This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          x8qEeZ17lbEkYyCmudqWYeMX/+Vy0dqc8r3Xgbq/FLI=
Subject key identifier:   F3:E7:91:32:6C:3D:A5:CE:C7:11:94:51:4B:7A:72:B1:82:40:21:8F
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          0202
Signing time:             Fri 19 Dec 2025 01:37:52 +0000
Manifest this update:     Fri 19 Dec 2025 01:37:51 +0000
Manifest next update:     Fri 26 Dec 2025 01:37:51 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: XPI7Baq/JKJxdFAIEA0yTzhFj5XWxfVLffzfVSOr1T4=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
                          rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Dec 19 01:37:51 2025 GMT
            Not After : Dec 26 01:37:51 2025 GMT
        Subject: CN=6944ac70-5394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:8e:ef:9a:a3:d4:6e:36:89:08:e3:45:41:
                    37:4e:07:2d:68:35:47:da:04:c5:59:4a:55:05:49:
                    f6:4b:61:2a:47:2c:6d:a6:6d:c4:cb:f5:78:f3:d3:
                    3f:36:77:7e:98:13:1d:a3:65:94:2d:af:9c:7a:cc:
                    3a:08:3a:8d:65:98:a2:de:93:ca:03:81:38:bd:a0:
                    09:03:ef:6a:b9:d4:be:22:4c:54:39:0a:7a:f1:ce:
                    88:4d:32:db:67:1a:08:83:a4:88:96:b2:36:df:36:
                    42:16:a1:03:81:6b:2f:af:7f:8a:76:4d:0e:a1:58:
                    12:51:b7:a3:47:8e:a0:91:30:f2:93:f2:53:e8:eb:
                    c5:c0:30:8b:98:d2:a2:6f:f4:62:33:38:dd:eb:1d:
                    fa:de:81:a1:63:49:da:85:07:a5:ec:96:7b:67:b3:
                    fd:da:fd:9e:07:40:0d:6d:d3:8d:9d:22:4d:6e:9b:
                    2a:49:5a:b6:81:6b:2e:ba:e4:c6:bc:fc:e7:90:d3:
                    79:7a:53:06:d2:28:bf:2a:1f:cc:f5:50:08:87:14:
                    a2:44:c5:9c:9b:8f:7a:b9:82:d6:51:23:a7:ca:05:
                    04:86:22:ca:d5:33:93:d2:1b:8f:28:8e:b6:6a:8b:
                    91:91:b7:99:fa:18:ee:6d:99:c3:d9:3e:09:09:58:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E7:91:32:6C:3D:A5:CE:C7:11:94:51:4B:7A:72:B1:82:40:21:8F
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:ca:e1:aa:67:db:ee:3a:ab:65:ce:c2:0a:56:80:d1:ee:
         48:93:b2:6d:5c:15:a9:af:10:84:e7:09:5b:b1:a5:ea:65:79:
         73:8a:20:e7:bb:00:93:5d:05:30:4e:fc:64:a9:38:17:34:55:
         f1:a1:09:3c:c9:21:58:5f:f3:2b:be:f4:05:0a:f3:67:ab:62:
         5d:4b:c6:a8:4f:68:4a:9d:55:87:a5:30:25:ef:3f:88:2a:10:
         88:80:3c:11:ec:e7:62:0e:4e:94:62:22:8f:2b:db:e0:c8:58:
         f9:93:f2:84:dc:6c:68:04:78:eb:7a:aa:27:ce:e0:b1:94:23:
         27:83:3a:e3:4f:1d:90:6a:14:32:38:60:0e:95:82:ed:3a:e9:
         d0:40:07:df:0f:b7:2a:13:ca:50:e0:5b:6f:cb:1e:64:42:80:
         0a:83:e9:19:29:b3:f6:be:94:f9:75:8f:80:f2:33:ed:86:dc:
         01:44:e4:05:7e:ee:47:a5:aa:6c:35:ba:ad:e0:16:a0:46:47:
         c4:af:03:3a:9f:36:71:5f:1f:0a:97:79:fa:c0:e0:c8:84:a8:
         0f:50:1b:3a:26:1b:26:52:3d:50:0d:8a:09:f2:37:67:e0:6e:
         96:e2:b2:e0:4f:b3:a6:ed:dc:7c:cb:30:38:d6:f4:51:da:4d:
         bb:7d:ce:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjUxMjE5MDEzNzUxWhcNMjUxMjI2MDEzNzUxWjAYMRYwFAYD
VQQDDA02OTQ0YWM3MC01Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6miO75qj1G42iQjjRUE3TgctaDVH2gTFWUpVBUn2S2EqRyxtpm3Ey/V489M/
Nnd+mBMdo2WULa+cesw6CDqNZZii3pPKA4E4vaAJA+9qudS+IkxUOQp68c6ITTLb
ZxoIg6SIlrI23zZCFqEDgWsvr3+Kdk0OoVgSUbejR46gkTDyk/JT6OvFwDCLmNKi
b/RiMzjd6x363oGhY0nahQel7JZ7Z7P92v2eB0ANbdONnSJNbpsqSVq2gWsuuuTG
vPznkNN5elMG0ii/Kh/M9VAIhxSiRMWcm496uYLWUSOnygUEhiLK1TOT0huPKI62
aouRkbeZ+hjubZnD2T4JCViBKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPnkTJs
PaXOxxGUUUt6crGCQCGPMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1ycrhqmfb7jqrZc7CClaA0e5Ik7JtXBWprxCE5wlbsaXqZXlziiDn
uwCTXQUwTvxkqTgXNFXxoQk8ySFYX/MrvvQFCvNnq2JdS8aoT2hKnVWHpTAl7z+I
KhCIgDwR7OdiDk6UYiKPK9vgyFj5k/KE3GxoBHjreqonzuCxlCMngzrjTx2QahQy
OGAOlYLtOunQQAffD7cqE8pQ4Ftvyx5kQoAKg+kZKbP2vpT5dY+A8jPthtwBROQF
fu5HpapsNbqt4BagRkfErwM6nzZxXx8Kl3n6wODIhKgPUBs6JhsmUj1QDYoJ8jdn
4G6W4rLgT7Om7dx8yzA41vRR2k27fc5k
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:01 2025 by rpki-client