This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
File:                     30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json)
Hash identifier:          38t/YL4IQkTDEXwxCTvQ6obcTh66/Lhma/GxFuVRvVQ=
Subject key identifier:   9F:03:58:E2:8F:98:44:75:3E:85:7D:11:0B:6B:6F:F9:3C:24:D0:2D
Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
Certificate issuer:       /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
Manifest number:          F0
Signing time:             Fri 19 Dec 2025 04:28:17 +0000
Manifest this update:     Fri 19 Dec 2025 04:28:17 +0000
Manifest next update:     Fri 26 Dec 2025 04:28:17 +0000
Files and hashes:         1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: bJi9lw78yu6stcY9oQchoxsgyEpqeiiIElGXO1Av1RQ=)
                          2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: VymoAbVW0Xjer0qffAdo09mun74sopBFqTSpIfpfxa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
        Validity
            Not Before: Dec 19 04:28:17 2025 GMT
            Not After : Dec 26 04:28:17 2025 GMT
        Subject: CN=6944d461-9654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:5a:53:22:38:4a:23:a6:68:44:3e:c2:ec:
                    89:5f:da:90:1e:fc:cb:e1:bc:24:29:d0:af:02:fd:
                    83:2f:8b:ba:9f:97:81:36:8c:ad:3e:2b:f4:cb:be:
                    68:b9:9a:16:06:3c:79:8d:af:48:ed:42:a6:9c:c9:
                    d6:81:19:a5:79:de:76:05:d6:fd:dd:db:42:1c:57:
                    9b:27:cb:eb:ad:47:55:3f:90:3b:2a:3a:dc:9c:ff:
                    7d:5a:93:39:56:c8:57:47:9d:39:38:bd:5b:d2:48:
                    cb:f1:c0:f6:97:ab:30:37:5d:2d:35:e5:d6:3f:ee:
                    b0:d2:87:cf:17:bf:4d:c8:84:01:bd:86:f7:ed:eb:
                    25:a0:33:14:9a:6b:cf:a1:98:bf:e3:ff:4c:03:0a:
                    a7:5d:11:aa:7a:c0:8b:fb:11:e5:0d:8e:00:15:57:
                    e0:a2:44:56:72:77:c9:75:9e:46:a5:d3:98:37:bf:
                    9d:9e:74:98:c4:e6:5d:3a:bb:2b:c1:17:53:9a:00:
                    26:e3:3e:93:3d:48:32:10:97:3e:b5:72:01:2c:c2:
                    c4:2c:a8:bf:64:95:18:96:70:29:61:ec:41:bb:13:
                    2f:2e:59:07:8e:76:a3:69:7f:95:0e:b2:9d:1c:4d:
                    37:fd:f4:00:52:5e:3f:48:33:27:29:6e:30:b1:e9:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:58:E2:8F:98:44:75:3E:85:7D:11:0B:6B:6F:F9:3C:24:D0:2D
            X509v3 Authority Key Identifier:
                keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:ce:2d:c8:20:08:0b:f1:bc:da:ef:3e:96:c8:24:66:c1:
         f4:0d:7d:6d:44:c6:d1:fb:f6:d5:cb:af:35:6c:a6:53:39:ae:
         ce:2e:6f:04:a3:74:ac:c8:ab:1d:ec:b6:ee:06:0f:45:74:25:
         53:2a:6e:81:01:44:5e:b8:f4:4c:86:eb:fb:ae:c1:4f:51:a8:
         40:07:4e:9e:ab:23:e3:50:be:10:3a:51:e4:f2:60:91:26:32:
         ea:a7:07:8b:ca:35:92:59:31:3e:1c:20:85:88:45:dc:13:eb:
         10:d7:5f:16:09:47:dd:88:b7:3a:bc:2e:f1:7c:43:40:1e:7f:
         4a:ec:97:4c:eb:9c:59:04:e8:a5:94:6b:ba:65:aa:b0:55:61:
         72:87:9d:69:c4:ca:f7:f6:c3:53:ec:55:05:4d:f8:cc:fd:4b:
         70:1b:e4:bd:f2:21:3d:06:8d:2c:1c:07:cd:5c:77:86:5c:a2:
         09:84:43:7b:29:a4:dc:ce:5e:4b:fc:d7:20:c9:db:2b:8e:38:
         3d:a2:54:ef:4a:eb:d5:d1:64:0a:e7:c3:2f:28:c7:b3:d8:76:
         1a:45:c7:72:a8:c0:86:83:bd:6d:90:4f:7a:16:5e:b5:cd:88:
         3f:53:93:73:96:43:8d:10:0a:9c:87:07:e8:a1:d5:6d:ee:46:
         25:9f:7f:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy
NjBCQTk5MEUwHhcNMjUxMjE5MDQyODE3WhcNMjUxMjI2MDQyODE3WjAYMRYwFAYD
VQQDDA02OTQ0ZDQ2MS05NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4l5aUyI4SiOmaEQ+wuyJX9qQHvzL4bwkKdCvAv2DL4u6n5eBNoytPiv0y75o
uZoWBjx5ja9I7UKmnMnWgRmled52Bdb93dtCHFebJ8vrrUdVP5A7KjrcnP99WpM5
VshXR505OL1b0kjL8cD2l6swN10tNeXWP+6w0ofPF79NyIQBvYb37esloDMUmmvP
oZi/4/9MAwqnXRGqesCL+xHlDY4AFVfgokRWcnfJdZ5GpdOYN7+dnnSYxOZdOrsr
wRdTmgAm4z6TPUgyEJc+tXIBLMLELKi/ZJUYlnApYexBuxMvLlkHjnajaX+VDrKd
HE03/fQAUl4/SDMnKW4wsekgSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8DWOKP
mER1PoV9EQtrb/k8JNAtMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw
RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL
NjVhamhsVmd1ZkltQzZtUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqts4tyCAIC/G82u8+lsgkZsH0DX1tRMbR+/bVy681bKZTOa7OLm8E
o3SsyKsd7LbuBg9FdCVTKm6BAUReuPRMhuv7rsFPUahAB06eqyPjUL4QOlHk8mCR
JjLqpweLyjWSWTE+HCCFiEXcE+sQ118WCUfdiLc6vC7xfENAHn9K7JdM65xZBOil
lGu6ZaqwVWFyh51pxMr39sNT7FUFTfjM/UtwG+S98iE9Bo0sHAfNXHeGXKIJhEN7
KaTczl5L/Ncgydsrjjg9olTvSuvV0WQK58MvKMez2HYaRcdyqMCGg71tkE96Fl61
zYg/U5NzlkONEAqchwfoodVt7kYln3/u
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:59 2025 by rpki-client