This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
File:                     mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json)
Hash identifier:          9V+kEkxkxCoxpq2UcB1PpkiZPHflCwyoGnsyUMB8/mM=
Subject key identifier:   D9:84:A4:24:74:45:76:27:CC:CB:34:6D:B9:C3:D1:3B:4A:18:25:7A
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Certificate issuer:       /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial:       0508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
Manifest number:          0502
Signing time:             Thu 18 Dec 2025 23:00:16 +0000
Manifest this update:     Thu 18 Dec 2025 23:00:15 +0000
Manifest next update:     Thu 25 Dec 2025 23:00:15 +0000
Files and hashes:         1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: cYVtlBIkwRGABbGFTPFKxKm37txtuBsPSe6EUXk0ZR0=)
                          2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
        Validity
            Not Before: Dec 18 23:00:15 2025 GMT
            Not After : Dec 25 23:00:15 2025 GMT
        Subject: CN=69448780-61f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:92:05:eb:66:e6:b1:c8:dd:b2:68:46:cb:
                    28:1a:47:54:cb:23:2a:5d:29:46:69:91:b7:37:2d:
                    23:14:b5:46:70:b1:b0:cb:0b:97:97:68:bb:d1:12:
                    58:45:98:36:67:87:d5:4d:fb:e2:6d:47:17:fd:ca:
                    54:62:c8:86:04:4d:50:bd:24:3e:28:43:e3:be:17:
                    6d:1d:ef:1e:6b:0b:e5:08:65:cb:3d:54:91:81:e7:
                    7b:2f:fc:ea:a3:7a:c8:ae:ed:5a:d5:58:09:36:07:
                    09:aa:b9:0c:bd:0f:eb:0b:a2:1c:fa:ee:87:ee:4c:
                    78:f9:aa:bd:16:75:18:e5:21:d3:72:94:43:2b:18:
                    dc:0c:e0:d2:11:42:aa:81:24:db:71:8e:61:b6:7a:
                    71:81:80:20:98:d9:7b:e7:28:7c:d8:6c:4b:de:ec:
                    d7:a8:8f:20:8c:6e:3d:78:3a:84:e2:50:77:ab:32:
                    2a:53:5e:c6:2a:1d:c0:b2:0a:99:7c:7c:e9:16:ee:
                    e4:6a:1b:c9:05:86:ea:65:a2:b3:c5:7d:d5:32:5e:
                    2d:b1:81:e6:74:96:0f:d5:7c:c6:73:b0:b5:6c:7e:
                    50:f9:62:9c:56:21:fd:78:58:0d:6d:73:00:5d:5c:
                    26:f5:d4:af:25:cf:36:0a:d1:8b:c4:69:7b:50:ef:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:A4:24:74:45:76:27:CC:CB:34:6D:B9:C3:D1:3B:4A:18:25:7A
            X509v3 Authority Key Identifier:
                keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:ce:cb:95:0c:6e:7f:40:e2:a3:5c:7d:f3:a9:c2:76:ff:
         40:46:09:90:35:d2:6d:80:16:99:53:1f:29:f9:09:a7:74:3d:
         2a:77:7b:04:c9:dc:b2:dd:d8:de:7b:67:64:09:cb:9a:73:43:
         7e:d0:28:11:e6:7f:9a:22:02:d2:4c:eb:b6:16:24:fb:23:79:
         47:22:30:61:7b:cf:e9:11:0c:e6:20:d3:01:0c:67:cf:30:d3:
         d9:06:c4:13:4d:9c:cc:4d:bd:7e:c0:8b:4f:6a:f1:3d:61:19:
         d4:72:76:7f:9a:fa:09:5d:cb:07:0b:82:eb:30:58:02:0d:65:
         e0:e5:be:d5:b8:b3:ef:3f:b5:5b:78:ab:88:bc:5b:7d:2d:a1:
         9a:d5:ed:00:cb:ec:13:1a:63:7e:4e:88:4c:6e:bd:3d:e0:a8:
         c8:61:15:b8:e7:a1:24:2b:0f:93:05:62:94:1c:b4:3c:de:9e:
         63:e5:01:9d:00:0c:54:fc:e5:04:ed:6e:cb:e3:37:3f:ac:c3:
         79:37:90:82:5c:b8:d1:5d:f8:a4:5f:8a:e8:89:ec:0b:62:b4:
         30:5b:2a:a5:61:ea:72:fd:11:46:d6:b5:6b:27:ff:2e:5e:fc:
         a7:8e:99:27:77:b3:94:f7:40:28:e7:0b:90:56:9c:a8:4b:95:
         01:96:48:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw
OUE2RUY3QkMwHhcNMjUxMjE4MjMwMDE1WhcNMjUxMjI1MjMwMDE1WjAYMRYwFAYD
VQQDDA02OTQ0ODc4MC02MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1EWSBetm5rHI3bJoRssoGkdUyyMqXSlGaZG3Ny0jFLVGcLGwywuXl2i70RJY
RZg2Z4fVTfvibUcX/cpUYsiGBE1QvSQ+KEPjvhdtHe8eawvlCGXLPVSRged7L/zq
o3rIru1a1VgJNgcJqrkMvQ/rC6Ic+u6H7kx4+aq9FnUY5SHTcpRDKxjcDODSEUKq
gSTbcY5htnpxgYAgmNl75yh82GxL3uzXqI8gjG49eDqE4lB3qzIqU17GKh3AsgqZ
fHzpFu7kahvJBYbqZaKzxX3VMl4tsYHmdJYP1XzGc7C1bH5Q+WKcViH9eFgNbXMA
XVwm9dSvJc82CtGLxGl7UO8tEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmEpCR0
RXYnzMs0bbnD0TtKGCV6MB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3
OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw
cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhrs7LlQxuf0Dio1x986nCdv9ARgmQNdJtgBaZUx8p+QmndD0qd3sE
ydyy3djee2dkCcuac0N+0CgR5n+aIgLSTOu2FiT7I3lHIjBhe8/pEQzmINMBDGfP
MNPZBsQTTZzMTb1+wItPavE9YRnUcnZ/mvoJXcsHC4LrMFgCDWXg5b7VuLPvP7Vb
eKuIvFt9LaGa1e0Ay+wTGmN+TohMbr094KjIYRW456EkKw+TBWKUHLQ83p5j5QGd
AAxU/OUE7W7L4zc/rMN5N5CCXLjRXfikX4roiewLYrQwWyqlYepy/RFG1rVrJ/8u
Xvynjpknd7OU90Ao5wuQVpyoS5UBlkjR
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:31:38 2025 by rpki-client