This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          cOAMEHhOtlfbmdro4DT+zGzzR6ULNEswD1VySkk/iKE=
Subject key identifier:   62:15:64:B3:D8:B1:B7:2F:4D:93:A5:EB:7B:60:D2:18:8D:42:10:3D
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0B3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          0A83
Signing time:             Sat 20 Dec 2025 19:20:42 +0000
Manifest this update:     Sat 20 Dec 2025 19:20:42 +0000
Manifest next update:     Sat 27 Dec 2025 19:20:42 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: c/aMSB4HENpJzbj3m8IN5KLcfwUojKtw/cEIMlCEebc=)
                          2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=)
                          3: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=)
                          4: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2878 (0xb3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: Dec 20 19:20:42 2025 GMT
            Not After : Dec 27 19:20:42 2025 GMT
        Subject: CN=6946f70a-5993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:56:e6:76:2d:c6:b3:2b:3a:85:a3:01:98:
                    48:60:81:f5:a5:84:fb:d8:3b:de:ae:86:eb:73:ea:
                    13:8c:1d:2e:76:10:22:89:d9:df:3a:14:2c:32:7a:
                    96:b0:ec:30:61:7b:8b:5e:de:c6:6a:52:a4:00:12:
                    0b:ae:bb:1e:c2:39:0b:0c:87:3b:97:e4:03:65:5e:
                    b6:70:ff:57:9a:e0:7f:64:d2:9e:58:c3:95:c7:b2:
                    68:0a:e7:9a:01:0c:68:f3:4a:bc:c9:bb:94:41:d0:
                    85:61:c4:b5:81:97:c2:c2:34:b9:b4:27:35:4e:6e:
                    d1:c6:96:90:ed:1b:c5:a4:2f:6a:9d:db:f1:55:17:
                    51:ce:96:8a:ae:ef:35:a1:5f:66:3b:f1:07:fa:4c:
                    eb:39:8b:64:94:78:2b:4a:7f:b7:ce:70:bd:8c:a5:
                    df:7e:44:49:4b:bb:43:76:58:34:d0:19:b3:02:c5:
                    7b:3e:aa:60:cc:3f:e8:19:60:13:43:eb:ec:a8:f3:
                    ba:11:bd:fe:38:ee:51:f6:22:95:84:65:95:b4:49:
                    8a:73:6b:7f:41:46:36:08:b5:e9:82:8c:d7:36:bf:
                    e9:8b:64:27:f1:2e:c9:08:2b:0a:2f:c5:90:1b:99:
                    63:17:93:47:72:cc:4c:65:00:4f:06:3d:09:83:c1:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:64:B3:D8:B1:B7:2F:4D:93:A5:EB:7B:60:D2:18:8D:42:10:3D
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:71:42:68:d9:fd:5c:0d:37:6e:52:5e:a8:a4:a7:4d:9b:
         79:8f:4d:38:04:1e:8a:0a:1e:f2:39:4c:30:a7:7f:5c:58:6d:
         83:15:b8:76:d6:c0:3f:a9:73:89:fb:78:85:2e:d0:27:36:2a:
         76:cf:ea:1c:e2:0c:3b:d8:a6:93:2d:77:04:b5:64:12:fb:32:
         35:2d:e4:96:11:43:3d:36:f4:bf:be:1e:5b:7f:12:2f:f9:6d:
         e4:d6:93:09:75:3b:be:58:48:ba:dc:bb:a9:de:b5:7d:5e:f3:
         08:30:c9:cc:ce:85:21:63:aa:73:94:3b:e2:b9:00:3e:61:85:
         a6:c9:78:01:a2:8c:f9:ea:c1:6e:6c:96:61:06:3d:a4:69:40:
         0e:88:2d:43:94:12:36:e0:e4:91:20:73:04:af:7d:9c:75:a0:
         70:57:2c:0f:1e:aa:52:f3:01:72:17:17:68:f1:39:19:ca:13:
         93:54:14:05:d9:ab:e8:bd:45:80:b7:dd:c4:66:80:65:3c:6a:
         40:d7:af:22:58:b5:ab:bd:49:fd:cc:84:58:b7:ef:99:2e:e1:
         5c:c1:dd:a1:1f:85:45:52:d5:10:5e:d6:57:27:4a:a3:eb:60:
         d7:3e:21:d3:4c:00:64:64:42:90:06:4c:f9:23:35:7e:99:d2:
         7f:4f:d6:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz
MjI2NThDMkEwHhcNMjUxMjIwMTkyMDQyWhcNMjUxMjI3MTkyMDQyWjAYMRYwFAYD
VQQDDA02OTQ2ZjcwYS01OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmE9W5nYtxrMrOoWjAZhIYIH1pYT72Dverobrc+oTjB0udhAiidnfOhQsMnqW
sOwwYXuLXt7GalKkABILrrsewjkLDIc7l+QDZV62cP9XmuB/ZNKeWMOVx7JoCuea
AQxo80q8ybuUQdCFYcS1gZfCwjS5tCc1Tm7RxpaQ7RvFpC9qndvxVRdRzpaKru81
oV9mO/EH+kzrOYtklHgrSn+3znC9jKXffkRJS7tDdlg00BmzAsV7PqpgzD/oGWAT
Q+vsqPO6Eb3+OO5R9iKVhGWVtEmKc2t/QUY2CLXpgozXNr/pi2Qn8S7JCCsKL8WQ
G5ljF5NHcsxMZQBPBj0Jg8GZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIVZLPY
sbcvTZOl63tg0hiNQhA9MB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF
MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45
TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKB3FCaNn9XA03blJeqKSnTZt5j004BB6KCh7yOUwwp39cWG2DFbh2
1sA/qXOJ+3iFLtAnNip2z+oc4gw72KaTLXcEtWQS+zI1LeSWEUM9NvS/vh5bfxIv
+W3k1pMJdTu+WEi63Lup3rV9XvMIMMnMzoUhY6pzlDviuQA+YYWmyXgBooz56sFu
bJZhBj2kaUAOiC1DlBI24OSRIHMEr32cdaBwVywPHqpS8wFyFxdo8TkZyhOTVBQF
2avovUWAt93EZoBlPGpA168iWLWrvUn9zIRYt++ZLuFcwd2hH4VFUtUQXtZXJ0qj
62DXPiHTTABkZEKQBkz5IzV+mdJ/T9Za
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:57:14 2025 by rpki-client