This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
File:                     d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json)
Hash identifier:          /r4ktRXUrMiUIYhMWcEDrXiU+cpEQpPHFQgXLvJvi60=
Subject key identifier:   87:E0:A2:A9:47:BD:EA:3E:01:F0:FE:60:A7:BE:FC:8B:3D:E5:5B:18
Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A
Certificate issuer:       /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
Manifest number:          0139
Signing time:             Mon 29 Dec 2025 03:37:05 +0000
Manifest this update:     Mon 29 Dec 2025 03:37:05 +0000
Manifest next update:     Mon 05 Jan 2026 03:37:05 +0000
Files and hashes:         1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: iwOg/zPaWFWiUyRumbPdHWrXJ8zsgWC1zvy7Cr7GpNw=)
                          2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: mAjzpgSn4LjU+hGR/suY8fIT9L0ResXkBxM/GBV6W9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl
                          rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 03:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A
        Validity
            Not Before: Dec 29 03:37:05 2025 GMT
            Not After : Jan  5 03:37:05 2026 GMT
        Subject: CN=6951f761-80e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:7d:6a:9d:1e:65:16:e9:f7:53:ae:79:2d:
                    ff:34:40:85:dd:d3:c0:da:eb:d3:8f:bb:7c:a0:fe:
                    83:5b:26:58:c9:7f:9b:09:b6:f4:75:2d:59:b3:c6:
                    9b:4c:bc:dd:3f:8c:64:a4:33:81:04:e9:67:8e:f6:
                    33:30:6b:97:24:69:5d:15:61:b4:b1:11:05:6e:e5:
                    f3:0f:72:53:a3:4b:16:57:1e:5d:35:d6:cc:17:91:
                    21:95:4b:dc:b5:13:75:d5:35:21:0e:09:68:00:70:
                    2e:2b:a3:05:a8:05:d9:48:9c:a9:6a:3f:c9:94:33:
                    21:84:d5:71:ab:91:40:fc:5e:2c:8c:cb:ea:7a:52:
                    f7:e0:1c:b8:cb:2c:8e:21:5f:19:4a:df:25:86:d7:
                    91:78:27:a0:53:70:6d:38:24:bb:70:68:9e:88:57:
                    47:17:0f:32:4f:ce:6e:98:67:9b:f7:f2:66:dc:2b:
                    49:74:9e:80:d8:9a:fd:a7:86:36:85:9e:77:32:65:
                    8f:ec:fd:71:85:80:68:1a:f7:ec:df:ff:f7:33:8a:
                    b1:db:f6:d3:80:fc:ec:e1:72:62:b0:bb:86:5d:2f:
                    2a:14:05:78:3e:f7:b6:26:c2:0c:48:74:3c:a1:35:
                    9a:56:b6:03:1a:26:dd:06:70:42:26:1c:56:46:39:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E0:A2:A9:47:BD:EA:3E:01:F0:FE:60:A7:BE:FC:8B:3D:E5:5B:18
            X509v3 Authority Key Identifier:
                keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:04:74:61:61:27:70:f6:0c:30:99:2c:65:ac:bc:4b:b2:73:
         f8:69:f4:1f:3f:72:bb:43:76:cc:e8:c6:0a:89:a1:7f:f1:0b:
         1d:53:d2:f1:61:b6:ac:8f:e0:82:5d:da:88:82:7c:69:ad:26:
         03:db:5c:ba:78:84:dd:43:cd:21:3c:db:55:d1:ac:1f:02:34:
         c0:68:a3:25:c9:08:d5:ee:19:3b:88:a9:3f:cc:13:1d:d3:04:
         b3:bf:99:f1:4f:cc:e8:2b:26:3d:b1:fd:6f:fe:d1:3e:60:4a:
         d8:ae:e9:69:1f:fe:9c:b0:80:ff:04:e1:56:86:a8:13:d3:13:
         1e:46:06:c9:ad:37:b4:24:80:be:81:64:57:db:a0:09:b2:23:
         13:b4:1b:10:a9:5d:f3:a8:53:b0:3f:ab:2c:4a:87:75:5e:fc:
         b1:5c:41:09:81:2a:5b:aa:a1:5b:7c:70:2d:b6:55:dc:25:9a:
         13:17:6e:fd:2c:4b:65:aa:ed:5c:ed:6f:72:75:44:e3:57:6d:
         bc:ea:95:33:3f:68:68:21:5d:83:a7:e4:7c:36:38:66:72:28:
         f5:0b:3d:1a:8b:3e:dd:0d:2f:15:ce:e5:d7:11:2e:2d:a5:f2:
         80:84:62:62:2b:9e:c2:06:c2:83:9d:72:50:79:75:86:1d:61:
         d5:5a:28:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc0RDYxMTAvBgNVBAUTKDc3NDY0QTg0NkY3N0QxQzREMzY2QTMwNkI4MDY5MzlG
Q0YyQTYwMUEwHhcNMjUxMjI5MDMzNzA1WhcNMjYwMTA1MDMzNzA1WjAYMRYwFAYD
VQQDDA02OTUxZjc2MS04MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzvV9ap0eZRbp91OueS3/NECF3dPA2uvTj7t8oP6DWyZYyX+bCbb0dS1Zs8ab
TLzdP4xkpDOBBOlnjvYzMGuXJGldFWG0sREFbuXzD3JTo0sWVx5dNdbMF5EhlUvc
tRN11TUhDgloAHAuK6MFqAXZSJypaj/JlDMhhNVxq5FA/F4sjMvqelL34By4yyyO
IV8ZSt8lhteReCegU3BtOCS7cGieiFdHFw8yT85umGeb9/Jm3CtJdJ6A2Jr9p4Y2
hZ53MmWP7P1xhYBoGvfs3//3M4qx2/bTgPzs4XJisLuGXS8qFAV4Pve2JsIMSHQ8
oTWaVrYDGibdBnBCJhxWRjlzUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfgoqlH
veo+AfD+YKe+/Is95VsYMB8GA1UdIwQYMBaAFHdGSoRvd9HE02ajBrgGk5/PKmAa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRENi9ERTIyQUQyNDBD
REYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBjVFRacU1HdUFhVG44OHFZ
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwWktoRzkzMGNUVFpxTUd1QWFUbjg4cVlCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzRENi9ERTIyQUQyNDBDREYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBj
VFRacU1HdUFhVG44OHFZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkBHRhYSdw9gwwmSxlrLxLsnP4afQfP3K7Q3bM6MYKiaF/8QsdU9Lx
Ybasj+CCXdqIgnxprSYD21y6eITdQ80hPNtV0awfAjTAaKMlyQjV7hk7iKk/zBMd
0wSzv5nxT8zoKyY9sf1v/tE+YErYrulpH/6csID/BOFWhqgT0xMeRgbJrTe0JIC+
gWRX26AJsiMTtBsQqV3zqFOwP6ssSod1XvyxXEEJgSpbqqFbfHAttlXcJZoTF279
LEtlqu1c7W9ydUTjV2286pUzP2hoIV2Dp+R8Njhmcij1Cz0aiz7dDS8VzuXXES4t
pfKAhGJiK57CBsKDnXJQeXWGHWHVWigW
-----END CERTIFICATE-----
Generated at Wed Dec 31 02:02:12 2025 by rpki-client