This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File:                     C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier:          tMwG+hWEksO6U5O7EgSyVXz9SL/aozZv84qdgrB9oZk=
Subject key identifier:   80:85:47:3C:B3:53:5C:D9:5B:E5:78:4D:43:59:C7:A2:B1:F1:BF:53
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer:       /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number:          0189
Signing time:             Sat 27 Dec 2025 02:33:35 +0000
Manifest this update:     Sat 27 Dec 2025 02:33:34 +0000
Manifest next update:     Sat 03 Jan 2026 02:33:34 +0000
Files and hashes:         1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: WeuNV5bgJKRBKgdZkpBJkFlmv4UIB4wQRavCKR/CtSE=)
                          2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
                          rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 02:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
        Validity
            Not Before: Dec 27 02:33:34 2025 GMT
            Not After : Jan  3 02:33:34 2026 GMT
        Subject: CN=694f457f-74e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:a8:a0:e8:f5:81:8b:a3:bd:65:e4:6a:41:
                    13:84:a1:30:44:e7:26:cf:06:6f:f8:34:07:0d:92:
                    6f:4b:c4:82:b0:ce:04:a5:a1:4a:13:57:26:06:40:
                    8c:c7:fc:62:e2:fa:01:6a:5e:9f:60:48:c6:b0:9e:
                    bc:5a:a9:41:e6:01:af:3c:fc:ad:85:60:c7:5a:dd:
                    33:20:bc:f7:b3:0c:cf:7e:59:5c:cc:5a:a2:5d:7c:
                    82:a5:34:dd:46:97:0a:b7:ad:a8:b6:ce:9d:f3:00:
                    fc:e5:23:e3:f1:01:5b:ed:bd:c6:46:c1:77:e9:8e:
                    80:01:96:68:5b:9d:ce:9f:74:d1:78:0d:77:31:6e:
                    dc:32:d2:a7:f0:3f:19:a5:af:56:0b:29:c3:7d:51:
                    5b:b5:40:4a:c0:f4:81:e4:69:62:06:2b:71:dc:1c:
                    57:78:ba:e6:50:01:f7:e6:66:66:a6:34:7e:0e:56:
                    9a:d6:7f:94:aa:18:a2:61:50:87:b3:5f:92:4d:a9:
                    b0:34:53:02:60:5b:31:5d:b9:39:73:93:50:6f:f6:
                    18:66:e8:d4:83:82:fc:e5:49:a0:12:05:af:61:11:
                    91:b4:e9:5e:c2:f6:9c:c6:c0:44:d9:21:56:c8:b3:
                    28:a4:aa:af:45:1f:d0:cb:7c:bc:7c:8a:14:82:61:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:85:47:3C:B3:53:5C:D9:5B:E5:78:4D:43:59:C7:A2:B1:F1:BF:53
            X509v3 Authority Key Identifier:
                keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:9e:41:bb:14:d8:8b:6b:93:7e:76:b4:10:1c:5a:e9:56:
         93:15:8f:a3:02:2b:66:e3:d9:00:93:ef:49:39:69:ab:c9:db:
         99:24:88:6a:56:17:bb:c0:ca:a0:5a:2b:b2:e1:a5:fe:0b:c7:
         1b:00:4f:29:ea:c9:7a:ab:6b:75:ea:0b:5d:1f:b2:49:3d:e6:
         bf:01:b2:14:b2:62:3d:e0:36:83:3c:26:a2:36:ed:b7:af:81:
         ee:6e:53:0c:0f:31:c0:bf:fb:09:bd:8e:42:0a:6a:0b:ce:62:
         b5:22:0a:e3:4c:11:a8:41:b1:c7:04:2c:1f:92:4a:ad:b4:0b:
         ec:32:9d:f1:bf:48:42:e6:00:39:3b:62:aa:0f:04:cf:bb:ff:
         3d:62:a1:3b:48:dc:ad:d2:82:11:2b:2d:85:87:74:e9:74:a0:
         6d:89:c6:d8:e0:06:ed:5f:d7:e1:9e:0c:7f:de:4c:5b:f3:fa:
         ad:c9:78:eb:aa:7b:97:7d:ed:28:e8:cc:c4:b9:47:34:a3:86:
         74:1d:c8:3a:89:90:74:1e:33:d6:3f:ce:ee:ed:cc:b6:0b:7a:
         cb:a3:95:60:35:87:ea:10:43:ff:3f:e2:c0:f9:ce:f3:69:1c:
         52:6b:ea:2b:47:96:f8:23:cd:85:2b:20:ff:d6:85:30:0d:c5:
         a7:e2:37:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux
RjYxQjQ5NEIwHhcNMjUxMjI3MDIzMzM0WhcNMjYwMTAzMDIzMzM0WjAYMRYwFAYD
VQQDDA02OTRmNDU3Zi03NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzGooOj1gYujvWXkakEThKEwROcmzwZv+DQHDZJvS8SCsM4EpaFKE1cmBkCM
x/xi4voBal6fYEjGsJ68WqlB5gGvPPythWDHWt0zILz3swzPfllczFqiXXyCpTTd
RpcKt62ots6d8wD85SPj8QFb7b3GRsF36Y6AAZZoW53On3TReA13MW7cMtKn8D8Z
pa9WCynDfVFbtUBKwPSB5GliBitx3BxXeLrmUAH35mZmpjR+Dlaa1n+UqhiiYVCH
s1+STamwNFMCYFsxXbk5c5NQb/YYZujUg4L85UmgEgWvYRGRtOlewvacxsBE2SFW
yLMopKqvRR/Qy3y8fIoUgmHZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICFRzyz
U1zZW+V4TUNZx6Kx8b9TMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz
NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw
NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnXJ5BuxTYi2uTfna0EBxa6VaTFY+jAitm49kAk+9JOWmryduZJIhq
Vhe7wMqgWiuy4aX+C8cbAE8p6sl6q2t16gtdH7JJPea/AbIUsmI94DaDPCaiNu23
r4HublMMDzHAv/sJvY5CCmoLzmK1IgrjTBGoQbHHBCwfkkqttAvsMp3xv0hC5gA5
O2KqDwTPu/89YqE7SNyt0oIRKy2Fh3TpdKBticbY4AbtX9fhngx/3kxb8/qtyXjr
qnuXfe0o6MzEuUc0o4Z0Hcg6iZB0HjPWP87u7cy2C3rLo5VgNYfqEEP/P+LA+c7z
aRxSa+orR5b4I82FKyD/1oUwDcWn4jeo
-----END CERTIFICATE-----
Generated at Mon Dec 29 01:50:30 2025 by rpki-client