This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File:                     eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier:          IjZz3tyCvjhlF7r4qpLN2VHaw4Ow3PKQBq0BScpzm+M=
Subject key identifier:   A8:A1:7F:14:8B:85:AE:06:80:1B:54:9D:B0:C6:F9:3D:34:E0:74:53
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       11B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number:          1133
Signing time:             Sun 28 Dec 2025 17:00:53 +0000
Manifest this update:     Sun 28 Dec 2025 17:00:53 +0000
Manifest next update:     Sun 04 Jan 2026 17:00:53 +0000
Files and hashes:         1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: h18UDhL4RS0/aXTf3X2KhToTeldT3xo1zrLAl/VGt00=)
                          2: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=)
                          3: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=)
                          4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=)
                          5: 08DE553CE33411F09C32B5836E6F56BC.roa (hash: eUx0szc6mDFrTXmR6KQgfAyJ6imSHu6ZcWSwSYyS93w=)
                          6: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=)
                          7: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=)
                          8: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=)
                          9: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: /aMpRk+sARCQOAQAAD5zmHedoziM1XqWy40fj+d7TUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 15:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4534 (0x11b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Dec 28 17:00:53 2025 GMT
            Not After : Jan  4 17:00:53 2026 GMT
        Subject: CN=69516245-b507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:71:5a:fe:d3:df:36:eb:b7:a2:56:59:d7:
                    f7:9b:cf:ee:ce:5b:72:92:f3:0b:8a:fc:f9:dd:71:
                    96:f3:dc:2b:df:2c:52:45:6b:ac:df:96:ff:fe:36:
                    6f:e3:89:a8:77:86:7c:30:6a:63:ff:c7:39:dc:94:
                    68:cd:fb:fe:15:26:48:e8:c1:28:3d:54:80:dc:c5:
                    dd:37:f3:b5:c6:07:07:c6:75:42:bb:ef:f8:f7:7e:
                    00:92:2c:b6:d4:24:e8:2d:67:21:1b:b7:3f:ac:11:
                    5e:4f:2c:76:3f:e1:e8:4a:89:8d:1b:4c:76:4a:bf:
                    ad:c9:ae:46:5d:fe:17:ba:6a:5e:5a:7f:40:7f:95:
                    94:d4:b3:68:92:bb:19:6d:ba:2c:82:2a:ac:1f:5d:
                    35:6a:33:c7:9c:d9:00:60:44:34:60:c8:d4:20:8f:
                    8b:22:5a:ea:6a:ac:9d:80:58:af:ba:95:31:8f:14:
                    2c:3a:a8:0f:f2:48:69:6f:d0:90:28:53:48:b9:93:
                    36:4f:87:c9:44:c3:68:9b:47:8f:1e:bf:80:15:e3:
                    47:56:ce:27:fa:4c:11:db:ff:da:d6:8b:8f:f0:99:
                    ea:3d:04:8a:a2:39:3d:d4:75:ad:ef:44:7b:8d:45:
                    1f:c8:bb:49:2b:3c:42:5b:7a:f0:d5:a4:7c:0a:c5:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A1:7F:14:8B:85:AE:06:80:1B:54:9D:B0:C6:F9:3D:34:E0:74:53
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:25:ef:0d:d0:d0:50:3c:30:ac:46:66:20:6e:b3:ef:ae:
         73:68:79:49:38:e0:aa:34:f0:04:49:69:6a:d7:5c:24:6e:ad:
         4c:ff:be:21:77:77:c6:79:4b:0c:44:4e:c8:10:29:5f:f8:28:
         e8:fd:cf:2b:a7:fe:77:10:d5:c0:47:c1:29:d4:51:fe:a0:64:
         23:dd:d1:c9:2e:39:b8:d8:4a:00:4a:b5:c3:63:df:1e:29:4a:
         ca:a0:cd:0b:90:55:80:f1:68:19:13:c5:41:44:af:37:16:2d:
         00:c9:dd:cd:a9:e7:af:88:b7:f3:a4:60:10:e4:ce:43:47:a9:
         a3:ef:87:4d:29:18:27:1d:bd:8c:9c:df:79:eb:ef:50:37:ec:
         54:64:ff:38:5e:5a:06:fd:32:e4:1c:66:c3:ca:6c:4a:9c:b2:
         ad:7a:c0:cf:80:98:7c:e0:2d:81:ad:dc:ac:82:63:9e:2f:bc:
         b1:92:d9:61:b8:62:58:39:41:dd:95:49:11:f0:b0:65:a9:17:
         3c:4a:82:c7:ae:58:25:42:19:dc:c0:f8:65:5c:f2:25:4c:1a:
         5b:e9:6f:c6:19:4c:ff:37:56:7d:5f:1f:ee:fb:4b:78:8a:c7:
         f3:db:91:aa:6c:8d:69:09:48:0c:7c:95:89:1f:93:da:d9:1d:
         21:11:2a:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz
QzBDRUNBMzIwHhcNMjUxMjI4MTcwMDUzWhcNMjYwMTA0MTcwMDUzWjAYMRYwFAYD
VQQDDA02OTUxNjI0NS1iNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbdxWv7T3zbrt6JWWdf3m8/uzltykvMLivz53XGW89wr3yxSRWus35b//jZv
44mod4Z8MGpj/8c53JRozfv+FSZI6MEoPVSA3MXdN/O1xgcHxnVCu+/4934Akiy2
1CToLWchG7c/rBFeTyx2P+HoSomNG0x2Sr+tya5GXf4XumpeWn9Af5WU1LNokrsZ
bbosgiqsH101ajPHnNkAYEQ0YMjUII+LIlrqaqydgFivupUxjxQsOqgP8khpb9CQ
KFNIuZM2T4fJRMNom0ePHr+AFeNHVs4n+kwR2//a1ouP8JnqPQSKojk91HWt70R7
jUUfyLtJKzxCW3rw1aR8CsX2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKihfxSL
ha4GgBtUnbDG+T004HRTMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4
QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp
VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtSCXvDdDQUDwwrEZmIG6z765zaHlJOOCqNPAESWlq11wkbq1M/74h
d3fGeUsMRE7IEClf+Cjo/c8rp/53ENXAR8Ep1FH+oGQj3dHJLjm42EoASrXDY98e
KUrKoM0LkFWA8WgZE8VBRK83Fi0Ayd3NqeeviLfzpGAQ5M5DR6mj74dNKRgnHb2M
nN956+9QN+xUZP84XloG/TLkHGbDymxKnLKtesDPgJh84C2BrdysgmOeL7yxktlh
uGJYOUHdlUkR8LBlqRc8SoLHrlglQhncwPhlXPIlTBpb6W/GGUz/N1Z9Xx/u+0t4
isfz25GqbI1pCUgMfJWJH5Pa2R0hESoZ
-----END CERTIFICATE-----
Generated at Sun Dec 28 18:51:53 2025 by rpki-client