This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File:                     CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier:          joHKnlHHzxKoxCH+nifq3LVDmnubRvZxj8crQSGH/rU=
Subject key identifier:   33:18:21:F8:A3:64:23:DB:F2:DD:CE:EA:0B:EB:A8:67:66:3B:63:40
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer:       /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number:          01C4
Signing time:             Sun 21 Dec 2025 02:11:41 +0000
Manifest this update:     Sun 21 Dec 2025 02:11:40 +0000
Manifest next update:     Sun 28 Dec 2025 02:11:40 +0000
Files and hashes:         1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: ExRyyXMnTFKRTiQOwLFespPmht7HqXjQ/67sqyJgqm0=)
                          2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
                          rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
        Validity
            Not Before: Dec 21 02:11:40 2025 GMT
            Not After : Dec 28 02:11:40 2025 GMT
        Subject: CN=6947575c-840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:07:6c:f4:54:44:60:92:72:54:01:58:27:
                    0e:fc:b7:6a:22:8a:40:47:4c:9e:29:ed:44:fa:dc:
                    40:65:b3:0c:cc:e1:d9:93:59:b2:0d:92:69:c7:b6:
                    e9:03:a2:29:71:0e:7a:c6:4f:22:98:0e:b0:68:13:
                    f3:b8:af:9b:14:1b:1c:1f:4c:ea:2d:40:f1:92:49:
                    02:74:e0:58:41:0f:db:24:a6:55:ee:48:09:fd:64:
                    df:22:f6:70:1d:5c:a7:62:88:d4:7c:7f:35:05:86:
                    5b:6a:34:23:e5:72:b3:3e:c1:b0:9b:ae:05:ba:40:
                    45:d1:33:4b:32:05:8d:c2:af:cc:b9:04:9d:83:63:
                    b3:41:f5:4b:68:8e:c0:33:71:df:f8:12:83:45:84:
                    5a:88:b4:6a:06:8d:ff:33:1b:b4:4b:8f:ea:2e:a2:
                    83:93:c6:1e:c7:5e:e2:d9:c6:9b:e1:fc:14:cd:f0:
                    22:3e:21:40:f5:60:67:52:85:5a:3c:37:bc:84:b6:
                    c7:e2:fb:0a:2c:62:d4:07:21:19:b6:af:01:61:b4:
                    fb:59:19:e3:aa:67:3c:c0:60:f8:1b:71:9e:16:f8:
                    16:ff:c1:c5:b9:33:a3:32:c1:fc:62:ca:0a:29:93:
                    c8:bf:5e:8a:58:85:dd:c4:64:ce:b9:49:65:f8:ac:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:18:21:F8:A3:64:23:DB:F2:DD:CE:EA:0B:EB:A8:67:66:3B:63:40
            X509v3 Authority Key Identifier:
                keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:20:2c:09:5b:d6:4e:f3:5d:28:dd:85:a0:2c:7c:7a:c1:
         ed:04:b7:f2:5d:27:31:0e:8b:1f:08:7a:c2:c5:15:20:71:b8:
         4d:5f:cb:b2:49:c1:6a:5e:e0:04:1b:6a:3d:37:d8:44:54:ca:
         df:30:96:e1:dd:a7:c5:40:5f:05:26:26:1c:fd:be:d2:85:9c:
         8c:21:24:13:69:34:75:46:fb:92:f6:2d:ca:84:be:1e:66:a3:
         57:8d:b2:69:9a:30:0e:82:92:7f:14:d3:3d:b5:e6:b9:48:ba:
         53:61:28:c2:31:2d:9e:9a:24:ba:4d:c1:de:3d:98:33:77:09:
         f9:0c:1d:08:b0:9e:47:0c:29:05:1f:ac:46:50:7c:4c:64:3b:
         e6:8a:b5:76:f1:7c:77:0b:d5:be:9e:0a:18:fa:17:8c:e5:c9:
         05:14:00:09:ac:17:6a:31:58:89:31:11:79:f1:22:6f:81:b3:
         34:42:eb:11:7f:aa:d6:95:88:92:c6:bb:52:da:00:1c:f2:37:
         65:06:9c:2f:6a:c0:22:60:81:64:44:65:79:93:ee:fa:df:c4:
         93:cd:ff:2d:bc:59:b9:88:cc:34:3f:0e:b7:85:7e:9a:8c:8e:
         30:fd:68:7d:ee:f6:b8:df:3c:1f:59:d6:7d:e4:e7:4f:6e:bc:
         ee:22:75:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2
QUFDN0JCMDAwHhcNMjUxMjIxMDIxMTQwWhcNMjUxMjI4MDIxMTQwWjAYMRYwFAYD
VQQDDA02OTQ3NTc1Yy04NDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0G8HbPRURGCSclQBWCcO/LdqIopAR0yeKe1E+txAZbMMzOHZk1myDZJpx7bp
A6IpcQ56xk8imA6waBPzuK+bFBscH0zqLUDxkkkCdOBYQQ/bJKZV7kgJ/WTfIvZw
HVynYojUfH81BYZbajQj5XKzPsGwm64FukBF0TNLMgWNwq/MuQSdg2OzQfVLaI7A
M3Hf+BKDRYRaiLRqBo3/Mxu0S4/qLqKDk8Yex17i2cab4fwUzfAiPiFA9WBnUoVa
PDe8hLbH4vsKLGLUByEZtq8BYbT7WRnjqmc8wGD4G3GeFvgW/8HFuTOjMsH8YsoK
KZPIv16KWIXdxGTOuUll+Kz7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMYIfij
ZCPb8t3O6gvrqGdmO2NAMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB
QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw
TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3GiAsCVvWTvNdKN2FoCx8esHtBLfyXScxDosfCHrCxRUgcbhNX8uy
ScFqXuAEG2o9N9hEVMrfMJbh3afFQF8FJiYc/b7ShZyMISQTaTR1RvuS9i3KhL4e
ZqNXjbJpmjAOgpJ/FNM9tea5SLpTYSjCMS2emiS6TcHePZgzdwn5DB0IsJ5HDCkF
H6xGUHxMZDvmirV28Xx3C9W+ngoY+heM5ckFFAAJrBdqMViJMRF58SJvgbM0QusR
f6rWlYiSxrtS2gAc8jdlBpwvasAiYIFkRGV5k+7638STzf8tvFm5iMw0Pw63hX6a
jI4w/Wh97va43zwfWdZ95OdPbrzuInVd
-----END CERTIFICATE-----
Generated at Sun Dec 21 12:01:24 2025 by rpki-client