This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File:                     ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier:          uiJqsPqe/LWXG8aBq4b64r8MYC6ALYV2qjWPp30HgIE=
Subject key identifier:   0B:DB:39:12:9D:5A:3F:1D:16:32:A4:09:76:58:BC:E4:57:63:2F:D5
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer:       /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number:          01F7
Signing time:             Fri 19 Dec 2025 01:49:18 +0000
Manifest this update:     Fri 19 Dec 2025 01:49:17 +0000
Manifest next update:     Fri 26 Dec 2025 01:49:17 +0000
Files and hashes:         1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: vxtHJyODH/hp5z7kj2s9RTzCKrnimc2DYO0HNWv/wUc=)
                          2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=)
                          3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: 1jcnYgiH1oCe12gdnItbi9E2/n5D/nkIQyDzvjflQcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
        Validity
            Not Before: Dec 19 01:49:17 2025 GMT
            Not After : Dec 26 01:49:17 2025 GMT
        Subject: CN=6944af1e-a847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:69:7c:09:34:65:a2:b2:41:6a:99:eb:30:
                    83:2d:c4:e5:f2:1a:74:86:69:7d:27:63:63:c4:67:
                    e1:ee:68:52:1b:a4:3b:e2:e3:0d:40:83:5a:70:a3:
                    37:ce:79:f0:bc:47:34:ce:12:45:4a:a3:48:f3:ca:
                    0e:e2:4b:50:ae:b4:75:65:5e:a9:9c:27:42:7b:10:
                    1c:cb:06:d6:f9:00:e2:cc:11:59:67:9b:cb:04:e2:
                    78:ad:2e:7d:4d:7b:70:80:61:46:f1:64:35:07:ce:
                    81:d9:69:f6:a1:47:c1:b2:c7:19:a8:e7:9a:a0:03:
                    63:8e:0a:97:76:1f:cf:6a:99:81:f9:95:d8:a0:b7:
                    ef:22:79:a8:a0:39:b6:6d:51:5a:03:f0:4a:9e:67:
                    c3:c6:e9:f2:99:01:e4:4d:e4:36:06:bf:e2:54:60:
                    89:e3:8a:a1:4c:20:b1:c0:46:72:43:4b:8b:3d:34:
                    9f:b9:b9:da:a4:c9:db:87:32:d4:40:05:33:f8:21:
                    3c:fd:42:82:96:c0:ef:59:b0:f5:78:7b:d8:5e:8c:
                    f0:af:2d:9e:b9:e8:c7:e3:79:35:c9:60:f2:91:ce:
                    24:a1:5b:13:5d:dc:f5:81:0a:d9:f1:1d:ab:41:ce:
                    50:e7:f5:d5:80:9d:fe:6c:b7:76:92:27:d4:1a:21:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:39:12:9D:5A:3F:1D:16:32:A4:09:76:58:BC:E4:57:63:2F:D5
            X509v3 Authority Key Identifier:
                keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:bd:33:ac:43:c6:62:28:41:65:24:2f:ef:d7:c8:57:fb:
         00:78:ed:53:7f:f8:e5:79:a7:a6:ad:cf:8b:9f:cd:c6:c0:41:
         b5:8b:e3:a6:f0:24:91:05:f2:03:b1:93:78:60:db:f4:84:fc:
         8a:2b:8c:bb:b7:23:95:d1:61:85:31:e4:44:16:51:9e:d8:12:
         37:6e:7e:5e:b4:4e:a7:d6:99:27:14:4d:93:c5:61:7c:93:76:
         5d:b6:68:ff:0a:47:7e:76:31:4a:64:3d:91:3c:8b:41:14:53:
         4b:5b:da:a1:83:e1:0a:95:53:a2:6e:83:47:e0:99:82:51:c0:
         07:99:a6:98:8d:5f:2a:c3:b4:9e:d1:1a:a2:01:c9:a0:8b:c1:
         59:bb:0b:cc:26:6f:a0:f4:89:bc:d2:78:0e:54:1f:5e:1a:9f:
         e8:e7:63:5d:dc:fb:67:72:01:e0:2a:dd:71:c3:e4:df:ca:8f:
         c5:b0:cf:de:55:29:5f:e8:52:54:a9:a1:81:e1:65:e8:c9:73:
         04:dd:f7:0f:cd:0c:1b:7f:b2:3a:00:5c:79:43:d2:55:8f:5e:
         bc:3e:2b:cc:b5:2a:ea:47:8d:75:ce:5c:8c:a1:01:da:5e:e7:
         8a:97:14:e8:ce:4d:fd:46:4b:00:71:03:80:e1:67:9a:20:13:
         c1:7c:91:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0
NzYzNEJFRjcwHhcNMjUxMjE5MDE0OTE3WhcNMjUxMjI2MDE0OTE3WjAYMRYwFAYD
VQQDDA02OTQ0YWYxZS1hODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiyppfAk0ZaKyQWqZ6zCDLcTl8hp0hml9J2NjxGfh7mhSG6Q74uMNQINacKM3
znnwvEc0zhJFSqNI88oO4ktQrrR1ZV6pnCdCexAcywbW+QDizBFZZ5vLBOJ4rS59
TXtwgGFG8WQ1B86B2Wn2oUfBsscZqOeaoANjjgqXdh/PapmB+ZXYoLfvInmooDm2
bVFaA/BKnmfDxunymQHkTeQ2Br/iVGCJ44qhTCCxwEZyQ0uLPTSfubnapMnbhzLU
QAUz+CE8/UKClsDvWbD1eHvYXozwry2euejH43k1yWDykc4koVsTXdz1gQrZ8R2r
Qc5Q5/XVgJ3+bLd2kifUGiHhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvbORKd
Wj8dFjKkCXZYvORXYy/VMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG
Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2
WEJsYVhtMng2a1pIWTB2dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPpb0zrEPGYihBZSQv79fIV/sAeO1Tf/jleaemrc+Ln83GwEG1i+Om
8CSRBfIDsZN4YNv0hPyKK4y7tyOV0WGFMeREFlGe2BI3bn5etE6n1pknFE2TxWF8
k3Zdtmj/Ckd+djFKZD2RPItBFFNLW9qhg+EKlVOiboNH4JmCUcAHmaaYjV8qw7Se
0RqiAcmgi8FZuwvMJm+g9Im80ngOVB9eGp/o52Nd3PtncgHgKt1xw+Tfyo/FsM/e
VSlf6FJUqaGB4WXoyXME3fcPzQwbf7I6AFx5Q9JVj168PivMtSrqR411zlyMoQHa
XueKlxTozk39RksAcQOA4WeaIBPBfJHl
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:53:15 2025 by rpki-client