This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
File:                     _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json)
Hash identifier:          4ZzGN+Otdy0IpwLdWs4AEykUuN7IiXKpiwOu6oRjfHs=
Subject key identifier:   53:EE:E6:6A:C7:A4:04:00:14:C4:94:8A:7B:51:6D:CE:B3:BC:BB:73
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       16E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
Manifest number:          16AC
Signing time:             Thu 18 Dec 2025 16:33:53 +0000
Manifest this update:     Thu 18 Dec 2025 16:33:52 +0000
Manifest next update:     Thu 25 Dec 2025 16:33:52 +0000
Files and hashes:         1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: lELaIXA9oEbxa2CEYPzex5dYZh2h6LXE3F1725Shpd8=)
                          2: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=)
                          3: A923DDA2BE0211F090AD9F13C4F9AE02.roa (hash: rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=)
                          4: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=)
                          5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: wdVUeFPPp5Pt9fuTweBdrE45i6lKsYNin+xhFp9XCWU=)
                          6: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: USmtuTTmRco0BEBl+7v5NzI0IPVnUkLZyU5TqgVNBVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5857 (0x16e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Dec 18 16:33:52 2025 GMT
            Not After : Dec 25 16:33:52 2025 GMT
        Subject: CN=69442cf0-c098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:9b:54:53:e8:1e:02:4f:ff:9a:df:96:cf:
                    ad:38:51:cd:61:6c:1f:b9:b3:5e:4f:27:ba:b5:ed:
                    0a:07:7f:0e:8f:81:cc:bc:62:57:56:6c:32:a1:81:
                    52:47:66:b4:f3:c6:68:98:53:e0:65:72:45:ba:f8:
                    48:fd:83:83:7b:db:eb:cd:50:10:c8:c3:c9:e6:b3:
                    ac:17:79:4a:59:cd:02:47:28:0f:aa:be:b5:cf:45:
                    2e:42:eb:a2:5e:a1:dd:45:2b:79:27:64:11:da:2d:
                    90:a4:1b:70:fa:89:79:1d:3a:09:2d:ec:fd:66:fa:
                    9e:c2:90:9c:e5:5a:2d:01:aa:73:70:e3:21:5b:72:
                    a7:29:f1:cf:8e:d1:d0:35:2b:08:ab:b4:8e:10:5b:
                    c9:e4:d4:dc:df:d0:26:8c:74:ab:bd:64:ab:5b:50:
                    44:5e:69:f5:a4:35:4b:57:30:41:c0:42:d3:13:29:
                    ba:07:a0:3b:74:30:3b:e4:34:7a:ac:6b:c1:51:2b:
                    e5:80:7e:8b:89:db:15:5d:39:10:90:94:4c:5c:f1:
                    e7:f3:1a:f0:38:20:b9:3c:5f:fe:38:de:76:cf:59:
                    38:04:c9:dd:73:32:43:ad:01:dd:5f:88:57:81:34:
                    65:d5:56:1b:21:c4:4e:bd:de:c4:03:f3:3a:c5:56:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:E6:6A:C7:A4:04:00:14:C4:94:8A:7B:51:6D:CE:B3:BC:BB:73
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:3a:7b:a6:15:c8:91:06:6b:0a:07:16:f9:f9:75:17:1c:
         72:47:c1:87:2b:cb:ba:2f:bf:e7:ef:5a:bd:c4:c2:da:56:d1:
         ec:3b:4c:7a:82:af:dd:17:1c:1e:b5:7c:49:1c:eb:98:89:f9:
         73:8c:6a:18:45:47:8b:46:6d:4d:a5:ec:66:c0:29:f1:69:3a:
         30:8d:2d:41:e3:90:f0:e8:8f:02:ad:05:85:00:b0:fc:0a:63:
         23:ad:4e:58:e5:bc:11:1b:54:a2:12:7f:5c:a1:08:3d:67:f4:
         bc:9f:78:42:18:26:76:88:4b:9e:0c:20:04:8c:b7:3d:c1:5d:
         57:4c:80:41:a3:4a:99:60:cb:ba:1c:c7:3b:8e:7d:88:d8:6f:
         6e:2a:fa:3c:03:6f:10:63:1e:dd:1f:42:e3:44:02:4e:19:9a:
         da:92:cc:9e:c7:3a:c5:16:5a:9c:d2:42:45:54:79:2f:fb:2c:
         3c:96:b6:fe:40:e6:f6:16:c6:d5:71:42:16:85:a2:35:35:33:
         43:36:33:89:0f:3d:0b:a5:a9:35:ce:cb:24:0b:b9:c7:67:c8:
         3d:12:bb:88:e2:50:3d:bb:7e:fe:60:4e:ab:8e:e9:f7:22:d9:
         8a:98:7c:69:d9:37:f0:ae:9e:c4:b6:ae:f1:96:c0:46:d6:b7:
         02:5e:ef:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjUxMjE4MTYzMzUyWhcNMjUxMjI1MTYzMzUyWjAYMRYwFAYD
VQQDDA02OTQ0MmNmMC1jMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg5mbVFPoHgJP/5rfls+tOFHNYWwfubNeTye6te0KB38Oj4HMvGJXVmwyoYFS
R2a088ZomFPgZXJFuvhI/YODe9vrzVAQyMPJ5rOsF3lKWc0CRygPqr61z0UuQuui
XqHdRSt5J2QR2i2QpBtw+ol5HToJLez9ZvqewpCc5VotAapzcOMhW3KnKfHPjtHQ
NSsIq7SOEFvJ5NTc39AmjHSrvWSrW1BEXmn1pDVLVzBBwELTEym6B6A7dDA75DR6
rGvBUSvlgH6LidsVXTkQkJRMXPHn8xrwOCC5PF/+ON52z1k4BMndczJDrQHdX4hX
gTRl1VYbIcROvd7EA/M6xVYevQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPu5mrH
pAQAFMSUintRbc6zvLtzMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D
TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGWzp7phXIkQZrCgcW+fl1FxxyR8GHK8u6L7/n71q9xMLaVtHsO0x6
gq/dFxwetXxJHOuYiflzjGoYRUeLRm1NpexmwCnxaTowjS1B45Dw6I8CrQWFALD8
CmMjrU5Y5bwRG1SiEn9coQg9Z/S8n3hCGCZ2iEueDCAEjLc9wV1XTIBBo0qZYMu6
HMc7jn2I2G9uKvo8A28QYx7dH0LjRAJOGZraksyexzrFFlqc0kJFVHkv+yw8lrb+
QOb2FsbVcUIWhaI1NTNDNjOJDz0Lpak1zsskC7nHZ8g9EruI4lA9u37+YE6rjun3
ItmKmHxp2Tfwrp7Etq7xlsBG1rcCXu/o
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:14:33 2025 by rpki-client