This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
File:                     C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json)
Hash identifier:          DsSENAoE3IB1f0xUgk46ObroYwchx+LLWeF/LGdmJCY=
Subject key identifier:   3C:7C:08:63:87:E9:5B:9D:7C:A4:4B:44:6A:47:99:D7:2B:5D:21:8D
Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
Certificate issuer:       /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Certificate serial:       0B1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
Manifest number:          0B0C
Signing time:             Thu 18 Dec 2025 19:00:13 +0000
Manifest this update:     Thu 18 Dec 2025 19:00:13 +0000
Manifest next update:     Thu 25 Dec 2025 19:00:13 +0000
Files and hashes:         1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: W3jzBtsQJKYG2hDj4ttX74iP1sOURsgD6VsywE54RxM=)
                          2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2843 (0xb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
        Validity
            Not Before: Dec 18 19:00:13 2025 GMT
            Not After : Dec 25 19:00:13 2025 GMT
        Subject: CN=69444f3d-90df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:cf:6b:9d:8d:40:bf:8c:81:0a:21:f0:9d:
                    43:ba:87:24:be:5a:25:d7:15:fe:eb:90:b0:9d:b3:
                    c5:8a:bb:77:7c:bc:43:68:4e:e3:e3:37:1c:16:f0:
                    91:14:2a:3a:54:13:e4:df:65:e4:df:ee:94:17:4d:
                    6e:09:a7:de:66:3e:e2:d8:ff:51:ea:cc:24:d6:2c:
                    29:3d:06:de:24:49:05:e3:57:da:ae:0c:90:ba:5f:
                    31:c1:49:67:fd:90:7d:db:99:2a:da:38:24:7e:9e:
                    d7:74:72:ae:8e:16:a8:a8:1f:6d:4c:fd:92:58:9f:
                    5f:ff:61:ea:61:ce:50:fa:c0:0c:8e:5f:b5:21:31:
                    c3:a9:8d:a7:fb:b4:00:69:39:c1:8c:15:6c:e8:58:
                    68:5e:eb:43:b2:94:09:00:91:a7:40:b7:7b:72:15:
                    7a:50:e7:a4:7a:44:c3:8f:f5:f3:7f:26:b1:26:a3:
                    b0:9c:df:d2:7f:e4:bd:68:6a:78:03:01:4d:c1:cf:
                    69:54:09:64:85:db:60:f6:5c:05:fc:46:a5:6d:bf:
                    38:80:6f:42:96:32:4f:90:20:39:16:3d:70:d4:ac:
                    85:dc:bb:69:0e:be:11:5d:1e:9c:47:08:6c:f6:36:
                    77:6c:19:f5:6c:99:6f:bc:7e:8f:ce:c8:3b:39:dc:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:08:63:87:E9:5B:9D:7C:A4:4B:44:6A:47:99:D7:2B:5D:21:8D
            X509v3 Authority Key Identifier:
                keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:db:4a:36:c4:af:52:69:14:57:d9:b1:42:2b:ed:95:22:
         a7:82:94:2c:3c:47:85:30:60:53:ab:cd:35:f1:e0:a9:5d:db:
         af:a0:b1:42:a5:cf:a7:e4:3e:b2:c7:1d:06:9f:92:b4:11:97:
         64:ea:8e:cd:1d:fa:3e:d9:66:d7:bb:66:cc:85:3d:e9:d8:b5:
         9d:a3:30:33:2a:2c:14:8e:96:4f:7d:19:3d:04:23:89:1b:14:
         a0:7a:1e:d6:9f:11:2c:ce:72:10:90:f0:10:d2:b7:34:64:61:
         e0:d6:b9:e8:0e:09:21:fe:99:aa:e0:c1:62:ef:ca:0b:78:b3:
         62:61:26:21:45:1b:17:c5:0e:f2:83:72:90:8f:07:56:ec:01:
         8a:70:aa:04:f0:09:2d:f5:ba:36:b0:2f:15:82:19:b4:76:57:
         b3:5d:f5:9a:4c:c7:14:58:ac:f0:9a:59:ec:db:60:f6:65:44:
         6c:2c:d8:0d:32:83:2d:fd:47:11:59:ac:c6:65:bd:b1:6a:11:
         a6:0c:25:f9:1f:1d:1a:98:c0:f9:75:6e:57:54:75:5c:b9:64:
         b4:f2:50:9b:f9:9c:d4:36:a0:1f:cc:a6:03:38:4a:d9:8a:8c:
         7f:04:84:2b:03:5a:d1:09:2d:c9:77:1a:8d:a0:c5:e1:ba:47:
         44:93:de:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw
Rjc5NEZFNUMwHhcNMjUxMjE4MTkwMDEzWhcNMjUxMjI1MTkwMDEzWjAYMRYwFAYD
VQQDDA02OTQ0NGYzZC05MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhEbPa52NQL+MgQoh8J1Duockvlol1xX+65CwnbPFirt3fLxDaE7j4zccFvCR
FCo6VBPk32Xk3+6UF01uCafeZj7i2P9R6swk1iwpPQbeJEkF41fargyQul8xwUln
/ZB925kq2jgkfp7XdHKujhaoqB9tTP2SWJ9f/2HqYc5Q+sAMjl+1ITHDqY2n+7QA
aTnBjBVs6FhoXutDspQJAJGnQLd7chV6UOekekTDj/XzfyaxJqOwnN/Sf+S9aGp4
AwFNwc9pVAlkhdtg9lwF/Ealbb84gG9CljJPkCA5Fj1w1KyF3LtpDr4RXR6cRwhs
9jZ3bBn1bJlvvH6Pzsg7Odw8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx8CGOH
6VudfKRLRGpHmdcrXSGNMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4
NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP
SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdv9tKNsSvUmkUV9mxQivtlSKngpQsPEeFMGBTq8018eCpXduvoLFC
pc+n5D6yxx0Gn5K0EZdk6o7NHfo+2WbXu2bMhT3p2LWdozAzKiwUjpZPfRk9BCOJ
GxSgeh7WnxEsznIQkPAQ0rc0ZGHg1rnoDgkh/pmq4MFi78oLeLNiYSYhRRsXxQ7y
g3KQjwdW7AGKcKoE8Akt9bo2sC8Vghm0dlezXfWaTMcUWKzwmlns22D2ZURsLNgN
MoMt/UcRWazGZb2xahGmDCX5Hx0amMD5dW5XVHVcuWS08lCb+ZzUNqAfzKYDOErZ
iox/BIQrA1rRCS3JdxqNoMXhukdEk95u
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:41 2025 by rpki-client