This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          AI5UZzMHA7LFYLXQVrFCpnUQYMbuhLKQdH5h1dfD69U=
Subject key identifier:   5C:D7:B4:AB:90:31:FE:F6:96:D6:A6:5D:3F:34:68:D3:96:E4:17:C6
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0C30
Signing time:             Thu 18 Dec 2025 18:42:30 +0000
Manifest this update:     Thu 18 Dec 2025 18:42:30 +0000
Manifest next update:     Thu 25 Dec 2025 18:42:30 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: eVYVVe1/AaQ/a7RCwN+c7QIhPh9ihHSMoaUSE8OxgFk=)
                          2: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=)
                          3: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=)
                          4: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: lrkgKWCaSIvYhyF8gUErxhcQH+uKoN3Vep+MLcWyShM=)
                          5: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: ssG8lhPiBj1FYqjfKHRNsYyiwQohuVUZ8CGXqoj50ac=)
                          6: 52636904771911F083181320C4F9AE02.roa (hash: /N8Je2h9Ml0PEQGrFc9NWTNF1W+nc4xwFKtdjj8nfho=)
                          7: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: 2c2fswoHtuwwjSDYm9YL0aP4fxZNIBHz0gEM3XmMKGw=)
                          8: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: wn9mLZSQ6AihZIoAEJrdnF89hRITb8oywlGW6i8zClI=)
                          9: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=)
                          10: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: 4HGBiiRUS1Jl2V3SjyQy8wZ0UMuM3SxhjI47CzUdaDA=)
                          11: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=)
                          12: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=)
                          13: 5164F13EDBD811F0A0A88CE756641951.roa (hash: dzkg5DJUbZBryBBl0bj8Y0ekyIFso09dXRIHhTkjR50=)
                          14: E3903588DA3311F082FD85DA8AD3641D.roa (hash: EIkvBGNH5qK3+2nje6yCtU9+YLtk6KnHnSU6Aq8nm+k=)
                          15: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 4baJUQaJ57JlaoSVexNlINX3qHBtfZSmHXr0z4zuVeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Dec 18 18:42:30 2025 GMT
            Not After : Dec 25 18:42:30 2025 GMT
        Subject: CN=69444b16-067f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:97:e2:86:e7:67:e9:a6:4f:71:a7:be:55:
                    81:8a:3b:30:d1:5a:99:5c:e7:8e:0f:1d:5a:a8:4f:
                    c0:5e:03:a3:5e:0b:33:d8:9c:17:f7:dd:3a:ae:66:
                    39:95:ad:99:cd:f1:9c:8e:ad:c7:5a:b5:d0:60:d4:
                    36:e9:93:1f:30:7d:f5:06:81:69:dc:f9:76:7b:3f:
                    01:5c:60:89:07:46:24:bf:09:ad:b1:cc:a2:06:e5:
                    06:4f:15:7d:44:6b:69:e1:7e:b4:d0:ef:5b:d8:ad:
                    bb:58:67:87:4a:13:a4:89:93:9c:8c:08:7e:5a:27:
                    f5:e6:c4:f4:72:6a:e7:1a:36:60:71:79:89:da:02:
                    c3:f5:d0:90:c1:c1:23:b5:94:21:10:ac:63:f6:55:
                    8e:10:27:43:77:92:b7:a2:de:ca:9a:29:44:ce:c4:
                    41:31:d8:6f:d4:5d:de:4a:3b:74:6d:41:17:6d:9b:
                    6b:0d:cc:65:6d:27:8d:fc:fd:ee:c1:54:81:e4:3f:
                    9e:ff:26:d6:4e:bd:b3:1e:36:d6:62:c2:2d:c6:93:
                    a6:9f:40:97:a5:5f:bb:d7:b3:6e:94:92:16:89:f7:
                    6f:8a:5a:52:59:47:ab:3d:ec:da:09:b8:28:e4:1b:
                    0c:41:a0:dc:2c:a4:9b:92:70:c2:50:66:97:6c:cf:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:B4:AB:90:31:FE:F6:96:D6:A6:5D:3F:34:68:D3:96:E4:17:C6
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e8:cc:48:6e:db:3a:f6:5c:38:b6:e8:69:96:28:b8:cb:f8:
         12:fa:8a:b3:5c:96:bd:2b:1e:da:19:ff:08:d2:a0:95:8c:46:
         2f:b8:7e:52:1f:94:ac:8d:86:d2:de:f2:8a:1f:6e:ca:05:b6:
         c7:70:1d:35:70:7b:fd:88:ed:2a:e6:b7:2f:dc:d4:06:94:c5:
         40:08:8c:90:9b:86:8f:04:87:80:0a:47:48:ad:c5:51:19:07:
         32:06:1e:85:6a:4a:9a:81:b0:bf:04:e2:be:ab:7a:f6:b7:cb:
         2a:8b:c1:85:68:b1:8f:5f:88:0a:ec:79:a6:4f:7e:ea:1b:20:
         a8:ac:d4:3c:6b:29:95:6d:87:8b:4c:53:01:02:cc:9a:ca:f4:
         83:62:54:f5:8a:3d:67:a1:e9:12:6c:cb:67:1e:8f:71:ab:af:
         5a:05:48:78:db:5b:61:d9:17:88:eb:d3:e0:ea:c3:0d:70:ff:
         06:21:e5:0f:1d:c7:37:fc:18:77:4c:91:3f:46:ab:17:ed:fc:
         38:e8:c2:85:48:24:72:b0:34:43:22:ef:b3:9d:ca:32:30:9c:
         a0:de:73:92:bc:46:f3:89:2e:74:6c:6a:80:dc:2d:96:78:75:
         c4:28:5e:16:de:ea:ed:bd:c7:b0:fc:2e:77:c1:02:a5:ec:8e:
         48:76:2f:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjUxMjE4MTg0MjMwWhcNMjUxMjI1MTg0MjMwWjAYMRYwFAYD
VQQDDA02OTQ0NGIxNi0wNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5aX4obnZ+mmT3GnvlWBijsw0VqZXOeODx1aqE/AXgOjXgsz2JwX9906rmY5
la2ZzfGcjq3HWrXQYNQ26ZMfMH31BoFp3Pl2ez8BXGCJB0YkvwmtscyiBuUGTxV9
RGtp4X600O9b2K27WGeHShOkiZOcjAh+Wif15sT0cmrnGjZgcXmJ2gLD9dCQwcEj
tZQhEKxj9lWOECdDd5K3ot7KmilEzsRBMdhv1F3eSjt0bUEXbZtrDcxlbSeN/P3u
wVSB5D+e/ybWTr2zHjbWYsItxpOmn0CXpV+717NulJIWifdvilpSWUerPezaCbgo
5BsMQaDcLKSbknDCUGaXbM8B/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzXtKuQ
Mf72ltamXT80aNOW5BfGMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm
M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCa6MxIbts69lw4tuhplii4y/gS+oqzXJa9Kx7aGf8I0qCVjEYvuH5S
H5SsjYbS3vKKH27KBbbHcB01cHv9iO0q5rcv3NQGlMVACIyQm4aPBIeACkdIrcVR
GQcyBh6FakqagbC/BOK+q3r2t8sqi8GFaLGPX4gK7HmmT37qGyCorNQ8aymVbYeL
TFMBAsyayvSDYlT1ij1noekSbMtnHo9xq69aBUh421th2ReI69Pg6sMNcP8GIeUP
Hcc3/Bh3TJE/RqsX7fw46MKFSCRysDRDIu+zncoyMJyg3nOSvEbziS50bGqA3C2W
eHXEKF4W3urtvcew/C53wQKl7I5Idi8U
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:53:34 2025 by rpki-client