This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File:                     rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier:          J2YF65WWSKdQvY7Z7NpTLlciPQvDaAKzDJ5IsKSiqKc=
Subject key identifier:   32:4C:AB:73:D4:58:C4:7F:11:7E:69:FF:1F:1D:17:44:81:4B:6B:B2
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0F8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number:          0E7B
Signing time:             Thu 18 Dec 2025 17:43:33 +0000
Manifest this update:     Thu 18 Dec 2025 17:43:32 +0000
Manifest next update:     Thu 25 Dec 2025 17:43:32 +0000
Files and hashes:         1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: r2SN1n4BHEV5Wz3ld0SPN1/e0hhBAS7JxhIJcKAl5qQ=)
                          2: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: 5W1NfRExr5L2qQL5H136NrVKGoHwAdTpjf3o+jUw4fM=)
                          3: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: PNn4hloLWsO3US5KtLsv/gJGCuFiAV7h2ZsPkySZuPM=)
                          4: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: IgmSu1xooZkjMSIy5UaMn0KJuSc5PeG/UAY2iz4v00A=)
                          5: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: ynz+ZXVYon6qCCwSg68HnlbJgsz7oHMRryvXyKUGv9g=)
                          6: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: lKd14RCSyU2vrCrtMJxPKeMYKMqLc77HXu+4PUEXtJI=)
                          7: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: jtYt/pU+ooAIkmhjTmjyuCh451/edjbb8L7BPLMNm/A=)
                          8: 54AB633219D211F09C581262C4F9AE02.roa (hash: TW7LWSWDjilmokwKD8PcTDpey43GdF1QSznkCaq0KaE=)
                          9: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: GSV2og2vZfzpYKFvoDWTGBKAz8dr3rumZNKGGO3jHY0=)
                          10: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: Q+N7nkL63v9ZAWNH18H4yXxeNCEcfWDs/nxX6jo0OvQ=)
                          11: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: H2lEK0K0kQYeTrVqMlmr1093uk7p/5P20OC6SGdaiQI=)
                          12: 7FBDDAE21A9411F087D4BC86C4F9AE02.roa (hash: +Ezz1sJmRvUn7ofcNz6zucevlAunQnc+pNOTGGaRXs4=)
                          13: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: ZJYPWa1zVWtxLs6YCjscQz9YmQ7dtlau1Mnxy99zbcE=)
                          14: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: hncV0VkKM0GHDpxNiR5xutYPqnkMPO9a8qqBVzFUIdw=)
                          15: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: U4MBST0cKb6RFa7OBRmsAZWClvdETmVq86pgqwAZx3A=)
                          16: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: mn3sE8XpKvVWd9UbJMQ1OKNZuj9ls9xZNaLI7yAeig4=)
                          17: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: EzmlYDIYm1xOfkY9Xnj3Z3SdpIMp5IBIa3y1OFN4eK4=)
                          18: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: GZEHbZPKjeuR0ecqQm5rnrjDlAtA7+UPoWqGJrdoIkc=)
                          19: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: sLEtAwDgKICVdyB7EW9vv5iaJ4c0aSu+tPvZcmtVPKg=)
                          20: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: gyfd8yfpcrsdUm362X9/UdNM3mZBfttbTMqza0Depgs=)
                          21: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: FQj+ZVLFAzitzpiwqDx7ibMG/ct51yOTa3qwsRqg/wY=)
                          22: 598351E2476011F097E14360C4F9AE02.roa (hash: Z9kiwDBj6+SjMsFsgY7gi9FIlXbv7JHD5bPoLzc5FlA=)
                          23: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: bNiaBxLSaec5WOSjMopZEcGaxVMAzUvwIFjDNwtzIXo=)
                          24: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: a/CArtNqj+X7FLzknDiVLBMQF895RFRrNOFXjFmjzNk=)
                          25: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: j4EoNG6mPHnfhB1j42qxfNdNciMiEtrw2eJw4okWk0c=)
                          26: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: rUC7HAYZSDdTVk9lHvd/Wl7kYoqQUYqgnEKO2kEnvDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3983 (0xf8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Dec 18 17:43:32 2025 GMT
            Not After : Dec 25 17:43:32 2025 GMT
        Subject: CN=69443d44-ff6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:9a:0a:b9:d8:7d:51:8a:0d:f8:b6:08:18:
                    a3:09:47:dc:20:97:8a:5c:a3:44:ac:7c:17:84:c6:
                    23:46:0b:a6:cb:d0:c1:41:73:99:79:aa:e2:58:89:
                    58:17:68:48:51:87:c4:59:4d:0c:41:c3:a7:d4:2c:
                    a8:56:b8:fc:86:da:cc:6b:02:08:56:b7:09:47:72:
                    32:e7:3e:d7:24:87:c2:10:48:ff:e1:ee:47:60:60:
                    91:0a:dc:6c:12:55:43:4b:3d:fb:6f:dc:e1:66:33:
                    a8:ff:f2:03:12:dd:3c:4a:8a:a6:87:a7:94:5e:5f:
                    05:ae:7c:65:2e:d8:4c:c1:64:6f:c0:64:04:76:a1:
                    dc:6b:12:90:6c:22:a3:08:49:8b:50:15:dd:dd:71:
                    d0:6b:a8:f3:b6:9a:d0:0c:29:72:ee:ec:a7:9a:87:
                    0b:cb:d5:f3:dd:9c:66:98:e7:13:19:20:29:45:71:
                    a2:9a:87:46:07:e3:d2:8b:ca:88:68:8e:10:84:93:
                    65:a1:2d:36:b7:94:a4:0d:eb:14:75:eb:a5:94:2d:
                    fc:e8:35:15:1d:8e:19:b9:84:fa:5e:1d:04:d3:55:
                    b2:8e:ab:44:72:42:de:de:cc:c5:a3:32:ee:f4:7b:
                    39:dc:5e:bb:e1:80:7b:e1:2e:83:42:c2:df:d8:b1:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4C:AB:73:D4:58:C4:7F:11:7E:69:FF:1F:1D:17:44:81:4B:6B:B2
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:b8:7f:58:2f:ac:e0:0b:bb:ae:63:16:f0:5f:1b:f6:6c:
         e3:65:0e:b1:08:89:77:f5:a9:3b:1a:47:bb:87:0f:7a:1a:87:
         bc:76:af:ac:5c:bc:be:8a:31:62:14:cf:08:01:76:4a:3d:52:
         99:0c:ef:f7:5c:02:c2:b2:3b:1b:b5:fe:eb:5e:f8:74:02:80:
         b9:fd:fc:d0:f8:06:e0:95:51:02:3a:f0:15:4f:f4:fb:4b:b9:
         48:65:f5:c1:fc:6f:a0:69:1b:3b:9b:82:f7:55:49:65:a7:86:
         08:d1:10:e3:8d:86:55:8c:54:4e:91:0b:72:8f:d6:7c:5c:12:
         68:8e:c6:99:da:83:e0:b6:6b:11:d3:c1:55:71:21:47:56:ef:
         cf:2c:58:3f:e8:0d:a8:fa:dc:77:ca:0e:46:a9:44:c2:d8:03:
         18:ad:36:87:78:45:30:9d:a0:cd:86:4c:7f:c9:e1:a4:3f:d6:
         dc:fc:87:57:5b:5b:60:6b:3d:c0:83:b2:c1:0d:60:d3:ac:20:
         f0:d2:43:25:c5:78:f8:b6:b1:31:8d:43:47:4f:44:48:e3:88:
         c2:99:b8:c3:04:ea:b7:9a:4d:ed:68:97:ce:86:08:cb:de:3d:
         d2:19:65:42:00:3d:ef:46:d6:84:cd:e3:fd:a6:fd:d2:40:4e:
         41:fd:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:59:34 2025 by rpki-client