This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          C0SMeujACxUtUf8bV5IxVx0/BPA/0++BW+u8OmoKRC0=
Subject key identifier:   31:FA:05:4A:B2:0E:FF:2D:B9:AD:B5:9D:2D:99:E1:35:CD:B4:4A:E6
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0AFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0AC8
Signing time:             Sat 20 Dec 2025 19:00:44 +0000
Manifest this update:     Sat 20 Dec 2025 19:00:44 +0000
Manifest next update:     Sat 27 Dec 2025 19:00:44 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: oa5R3MyfkAKMcMbKP/iaxaC3idWUSjOuJW758G10J84=)
                          2: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=)
                          3: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=)
                          4: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=)
                          5: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: b0jHLruEtRzyhGWKnuBBIEAeyGPvSkQqNURAHY7x5fE=)
                          6: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=)
                          7: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=)
                          8: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=)
                          9: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=)
                          10: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=)
                          11: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=)
                          12: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: CoD/shnMXHae3KWicHEdMLYrMD7W2jQx0eFVueG1ZyQ=)
                          13: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=)
                          14: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2810 (0xafa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Dec 20 19:00:44 2025 GMT
            Not After : Dec 27 19:00:44 2025 GMT
        Subject: CN=6946f25c-bada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:93:57:7d:3f:0f:b5:96:e0:3b:ef:d7:1e:
                    2c:79:01:21:03:c0:ad:5c:94:35:38:56:d2:51:c4:
                    68:77:82:ec:0f:8e:77:c6:01:79:f3:de:a4:58:db:
                    16:34:3a:2e:70:e4:3a:e1:df:70:65:cc:d6:f6:4a:
                    28:06:4a:8a:e3:d4:6d:a4:8e:f3:bd:23:df:e4:b4:
                    50:aa:3a:9f:b0:34:b2:6c:fc:2b:23:69:a2:e1:28:
                    2e:ff:8e:43:d8:e1:80:a1:ef:0a:a1:27:a0:17:c4:
                    02:94:19:51:e0:33:f4:71:59:4b:46:d9:46:74:4d:
                    07:dc:01:01:30:cf:71:81:df:1f:95:5b:38:f2:bb:
                    39:70:02:84:d1:b1:71:fd:03:1e:90:bc:b4:31:3a:
                    9a:45:d4:47:62:6a:97:6c:38:57:2a:83:f4:11:51:
                    90:75:8c:ea:37:42:0c:52:32:2e:4d:5d:ec:ba:16:
                    d0:b6:67:b5:42:36:0a:a3:6a:80:c9:90:17:9c:77:
                    35:10:a6:ea:86:bb:29:ac:3c:ef:12:4b:23:7b:3d:
                    5d:96:03:41:be:c6:60:34:5f:9b:0c:4d:50:e0:df:
                    de:f3:b9:6f:32:67:23:d9:59:af:87:1c:72:47:21:
                    44:b9:9a:19:b8:03:29:66:bb:0f:f5:f6:6e:4c:60:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:05:4A:B2:0E:FF:2D:B9:AD:B5:9D:2D:99:E1:35:CD:B4:4A:E6
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:01:35:ac:c8:a3:36:3c:6e:15:37:61:33:99:a7:bd:01:d8:
         77:47:af:1e:ee:12:87:71:ea:30:b3:15:c9:81:b8:e4:4e:24:
         02:82:8a:f6:ec:8a:16:59:00:c0:ad:01:10:2c:3f:60:49:0f:
         d4:8e:9c:7d:cb:71:7e:b9:09:cd:45:61:e8:1a:99:17:f2:c5:
         8d:9f:4f:d1:df:a0:3b:79:ae:83:99:66:6e:89:8a:5f:ae:44:
         70:70:b7:c5:ec:4b:59:1c:ae:a7:98:19:89:3f:71:96:49:32:
         b6:3b:41:b2:25:62:92:91:51:88:2b:06:27:b0:a7:04:db:c4:
         e4:b1:99:99:68:54:93:97:a9:e8:e7:0d:5e:1c:cf:61:3a:9a:
         64:f8:3a:20:7b:91:72:0a:d2:c6:d2:3a:60:34:dc:21:d7:71:
         2a:37:a0:6a:37:b7:a2:dc:fa:cd:39:e2:1e:f5:40:06:2a:4f:
         34:9d:5a:72:4c:6a:22:82:3e:0b:47:bc:15:65:8e:91:ed:bb:
         50:3b:9f:d1:91:5c:7b:47:22:43:63:01:09:65:fa:ea:96:6e:
         f8:68:1d:88:b7:4f:bb:8b:08:d0:fe:c8:34:ff:c9:05:05:e6:
         92:84:e7:c3:ea:74:8a:72:8e:f7:2c:15:10:2c:89:99:f3:e5:
         34:c9:1e:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjUxMjIwMTkwMDQ0WhcNMjUxMjI3MTkwMDQ0WjAYMRYwFAYD
VQQDDA02OTQ2ZjI1Yy1iYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2MuTV30/D7WW4Dvv1x4seQEhA8CtXJQ1OFbSUcRod4LsD453xgF5896kWNsW
NDoucOQ64d9wZczW9kooBkqK49RtpI7zvSPf5LRQqjqfsDSybPwrI2mi4Sgu/45D
2OGAoe8KoSegF8QClBlR4DP0cVlLRtlGdE0H3AEBMM9xgd8flVs48rs5cAKE0bFx
/QMekLy0MTqaRdRHYmqXbDhXKoP0EVGQdYzqN0IMUjIuTV3suhbQtme1QjYKo2qA
yZAXnHc1EKbqhrsprDzvEksjez1dlgNBvsZgNF+bDE1Q4N/e87lvMmcj2Vmvhxxy
RyFEuZoZuAMpZrsP9fZuTGBBKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH6BUqy
Dv8tua21nS2Z4TXNtErmMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX
MC0zWWdHRHRUWkdEeS1HR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARATWsyKM2PG4VN2Ezmae9Adh3R68e7hKHceowsxXJgbjkTiQCgor2
7IoWWQDArQEQLD9gSQ/Ujpx9y3F+uQnNRWHoGpkX8sWNn0/R36A7ea6DmWZuiYpf
rkRwcLfF7EtZHK6nmBmJP3GWSTK2O0GyJWKSkVGIKwYnsKcE28TksZmZaFSTl6no
5w1eHM9hOppk+Doge5FyCtLG0jpgNNwh13EqN6BqN7ei3PrNOeIe9UAGKk80nVpy
TGoigj4LR7wVZY6R7btQO5/RkVx7RyJDYwEJZfrqlm74aB2It0+7iwjQ/sg0/8kF
BeaShOfD6nSKco73LBUQLImZ8+U0yR71
-----END CERTIFICATE-----
Generated at Sun Dec 21 18:07:52 2025 by rpki-client