This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File:                     br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier:          Fg50wuAQJeWNoGMktaBbcibH+SwJlwxo4OQxXva4fLc=
Subject key identifier:   26:6C:27:63:8D:FE:08:7A:AB:BE:E8:EF:9B:8F:51:C6:B1:CA:81:98
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer:       /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial:       0B80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number:          0B26
Signing time:             Mon 22 Dec 2025 18:52:24 +0000
Manifest this update:     Mon 22 Dec 2025 18:52:23 +0000
Manifest next update:     Mon 29 Dec 2025 18:52:23 +0000
Files and hashes:         1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: weU9hjZIDijMruAn9nDpGf10QCK3YvHnrndq/0U7rq0=)
                          2: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: +GeY+3nzfxfGGtkbBKDt2xX2WXjnwHUxE0t1JDRZXWg=)
                          3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 5Zn/NXgpFmO6vwefOP5YQZGHnsLFk/qGC1rRCPIC8NI=)
                          4: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=)
                          5: 3061606C730211EE89A20645C4F9AE02.roa (hash: WeaTbMf7BP2O/+pSf493EUl2h+/ILCKWUynSWVLQ+8w=)
                          6: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: DeDkGdsN3N2xX3gJk6DxRPzTQe+BgFZ1qo1jOWYyHBQ=)
                          7: 121EADE62F7011EF82514126C4F9AE02.roa (hash: Ggk4L4L5OqKbvJnFw7W1rW5JJcN5Zt+SHJCIjJMSok0=)
                          8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: day2QfsK2GhqNsQUlv32u5aYAMW/wnELuNVvZR1uSgU=)
                          9: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: 5eFto7Xbd6SIdBIgHT1gzsw1kP93cMF3mG+IAAtdNqA=)
                          10: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 6RbxNEp3aAcRY9ABgjcNbqmStmri8VA4rw2gNzJyQ34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
                          rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
        Validity
            Not Before: Dec 22 18:52:23 2025 GMT
            Not After : Dec 29 18:52:23 2025 GMT
        Subject: CN=69499367-3734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:04:28:a5:80:43:99:55:cc:5e:9c:3b:d1:
                    26:88:77:bf:3c:01:5a:39:4d:ee:bb:c0:9a:76:61:
                    59:bb:11:7e:e6:32:7e:47:ce:ed:dd:54:94:c8:16:
                    e1:6f:29:cd:d7:68:65:10:87:2f:9a:90:52:ae:87:
                    6b:12:87:cb:bb:b9:0e:97:5b:d5:9a:9c:4b:bc:18:
                    79:f7:df:f7:96:05:ac:08:7a:f3:40:1b:ef:46:df:
                    c3:24:ef:64:77:de:e8:22:94:36:b2:13:d8:4e:b2:
                    58:f6:15:0b:24:80:f3:b9:6d:14:54:a2:a7:c2:bf:
                    71:f9:c8:a0:82:f9:fe:70:9a:9d:76:89:1d:b1:37:
                    94:48:3d:12:fb:a9:f6:fa:40:d5:44:58:31:fd:32:
                    c6:62:07:07:56:3a:dd:ec:61:9c:3c:b8:45:97:12:
                    e9:fe:bd:22:8c:97:84:cd:b5:63:1b:89:2b:08:5e:
                    ea:be:a5:03:48:c3:86:89:87:a3:9a:2c:43:35:08:
                    13:42:fe:c9:90:17:78:93:94:7c:4b:63:fb:c2:d1:
                    88:74:9d:df:45:97:30:d1:66:03:9a:80:81:1a:6d:
                    dd:32:eb:ee:b7:f7:d9:7b:33:dd:c0:37:2c:cf:d8:
                    94:d7:04:ae:6b:1b:17:41:de:5a:25:de:02:2d:87:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6C:27:63:8D:FE:08:7A:AB:BE:E8:EF:9B:8F:51:C6:B1:CA:81:98
            X509v3 Authority Key Identifier:
                keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:13:f8:2c:f1:6d:9b:62:46:ad:7f:df:7d:01:39:44:81:
         c7:09:ed:8c:df:51:22:23:47:a3:e4:87:a6:62:1a:43:74:68:
         4d:18:aa:4a:86:2e:d8:71:15:2f:b2:c0:0b:0a:a7:c1:52:ce:
         85:54:2f:23:ef:18:bf:0f:64:c3:55:02:8b:87:fd:40:ef:1e:
         0f:ca:5f:a5:00:03:e5:94:12:a9:9f:1c:c5:82:fb:5b:50:80:
         b8:a3:83:61:2b:33:d3:ec:89:a9:54:99:1c:67:5e:5e:64:1c:
         5f:d0:12:56:63:51:db:a5:bf:18:6f:67:1b:6b:0e:fb:33:f1:
         ea:82:cc:cf:4f:16:58:74:33:f4:b3:e8:42:e1:e0:1f:54:fb:
         63:a3:81:2a:ab:90:99:2e:b9:1b:73:31:82:de:1d:a4:1e:c0:
         53:70:70:44:10:15:2e:b2:c6:bf:89:04:8e:33:4d:27:b7:55:
         ae:ba:af:8a:76:88:36:53:c6:fe:c5:0b:1b:93:08:8f:a8:c7:
         51:ba:1d:26:bb:28:53:c6:65:c8:46:fe:42:cc:ef:68:97:07:
         d4:ac:3e:28:f8:46:e5:ba:7a:27:dc:61:f1:89:90:e0:b9:a5:
         99:47:c4:bc:f0:19:28:bc:6b:75:10:84:db:6f:03:f6:6c:61:
         f6:7d:3a:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx
MEYzMEQ2MTgwHhcNMjUxMjIyMTg1MjIzWhcNMjUxMjI5MTg1MjIzWjAYMRYwFAYD
VQQDDA02OTQ5OTM2Ny0zNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyOcEKKWAQ5lVzF6cO9EmiHe/PAFaOU3uu8CadmFZuxF+5jJ+R87t3VSUyBbh
bynN12hlEIcvmpBSrodrEofLu7kOl1vVmpxLvBh599/3lgWsCHrzQBvvRt/DJO9k
d97oIpQ2shPYTrJY9hULJIDzuW0UVKKnwr9x+ciggvn+cJqddokdsTeUSD0S+6n2
+kDVRFgx/TLGYgcHVjrd7GGcPLhFlxLp/r0ijJeEzbVjG4krCF7qvqUDSMOGiYej
mixDNQgTQv7JkBd4k5R8S2P7wtGIdJ3fRZcw0WYDmoCBGm3dMuvut/fZezPdwDcs
z9iU1wSuaxsXQd5aJd4CLYfP2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZsJ2ON
/gh6q77o75uPUcaxyoGYMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF
QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq
cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmDRP4LPFtm2JGrX/ffQE5RIHHCe2M31EiI0ej5IemYhpDdGhNGKpK
hi7YcRUvssALCqfBUs6FVC8j7xi/D2TDVQKLh/1A7x4Pyl+lAAPllBKpnxzFgvtb
UIC4o4NhKzPT7ImpVJkcZ15eZBxf0BJWY1Hbpb8Yb2cbaw77M/HqgszPTxZYdDP0
s+hC4eAfVPtjo4Eqq5CZLrkbczGC3h2kHsBTcHBEEBUussa/iQSOM00nt1Wuuq+K
dog2U8b+xQsbkwiPqMdRuh0muyhTxmXIRv5CzO9olwfUrD4o+Eblunon3GHxiZDg
uaWZR8S88BkovGt1EITbbwP2bGH2fTrd
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:48:02 2025 by rpki-client