:
                keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:53:9c:a3:40:d1:b6:ca:00:6c:5d:83:d5:dd:5f:05:6f:ad:
         a7:9c:f7:ec:cd:94:1e:60:f5:0a:f5:d0:5f:39:e0:fd:1c:3e:
         b8:31:a6:2b:af:03:f2:97:1b:4d:35:05:c4:aa:f1:ae:63:61:
         9e:24:83:bf:a7:41:74:bf:1f:39:05:af:f2:09:1f:74:44:9f:
         cc:06:61:c8:ca:5f:78:07:f7:a4:c9:c0:f2:5d:92:5f:73:9b:
         dd:77:61:3f:1c:e3:07:44:a3:03:82:ca:f8:cb:05:b7:00:57:
         55:00:50:63:7e:3c:fb:c1:9b:f1:48:69:10:4b:d2:a8:cb:77:
         7d:7f:4e:28:49:17:40:97:3c:ab:92:cb:1d:1a:02:73:b5:cb:
         d2:cf:e6:fb:b9:8e:41:9f:3a:f0:03:67:0a:a8:42:04:08:08:
         8a:3e:75:30:8c:d4:98:64:61:f6:94:be:09:65:8c:d2:6c:d5:
         4b:e9:00:0a:03:62:e3:fc:e7:3c:50:4b:b1:43:43:2b:59:17:
         cb:41:d9:63:62:85:87:39:23:76:ed:3d:d4:69:91:3e:d9:04:
         6b:45:07:2d:37:75:df:9b:48:0e:75:18:a2:1c:46:28:dd:83:
         cd:7a:37:eb:5e:99:51:5f:18:0b:a8:a1:53:ad:09:2b:ea:c9:
         5d:64:60:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD
QzQ5NzA1OTMwHhcNMjUxMjIwMTYzMzAzWhcNMjUxMjI3MTYzMzAzWjAYMRYwFAYD
VQQDDA02OTQ2Y2ZiZi1mZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxUfN0u4qlHTqSkUT/n4Turx7KOoamfv7QECNZtuv0stI7opkiGI28mI+7SO
7DEHzaB2fsIXUOlCOg45Vw98rnF7LIhTBGeQmIqoCoZ2uoRD9JyG2nNlqaYEtBHv
6BzmfP3qYrPjPT2PwJ7UrobtkO1yuEMhen+Ir1HHz+nIIf7dW9TfVp+a6dtVIfSJ
UKVvUAvpGd0iDJ+3+O3KLzXs1kV78RSlOiroD7mjdauhIn3Qr2EtfPrVVT5wyXEW
OXurHMwXH0uhVJsfkgGdJGyTlMegydJwSgwpm9q1JGGvpU6bmadIeuB5Shn38t8k
//7hPj1vUYPGVBGX/3o/ThgkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi8BMUe
+K+HJODAZVON9G2RpXEUMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD
QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03
emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlU5yjQNG2ygBsXYPV3V8Fb62nnPfszZQeYPUK9dBfOeD9HD64MaYr
rwPylxtNNQXEqvGuY2GeJIO/p0F0vx85Ba/yCR90RJ/MBmHIyl94B/ekycDyXZJf
c5vdd2E/HOMHRKMDgsr4ywW3AFdVAFBjfjz7wZvxSGkQS9Koy3d9f04oSRdAlzyr
kssdGgJztcvSz+b7uY5BnzrwA2cKqEIECAiKPnUwjNSYZGH2lL4JZYzSbNVL6QAK
A2Lj/Oc8UEuxQ0MrWRfLQdljYoWHOSN27T3UaZE+2QRrRQctN3Xfm0gOdRiiHEYo
3YPNejfrXplRXxgLqKFTrQkr6sldZGAz
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:44:45 2025 by rpki-client