This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File:                     P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier:          CXEB2yh1XcYO6QsGxG4kMlAT3u48Dmw3k/xpSyajS3c=
Subject key identifier:   B3:58:58:B2:F3:9E:C8:37:47:FA:0B:FD:C8:C7:EB:0E:7B:AA:A4:18
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer:       /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number:          0226
Signing time:             Fri 19 Dec 2025 01:19:04 +0000
Manifest this update:     Fri 19 Dec 2025 01:19:04 +0000
Manifest next update:     Fri 26 Dec 2025 01:19:04 +0000
Files and hashes:         1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: ye4R8MKHUB3c1TPEexCA2RQYguPCKC5S0cnjl89wqRc=)
                          2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: DFdPG99faL2Uy7SH7Qallz1187Os6wr5b2O19nIz8q8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
        Validity
            Not Before: Dec 19 01:19:04 2025 GMT
            Not After : Dec 26 01:19:04 2025 GMT
        Subject: CN=6944a808-6a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:fa:24:7e:03:fe:66:2f:a1:11:d0:21:03:
                    69:24:b0:81:af:cf:e9:88:c3:7b:00:45:7c:f0:6a:
                    35:cf:ef:1b:4c:a1:66:fc:4a:30:23:3b:f7:7e:31:
                    87:3b:30:aa:a9:8e:11:97:55:47:aa:7c:e5:2d:e6:
                    ce:c5:31:29:4c:dc:60:3d:a7:51:c4:4e:7b:21:98:
                    ba:49:8e:81:0f:d1:5c:79:79:a7:f5:35:f9:63:78:
                    27:4e:3d:0a:b7:91:46:29:cd:f8:a2:ce:c0:10:a6:
                    45:aa:0f:7d:d5:b7:fd:7f:19:22:39:3f:cb:29:36:
                    b8:e5:95:60:74:52:48:4a:e0:cf:b4:f9:69:61:82:
                    86:22:ca:e5:89:30:96:8d:c5:5d:94:2f:d1:1a:99:
                    f7:07:5e:2f:1f:da:82:85:2c:3c:c9:bb:92:f2:da:
                    8f:1e:23:95:a3:c1:6e:2c:f1:b8:95:55:17:e6:3e:
                    e4:c0:8e:8c:f0:64:3c:76:88:37:87:92:69:66:59:
                    34:77:72:b9:8d:a9:b7:8e:6a:a6:8c:53:28:ce:55:
                    df:03:c3:a5:53:7b:7f:d8:90:59:76:12:63:38:6f:
                    b8:74:6e:8c:64:e8:53:52:96:2d:c5:62:f1:04:ee:
                    2c:0f:e9:97:ce:dc:45:21:86:49:ef:44:5f:a1:df:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:58:B2:F3:9E:C8:37:47:FA:0B:FD:C8:C7:EB:0E:7B:AA:A4:18
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:83:73:03:fb:9e:a2:3a:95:a2:62:fd:0a:a3:a0:59:7e:b5:
         38:3d:3e:5f:52:ae:33:fe:d6:cb:d1:8f:a9:d2:23:b7:97:df:
         7d:87:f7:bf:7d:81:d3:43:eb:c5:a3:74:69:73:50:e0:c7:23:
         5f:6f:e6:85:4b:2b:c8:c8:77:bf:a7:bb:ff:48:a7:c7:e5:59:
         db:2c:94:e1:84:d9:2c:cc:5a:34:e9:27:87:c6:ab:e0:53:21:
         62:fe:af:8d:b4:c1:6d:f4:40:83:00:65:c4:08:e5:ca:36:34:
         ca:e7:c9:86:c0:1c:50:b8:74:62:1e:d8:bd:b6:1e:b5:72:4f:
         73:ac:14:b5:6f:2f:12:46:db:05:c8:bd:6d:bb:02:6d:a5:e1:
         0a:bf:bd:88:f6:43:64:39:ef:b1:b0:35:5a:00:26:6b:8e:34:
         36:15:07:b0:9a:ca:ac:c2:37:45:a1:ce:c1:65:33:34:5f:16:
         3f:2f:bf:95:fe:1b:4d:89:2e:59:f6:d2:1c:ff:9e:b6:c0:f8:
         23:a6:42:91:c5:30:d5:0d:5e:56:a7:fe:7d:50:0c:e7:25:5c:
         0a:1f:c0:ae:62:dd:8e:cb:c0:ee:4e:d0:2b:26:98:62:42:c1:
         42:bf:e9:d7:de:d5:f7:05:71:b6:d7:3b:46:4c:65:4c:14:a4:
         6d:8b:db:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2
RjJCMDYxNDgwHhcNMjUxMjE5MDExOTA0WhcNMjUxMjI2MDExOTA0WjAYMRYwFAYD
VQQDDA02OTQ0YTgwOC02YTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04j6JH4D/mYvoRHQIQNpJLCBr8/piMN7AEV88Go1z+8bTKFm/EowIzv3fjGH
OzCqqY4Rl1VHqnzlLebOxTEpTNxgPadRxE57IZi6SY6BD9FceXmn9TX5Y3gnTj0K
t5FGKc34os7AEKZFqg991bf9fxkiOT/LKTa45ZVgdFJISuDPtPlpYYKGIsrliTCW
jcVdlC/RGpn3B14vH9qChSw8ybuS8tqPHiOVo8FuLPG4lVUX5j7kwI6M8GQ8dog3
h5JpZlk0d3K5jam3jmqmjFMozlXfA8OlU3t/2JBZdhJjOG+4dG6MZOhTUpYtxWLx
BO4sD+mXztxFIYZJ70Rfod/gWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNYWLLz
nsg3R/oL/cjH6w57qqQYMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG
REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds
dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQg3MD+56iOpWiYv0Ko6BZfrU4PT5fUq4z/tbL0Y+p0iO3l999h/e/
fYHTQ+vFo3Rpc1DgxyNfb+aFSyvIyHe/p7v/SKfH5VnbLJThhNkszFo06SeHxqvg
UyFi/q+NtMFt9ECDAGXECOXKNjTK58mGwBxQuHRiHti9th61ck9zrBS1by8SRtsF
yL1tuwJtpeEKv72I9kNkOe+xsDVaACZrjjQ2FQewmsqswjdFoc7BZTM0XxY/L7+V
/htNiS5Z9tIc/562wPgjpkKRxTDVDV5Wp/59UAznJVwKH8CuYt2Oy8DuTtArJphi
QsFCv+nX3tX3BXG21ztGTGVMFKRti9s+
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:43 2025 by rpki-client