This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File:                     DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier:          iY9lx4XLAITfRuk2B8GgiO8BmMJxaMa9qBa/0PfnP7I=
Subject key identifier:   8D:79:3F:1D:2D:CC:D4:3C:FE:40:ED:78:87:5E:57:C6:BC:3F:BD:BF
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer:       /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number:          FC
Signing time:             Fri 19 Dec 2025 04:24:54 +0000
Manifest this update:     Fri 19 Dec 2025 04:24:54 +0000
Manifest next update:     Fri 26 Dec 2025 04:24:54 +0000
Files and hashes:         1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: VpefCNqcBV2D2TB4nPmykcVNBEvRNFQTZ5ZD5j8KtrM=)
                          2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: wnPWBmIvERZidNx6EbW5pekeL8Z2zXnUdVzGtoi292M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
                          rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
        Validity
            Not Before: Dec 19 04:24:54 2025 GMT
            Not After : Dec 26 04:24:54 2025 GMT
        Subject: CN=6944d396-58ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:f2:50:ba:e3:2e:2c:84:28:3f:a8:12:76:
                    d6:73:a7:e9:c0:1f:1e:e6:5e:aa:f3:17:ee:c5:22:
                    b2:ae:43:0e:5d:12:00:13:51:a4:36:92:25:d8:e1:
                    1a:66:f3:d8:bc:bd:24:96:b8:e2:9c:f1:7c:b1:ab:
                    41:a1:ac:1f:c8:02:3b:0f:b3:79:04:fe:40:fe:21:
                    e4:a3:0c:11:ef:41:71:a6:1c:50:d8:15:b0:87:46:
                    a9:f4:be:9b:db:7c:12:ca:3d:53:56:d9:b9:1f:74:
                    75:45:b7:ee:a7:dc:9a:9e:2f:cd:19:12:9e:b1:08:
                    fa:9e:d7:4f:f1:24:f6:93:06:b4:57:b4:7b:50:f2:
                    70:82:e5:49:f6:b0:07:e1:b1:11:7e:4f:09:7b:b9:
                    61:28:7b:02:fb:62:44:89:9d:a2:12:bd:61:f4:b5:
                    92:7a:39:e4:24:d5:45:4e:b1:61:41:9e:76:d0:56:
                    30:09:3a:a1:e8:ab:6e:3f:36:ed:18:3d:03:5b:9a:
                    37:bc:91:19:59:ca:77:64:51:58:68:c1:de:44:53:
                    49:d3:61:ab:b5:9c:a8:f4:a9:0f:55:1e:b8:8e:74:
                    d6:df:28:d2:d1:7b:83:a6:49:80:ea:0a:72:38:bb:
                    9e:51:6f:74:87:91:39:c4:7e:99:03:99:11:58:96:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:3F:1D:2D:CC:D4:3C:FE:40:ED:78:87:5E:57:C6:BC:3F:BD:BF
            X509v3 Authority Key Identifier:
                keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6d:4c:9d:e1:2a:84:05:9d:59:03:8c:fb:8d:72:5a:af:a7:
         e7:6e:8b:9b:a9:75:aa:12:81:50:3c:21:58:99:09:3f:8e:42:
         cb:b6:77:a5:98:f0:b0:50:cc:b6:1b:a5:83:39:d0:b0:08:ab:
         9f:6d:ac:f9:a1:73:9d:24:fe:cb:3a:59:a6:49:80:56:f9:f4:
         e8:e7:52:d8:0f:e0:25:84:8f:ba:4e:8f:69:8c:fb:a5:28:57:
         90:62:c2:09:70:86:a3:65:df:1d:7d:7e:81:1a:7c:07:ac:f0:
         6e:93:ea:ff:20:1f:d8:bd:ae:71:8f:9b:b7:0c:fa:d9:cc:16:
         d4:7c:25:7f:f5:c1:be:f0:9c:f7:c4:c6:94:ad:ab:61:95:5a:
         17:90:48:57:f6:d0:50:73:70:e9:ae:60:88:f2:b5:2d:c3:eb:
         39:cb:eb:4c:95:71:b0:ed:11:03:e9:ba:93:d6:18:36:87:e8:
         49:51:c8:54:02:64:04:87:77:86:45:dc:f8:3a:f8:ab:de:cc:
         89:45:02:ec:da:56:0f:74:e4:1f:5a:18:ea:9e:fb:76:0e:a1:
         8b:b0:2d:63:19:1b:b7:f2:40:0c:8a:66:47:07:d7:d6:c5:19:
         f4:ee:e9:ae:f7:92:23:ba:0f:71:f9:91:9c:74:58:f9:64:63:
         9d:b6:fa:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5
NDI5NTY0QzAwHhcNMjUxMjE5MDQyNDU0WhcNMjUxMjI2MDQyNDU0WjAYMRYwFAYD
VQQDDA02OTQ0ZDM5Ni01OGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1x7yULrjLiyEKD+oEnbWc6fpwB8e5l6q8xfuxSKyrkMOXRIAE1GkNpIl2OEa
ZvPYvL0klrjinPF8satBoawfyAI7D7N5BP5A/iHkowwR70FxphxQ2BWwh0ap9L6b
23wSyj1TVtm5H3R1Rbfup9yani/NGRKesQj6ntdP8ST2kwa0V7R7UPJwguVJ9rAH
4bERfk8Je7lhKHsC+2JEiZ2iEr1h9LWSejnkJNVFTrFhQZ520FYwCTqh6KtuPzbt
GD0DW5o3vJEZWcp3ZFFYaMHeRFNJ02GrtZyo9KkPVR64jnTW3yjS0XuDpkmA6gpy
OLueUW90h5E5xH6ZA5kRWJZPPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI15Px0t
zNQ8/kDteIdeV8a8P72/MB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB
NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK
cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqbUyd4SqEBZ1ZA4z7jXJar6fnboubqXWqEoFQPCFYmQk/jkLLtnel
mPCwUMy2G6WDOdCwCKufbaz5oXOdJP7LOlmmSYBW+fTo51LYD+AlhI+6To9pjPul
KFeQYsIJcIajZd8dfX6BGnwHrPBuk+r/IB/Yva5xj5u3DPrZzBbUfCV/9cG+8Jz3
xMaUrathlVoXkEhX9tBQc3DprmCI8rUtw+s5y+tMlXGw7RED6bqT1hg2h+hJUchU
AmQEh3eGRdz4Ovir3syJRQLs2lYPdOQfWhjqnvt2DqGLsC1jGRu38kAMimZHB9fW
xRn07umu95Ijug9x+ZGcdFj5ZGOdtvoR
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:33 2025 by rpki-client