This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
File:                     U76BKLnP6HdJhH5kRfquGociydI.mft (raw, json)
Hash identifier:          rv4EYE6s4yAHugtRdufob2HmYHCkSmcPg6V148KUkM8=
Subject key identifier:   53:D6:32:45:79:EA:96:4A:CC:EC:73:C3:81:EC:83:00:F5:F7:57:24
Authority key identifier: 53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2
Certificate issuer:       /CN=A91BDC6D/serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
Manifest number:          30
Signing time:             Tue 23 Dec 2025 06:25:51 +0000
Manifest this update:     Tue 23 Dec 2025 06:25:50 +0000
Manifest next update:     Tue 30 Dec 2025 06:25:50 +0000
Files and hashes:         1: U76BKLnP6HdJhH5kRfquGociydI.crl (hash: FnEId1E4OFXWqQmHSM6Xu9s8GpV7oUCEWH3RyLNX2j0=)
                          2: C6425B12981D11F093FE8643C4F9AE02.roa (hash: cHtHl0mfRr10cBG++S9xArUxnFAw0CPyJZEh1n1ePUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC6D, serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
        Validity
            Not Before: Dec 23 06:25:50 2025 GMT
            Not After : Dec 30 06:25:50 2025 GMT
        Subject: CN=694a35ef-59c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:7b:a6:ca:15:4c:84:5f:f5:14:d2:ee:e2:
                    9e:8f:96:fb:54:92:35:ab:a8:f2:7c:53:ca:e1:0b:
                    5b:55:75:94:2c:c1:39:90:1e:47:bc:c1:af:2e:6c:
                    8e:f1:e2:23:7d:46:3a:91:4a:99:94:f0:19:63:dc:
                    42:51:05:39:34:26:91:94:b2:4b:66:ee:39:6a:3b:
                    80:a4:09:47:c3:f8:7d:28:16:1f:9e:95:8d:ed:3a:
                    46:14:8b:8a:87:9a:9c:44:3e:74:45:a8:9b:cd:31:
                    c6:26:69:b1:69:39:b9:a5:36:a7:36:9a:5a:63:a1:
                    27:63:61:5e:76:ab:55:15:fc:71:a4:4e:59:02:2f:
                    31:66:a4:c7:ff:5a:e5:d6:0e:ec:d5:db:e2:d7:67:
                    70:5d:54:5d:5d:dc:52:8c:b1:2f:42:30:15:b6:6b:
                    73:6c:ae:8b:87:d6:a8:04:16:7a:7f:08:35:5b:bf:
                    e5:d1:47:6f:c3:ed:3a:a9:67:5e:be:e4:08:73:28:
                    80:34:35:81:f2:85:de:e6:69:ad:c4:5d:ab:fe:80:
                    28:ee:08:0a:25:33:3a:b1:46:35:3a:4a:3f:f7:e4:
                    43:2a:05:a1:62:79:67:81:72:a1:ff:b9:24:df:af:
                    e2:fb:75:64:3c:f8:c6:40:16:63:cf:ea:24:e4:68:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:32:45:79:EA:96:4A:CC:EC:73:C3:81:EC:83:00:F5:F7:57:24
            X509v3 Authority Key Identifier:
                keyid:53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:0a:1d:5f:43:dd:d3:d0:1e:64:93:b7:18:15:45:f1:1e:
         d1:8c:6a:01:36:8e:52:b5:08:3a:56:7c:94:8a:27:5e:59:fe:
         a8:bd:7c:65:67:7d:e6:a9:eb:dc:08:8b:e4:ee:7e:2b:8b:ec:
         60:3b:ea:7d:9e:a5:7b:65:0a:a5:d5:cc:26:8a:a3:9e:07:70:
         bf:ac:6b:81:06:e2:bb:9d:b6:b5:8e:c5:83:e6:46:d2:49:0f:
         38:c0:bd:16:4e:e9:e1:05:5a:b6:46:09:97:fe:56:2e:b2:0c:
         5c:c1:a4:21:90:9b:af:62:68:e1:2c:60:eb:0d:5f:e5:b0:d0:
         73:d1:f3:12:82:e0:58:cf:4a:f3:9b:05:b2:95:27:51:f5:f9:
         92:2e:32:47:fa:e3:1b:e2:13:1b:fd:53:a0:1f:5d:dc:64:48:
         c5:1c:47:93:48:b5:c6:2e:33:52:ff:de:ae:ed:8d:4f:74:ac:
         1f:fc:eb:47:84:8e:ce:68:98:8c:66:dc:0b:09:05:78:58:15:
         74:9d:93:87:08:ed:de:ac:db:04:b4:3d:5a:f4:8d:6a:cc:de:
         89:60:de:e7:0c:04:6e:f7:21:6f:9c:1b:73:1d:84:72:ef:97:
         7f:71:f4:e3:18:96:01:57:ec:cf:3d:4b:a7:90:da:ae:7f:01:
         b7:6d:dd:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
REM2RDExMC8GA1UEBRMoNTNCRTgxMjhCOUNGRTg3NzQ5ODQ3RTY0NDVGQUFFMUE4
NzIyQzlEMjAeFw0yNTEyMjMwNjI1NTBaFw0yNTEyMzAwNjI1NTBaMBgxFjAUBgNV
BAMMDTY5NGEzNWVmLTU5YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCs4numyhVMhF/1FNLu4p6PlvtUkjWrqPJ8U8rhC1tVdZQswTmQHke8wa8ubI7x
4iN9RjqRSpmU8Blj3EJRBTk0JpGUsktm7jlqO4CkCUfD+H0oFh+elY3tOkYUi4qH
mpxEPnRFqJvNMcYmabFpObmlNqc2mlpjoSdjYV52q1UV/HGkTlkCLzFmpMf/WuXW
DuzV2+LXZ3BdVF1d3FKMsS9CMBW2a3NsrouH1qgEFnp/CDVbv+XRR2/D7TqpZ16+
5AhzKIA0NYHyhd7maa3EXav+gCjuCAolMzqxRjU6Sj/35EMqBaFieWeBcqH/uSTf
r+L7dWQ8+MZAFmPP6iTkaG5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU9YyRXnq
lkrM7HPDgeyDAPX3VyQwHwYDVR0jBBgwFoAUU76BKLnP6HdJhH5kRfquGociydIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzZELzk3QkFFNTYwOTc2
NTExRjBCOEEyQ0MwQ0M0RjlBRTAyL1U3NkJLTG5QNkhkSmhINWtSZnF1R29jaXlk
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVTc2QktMblA2SGRKaEg1a1JmcXVHb2NpeWRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE
QzZELzk3QkFFNTYwOTc2NTExRjBCOEEyQ0MwQ0M0RjlBRTAyL1U3NkJLTG5QNkhk
SmhINWtSZnF1R29jaXlkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACcqCh1fQ93T0B5kk7cYFUXxHtGMagE2jlK1CDpWfJSKJ15Z/qi9fGVn
feap69wIi+TufiuL7GA76n2epXtlCqXVzCaKo54HcL+sa4EG4rudtrWOxYPmRtJJ
DzjAvRZO6eEFWrZGCZf+Vi6yDFzBpCGQm69iaOEsYOsNX+Ww0HPR8xKC4FjPSvOb
BbKVJ1H1+ZIuMkf64xviExv9U6AfXdxkSMUcR5NItcYuM1L/3q7tjU90rB/860eE
js5omIxm3AsJBXhYFXSdk4cI7d6s2wS0PVr0jWrM3olg3ucMBG73IW+cG3MdhHLv
l39x9OMYlgFX7M89S6eQ2q5/Abdt3dk=
-----END CERTIFICATE-----
Generated at Tue Dec 23 12:56:36 2025 by rpki-client