This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File:                     MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier:          lB7yKSSrUnyGE27dqYGxbj/lpu+zT3cTT2QGTsCZ7JQ=
Subject key identifier:   8E:4E:78:77:73:BD:72:36:33:83:EC:BD:5B:F5:7D:16:EB:70:B5:05
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer:       /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial:       14B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number:          14AA
Signing time:             Tue 30 Dec 2025 16:39:32 +0000
Manifest this update:     Tue 30 Dec 2025 16:39:31 +0000
Manifest next update:     Tue 06 Jan 2026 16:39:31 +0000
Files and hashes:         1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: TnDQ1rFd0gpztsKcJnEbcTUFtVGPdaTGdRegj+obaDs=)
                          2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 16:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5301 (0x14b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
        Validity
            Not Before: Dec 30 16:39:31 2025 GMT
            Not After : Jan  6 16:39:31 2026 GMT
        Subject: CN=69540043-587d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:55:27:42:b0:2b:d9:be:19:cd:a3:37:a2:
                    12:7b:82:51:c1:c9:fe:27:ab:f0:ac:33:03:0e:78:
                    d5:83:06:6b:06:59:1c:55:87:de:55:61:cf:d1:2f:
                    4d:35:8e:4a:34:68:46:64:b5:0e:43:35:0e:73:2c:
                    98:c0:fd:71:63:55:56:75:d6:ca:5b:64:2e:21:32:
                    53:1b:19:3e:0b:3e:59:08:80:eb:df:88:a1:12:8d:
                    2d:af:62:06:3a:69:df:11:5d:a2:66:f2:87:cc:86:
                    6e:8d:6a:17:96:7b:62:84:46:1f:6c:50:78:9a:d5:
                    60:01:41:87:d1:e3:2a:e9:41:e0:dd:d4:4b:38:82:
                    65:aa:80:ab:f5:10:fb:6a:5c:17:aa:14:33:4e:a6:
                    1d:b5:3f:ee:09:ae:20:02:2c:15:d2:6c:50:de:42:
                    b2:02:12:1f:2a:03:ff:d9:03:f9:38:81:ec:c5:c3:
                    bc:7c:cc:64:da:f2:e6:0d:6e:f7:72:82:f3:51:0a:
                    f9:f8:b4:21:b1:f9:f2:ef:a1:85:5a:a4:d4:a2:72:
                    cd:0c:20:be:68:01:c6:3c:b4:6d:a9:2d:48:ac:84:
                    47:36:3f:66:9a:29:a1:d6:db:8b:1b:38:ff:bb:aa:
                    7c:91:82:60:08:ae:ce:95:4a:a4:04:64:70:00:15:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4E:78:77:73:BD:72:36:33:83:EC:BD:5B:F5:7D:16:EB:70:B5:05
            X509v3 Authority Key Identifier:
                keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:80:85:77:31:35:31:5b:5d:1a:6b:f3:ea:e6:c6:58:d4:b7:
         9c:34:8c:b3:f1:ac:e8:9d:16:ff:89:39:d5:8e:8a:a4:51:1a:
         dd:58:4f:c4:31:4a:4b:03:16:f5:9e:45:0f:e9:d2:22:bd:29:
         0b:b4:70:75:71:c9:60:05:68:ad:86:5a:fd:e9:f8:d5:89:f9:
         d6:24:c5:1d:cc:f0:42:8f:95:1d:b2:72:db:84:ca:21:e9:e6:
         c8:6f:fb:e8:04:26:fa:7f:cc:f4:c7:f0:d9:b2:b8:74:3c:39:
         86:58:11:a7:65:a6:77:74:76:63:3f:bb:bf:3b:8f:7f:3b:ca:
         e7:c0:4f:50:c6:10:b6:45:86:82:8d:08:ca:e1:53:71:c4:9f:
         86:34:97:c0:22:81:a6:79:cf:4a:15:5d:07:63:7c:79:2d:fc:
         4c:5a:d6:87:a1:3e:74:d2:aa:1c:a4:41:c7:ab:3f:a7:39:b0:
         00:b1:d3:02:79:f6:a3:93:85:b4:22:0b:2f:db:a9:3d:f4:cc:
         68:9c:04:93:b1:7a:f2:6b:81:f2:c5:6b:d3:5b:0c:4c:ba:ba:
         69:1a:4a:75:7c:67:31:cd:f1:31:f7:56:81:c4:fd:34:15:9f:
         16:c2:a9:bf:5e:e7:03:c9:d5:d0:3a:88:8b:d9:92:1e:2b:12:
         a5:c6:6f:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz
QTUzOTcwMjQwHhcNMjUxMjMwMTYzOTMxWhcNMjYwMTA2MTYzOTMxWjAYMRYwFAYD
VQQDDA02OTU0MDA0My01ODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApW5VJ0KwK9m+Gc2jN6ISe4JRwcn+J6vwrDMDDnjVgwZrBlkcVYfeVWHP0S9N
NY5KNGhGZLUOQzUOcyyYwP1xY1VWddbKW2QuITJTGxk+Cz5ZCIDr34ihEo0tr2IG
OmnfEV2iZvKHzIZujWoXlntihEYfbFB4mtVgAUGH0eMq6UHg3dRLOIJlqoCr9RD7
alwXqhQzTqYdtT/uCa4gAiwV0mxQ3kKyAhIfKgP/2QP5OIHsxcO8fMxk2vLmDW73
coLzUQr5+LQhsfny76GFWqTUonLNDCC+aAHGPLRtqS1IrIRHNj9mmimh1tuLGzj/
u6p8kYJgCK7OlUqkBGRwABV5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5OeHdz
vXI2M4PsvVv1fRbrcLUFMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0
RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw
czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGgIV3MTUxW10aa/Pq5sZY1LecNIyz8azonRb/iTnVjoqkURrdWE/E
MUpLAxb1nkUP6dIivSkLtHB1cclgBWithlr96fjVifnWJMUdzPBCj5UdsnLbhMoh
6ebIb/voBCb6f8z0x/DZsrh0PDmGWBGnZaZ3dHZjP7u/O49/O8rnwE9QxhC2RYaC
jQjK4VNxxJ+GNJfAIoGmec9KFV0HY3x5LfxMWtaHoT500qocpEHHqz+nObAAsdMC
efajk4W0Igsv26k99MxonASTsXrya4HyxWvTWwxMurppGkp1fGcxzfEx91aBxP00
FZ8Wwqm/XucDydXQOoiL2ZIeKxKlxm/l
-----END CERTIFICATE-----
Generated at Wed Dec 31 10:26:38 2025 by rpki-client