This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File:                     ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier:          f23nE0gVaQglQYEsBJ2o4UYLwNogUi2Yx3+gyD2AiVc=
Subject key identifier:   14:E2:68:B6:6D:6D:D2:06:E1:BC:43:FE:FD:47:49:17:ED:75:C0:DB
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer:       /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number:          025B
Signing time:             Sun 21 Dec 2025 00:56:19 +0000
Manifest this update:     Sun 21 Dec 2025 00:56:19 +0000
Manifest next update:     Sun 28 Dec 2025 00:56:19 +0000
Files and hashes:         1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: fyg2b73zrC4lEMEd0wHDAJECVcyjIrvgtimf+W0wcFY=)
                          2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: OLpGMJGM/bGhMSkrOQuT1Tz0zvH6CE/Oi3SzPJmSsH0=)
                          3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: Qq8up52YZscG3hdRn7nfMsmIkNPk2EUKMJmC4t4Qun4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
        Validity
            Not Before: Dec 21 00:56:19 2025 GMT
            Not After : Dec 28 00:56:19 2025 GMT
        Subject: CN=694745b3-9abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:59:da:c8:e4:26:74:58:f4:ba:e5:01:a6:
                    09:9d:7a:36:25:65:fa:d8:8c:6e:b6:2e:42:31:31:
                    8e:9e:24:19:1e:f7:b1:6d:a6:aa:9f:e7:c7:1a:51:
                    7c:f0:9d:4a:00:13:11:df:1d:8e:57:8f:7b:5f:63:
                    b4:f4:f5:2f:db:dc:c6:bf:2d:77:30:e1:f4:e3:a1:
                    e2:7b:5e:0c:ff:6a:a1:94:26:67:81:39:5e:cb:1a:
                    89:4e:e9:88:f6:b0:76:f0:5d:c4:75:24:1d:34:d2:
                    8f:2b:84:2e:ea:90:d1:3b:b7:43:54:f1:dc:a5:72:
                    63:50:33:5b:22:6b:6d:a8:eb:be:dd:97:e2:02:c4:
                    c1:8a:7c:9d:8d:0e:c6:cf:c0:c1:4d:42:50:05:e5:
                    26:a3:5b:1c:e7:c0:66:f1:79:fd:af:0e:73:5e:86:
                    17:f5:b9:76:95:0d:92:29:8d:be:fd:00:2f:cf:b9:
                    85:82:36:ff:dd:b2:32:27:d2:b3:c2:a7:d8:23:cc:
                    e4:82:87:c0:32:56:4f:1e:33:27:d0:ec:7d:e1:0c:
                    2a:2d:79:ee:53:5f:8f:ca:f7:34:36:c4:f3:b5:80:
                    bb:95:af:8d:69:0b:53:fe:3d:be:d9:eb:82:d6:9d:
                    67:56:80:70:29:a2:00:c6:da:19:42:ba:2c:fe:7a:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:68:B6:6D:6D:D2:06:E1:BC:43:FE:FD:47:49:17:ED:75:C0:DB
            X509v3 Authority Key Identifier:
                keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:d2:2a:86:d2:ae:4c:8b:56:44:aa:88:04:66:07:ab:a8:
         6a:92:58:b8:16:f3:98:81:c1:09:aa:95:89:52:e6:db:d3:a9:
         89:98:21:41:0b:71:02:09:31:10:7d:60:10:05:7f:b4:30:f8:
         82:46:64:f9:2c:ec:ff:bd:e6:45:1c:27:3c:71:0f:df:08:75:
         27:98:6e:30:20:d8:ef:5c:9f:1c:fa:f4:8d:4c:c2:2f:06:f3:
         15:5a:90:f2:03:35:06:c1:d9:06:3c:bd:e1:15:e0:50:11:68:
         f5:12:1f:e4:27:50:c9:51:0a:cb:d6:8b:a5:5a:5d:69:a4:0e:
         b7:1b:be:91:13:02:3d:59:48:71:87:27:dc:80:8b:44:41:18:
         7c:11:9b:5e:85:9e:c7:92:86:42:dc:5e:4b:0f:09:fd:fc:53:
         9e:e5:e4:b0:00:66:90:a6:99:bd:ce:09:21:17:47:9a:70:0e:
         1b:bc:16:3a:3a:fb:dd:10:1a:d4:a4:8b:98:3c:0f:27:5b:f3:
         f3:73:4c:44:c6:ae:5a:f1:c5:21:c2:ee:ac:da:8a:2c:14:dd:
         e4:b1:a8:02:50:70:40:32:6f:ec:31:2b:12:7d:c5:8e:9d:90:
         6e:36:63:6e:bc:91:08:eb:de:e2:06:7f:51:3d:30:61:07:cf:
         52:a7:76:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx
MzJBMjZENDAwHhcNMjUxMjIxMDA1NjE5WhcNMjUxMjI4MDA1NjE5WjAYMRYwFAYD
VQQDDA02OTQ3NDViMy05YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwoxZ2sjkJnRY9LrlAaYJnXo2JWX62Ixuti5CMTGOniQZHvexbaaqn+fHGlF8
8J1KABMR3x2OV497X2O09PUv29zGvy13MOH046Hie14M/2qhlCZngTleyxqJTumI
9rB28F3EdSQdNNKPK4Qu6pDRO7dDVPHcpXJjUDNbImttqOu+3ZfiAsTBinydjQ7G
z8DBTUJQBeUmo1sc58Bm8Xn9rw5zXoYX9bl2lQ2SKY2+/QAvz7mFgjb/3bIyJ9Kz
wqfYI8zkgofAMlZPHjMn0Ox94QwqLXnuU1+Pyvc0NsTztYC7la+NaQtT/j2+2euC
1p1nVoBwKaIAxtoZQros/nqOhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTiaLZt
bdIG4bxD/v1HSRftdcDbMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF
MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5
LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCd+tIqhtKuTItWRKqIBGYHq6hqkli4FvOYgcEJqpWJUubb06mJmCFB
C3ECCTEQfWAQBX+0MPiCRmT5LOz/veZFHCc8cQ/fCHUnmG4wINjvXJ8c+vSNTMIv
BvMVWpDyAzUGwdkGPL3hFeBQEWj1Eh/kJ1DJUQrL1oulWl1ppA63G76REwI9WUhx
hyfcgItEQRh8EZtehZ7HkoZC3F5LDwn9/FOe5eSwAGaQppm9zgkhF0eacA4bvBY6
OvvdEBrUpIuYPA8nW/Pzc0xExq5a8cUhwu6s2oosFN3ksagCUHBAMm/sMSsSfcWO
nZBuNmNuvJEI697iBn9RPTBhB89Sp3Yl
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:13:10 2025 by rpki-client