This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          hTVtJagolXanZX63aDPHI+Z+8LZIIdFx2lRE5UAEy04=
Subject key identifier:   CD:1B:E3:05:DC:27:B7:51:91:76:10:FC:2A:95:73:B9:38:24:14:E1
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0BA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0B98
Signing time:             Thu 18 Dec 2025 18:40:54 +0000
Manifest this update:     Thu 18 Dec 2025 18:40:53 +0000
Manifest next update:     Thu 25 Dec 2025 18:40:53 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: wxiOGPl9R5MgY3dobChRPhXo0b+K3D2EP8D02xa4pxc=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2978 (0xba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Dec 18 18:40:53 2025 GMT
            Not After : Dec 25 18:40:53 2025 GMT
        Subject: CN=69444ab5-5458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:cb:75:b8:2f:97:5a:63:30:67:41:58:38:
                    5e:91:87:24:78:ba:04:12:f7:58:5c:d5:2e:4f:b9:
                    86:cd:4c:0c:93:20:52:bd:48:ca:0b:99:c4:62:6b:
                    cc:3f:ae:56:3d:b4:8f:26:3a:4f:81:2f:9b:2b:44:
                    00:82:e7:5a:51:f1:c2:46:06:ff:98:82:ce:38:f4:
                    73:b9:a0:0d:bf:0d:66:1f:a9:32:b3:2d:3b:d8:fd:
                    41:03:e6:ee:09:25:c4:06:88:da:4e:5c:ef:a5:b6:
                    13:10:20:d5:77:50:f8:aa:bc:b7:73:d3:69:ed:a8:
                    9c:16:98:a2:6c:21:62:c2:70:5c:55:43:5d:1e:a5:
                    51:d5:d2:ec:a2:ff:6b:eb:4f:fb:82:62:de:b4:30:
                    4a:d8:d5:64:70:93:67:d7:e8:5e:81:68:d5:cc:32:
                    dd:bd:e0:3e:66:48:2f:1b:98:1d:f0:1b:58:f8:dd:
                    ea:69:ac:ec:a3:e1:2a:ce:90:c4:32:c3:50:c8:98:
                    8d:7b:8e:78:12:bf:1b:f0:bf:b9:f6:64:f1:51:81:
                    42:1b:f2:9a:24:1c:30:21:9f:03:5b:c2:7b:1b:27:
                    f1:4b:e2:55:8d:76:30:ce:e9:73:41:97:ed:ac:fc:
                    1a:f6:7d:57:8a:ac:b2:91:1b:fb:d0:73:40:7d:52:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1B:E3:05:DC:27:B7:51:91:76:10:FC:2A:95:73:B9:38:24:14:E1
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:5d:76:a9:2c:89:ae:ac:f8:ad:c0:4f:99:4c:0e:b9:1b:
         97:71:da:e2:c7:44:44:c2:cd:48:50:5f:99:3c:be:13:8a:04:
         39:e0:fc:70:68:dc:25:b6:9c:44:7b:87:c5:ab:dd:28:4c:f5:
         02:f2:a6:48:70:7d:72:61:2d:1d:a5:2e:cd:e0:13:04:3c:4c:
         71:a2:ce:c1:f4:15:96:86:32:e7:c0:45:16:61:d5:c7:01:46:
         2c:c8:5d:51:d5:9f:1c:a9:5f:1b:53:6e:2f:87:c9:ff:16:9e:
         2e:89:d1:97:18:9b:da:69:1a:90:8d:eb:d2:b6:7c:d2:c0:5a:
         05:5d:28:d5:d8:26:c4:99:7f:0f:54:01:d0:35:a0:fe:15:58:
         fc:d7:81:04:88:32:30:92:4e:1b:60:4a:ba:b3:8d:3c:c8:09:
         5d:79:72:95:1d:a9:2e:05:11:c0:f6:21:e4:49:02:92:0a:fe:
         bc:a3:a1:55:45:c5:09:c1:7c:5e:de:f5:cc:51:d0:d9:47:18:
         df:6c:5e:59:79:4b:c7:6a:69:d8:80:d7:36:79:f0:86:76:9b:
         cf:5d:69:aa:18:45:a9:46:32:3c:d4:b9:21:68:f8:7c:85:90:
         f6:1c:ec:48:8e:6a:e0:a6:76:49:e3:7a:0e:87:20:96:0a:e8:
         21:bc:45:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex
MEU1QjA2RUUwHhcNMjUxMjE4MTg0MDUzWhcNMjUxMjI1MTg0MDUzWjAYMRYwFAYD
VQQDDA02OTQ0NGFiNS01NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4XLdbgvl1pjMGdBWDhekYckeLoEEvdYXNUuT7mGzUwMkyBSvUjKC5nEYmvM
P65WPbSPJjpPgS+bK0QAgudaUfHCRgb/mILOOPRzuaANvw1mH6kysy072P1BA+bu
CSXEBojaTlzvpbYTECDVd1D4qry3c9Np7aicFpiibCFiwnBcVUNdHqVR1dLsov9r
60/7gmLetDBK2NVkcJNn1+hegWjVzDLdveA+ZkgvG5gd8BtY+N3qaazso+EqzpDE
MsNQyJiNe454Er8b8L+59mTxUYFCG/KaJBwwIZ8DW8J7GyfxS+JVjXYwzulzQZft
rPwa9n1XiqyykRv70HNAfVJkiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0b4wXc
J7dRkXYQ/CqVc7k4JBThMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB
QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh
ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLUV12qSyJrqz4rcBPmUwOuRuXcdrix0REws1IUF+ZPL4TigQ54Pxw
aNwltpxEe4fFq90oTPUC8qZIcH1yYS0dpS7N4BMEPExxos7B9BWWhjLnwEUWYdXH
AUYsyF1R1Z8cqV8bU24vh8n/Fp4uidGXGJvaaRqQjevStnzSwFoFXSjV2CbEmX8P
VAHQNaD+FVj814EEiDIwkk4bYEq6s408yAldeXKVHakuBRHA9iHkSQKSCv68o6FV
RcUJwXxe3vXMUdDZRxjfbF5ZeUvHamnYgNc2efCGdpvPXWmqGEWpRjI81LkhaPh8
hZD2HOxIjmrgpnZJ43oOhyCWCughvEU2
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:24 2025 by rpki-client