This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
File:                     exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json)
Hash identifier:          4uZTv2LCFJDLQYCVn30F202fV+uCjbYtm4yDx6Dv1tw=
Subject key identifier:   36:4C:72:7E:BF:C0:9B:6F:8B:F8:B6:B7:B7:46:2D:5E:9A:8E:E7:AC
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Certificate issuer:       /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
Manifest number:          0737
Signing time:             Thu 18 Dec 2025 21:13:14 +0000
Manifest this update:     Thu 18 Dec 2025 21:13:13 +0000
Manifest next update:     Thu 25 Dec 2025 21:13:13 +0000
Files and hashes:         1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: RDh4PovBxagdyogM484CZ2sYXRvI5MKQ3wTsr4Zw1vo=)
                          2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: j+SLkRZH2vvm2qi+dkzE/z5Oabn+2rsps1uNHGkmv7k=)
                          3: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: BAzJ3kqWS8LM+5cYcosGy9mSxoxPjvYNZBBQJtxyjWM=)
                          4: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: BaFLyya1TKBoY7+XhzGxuRAAndNMkd2YqYS4SQJwVwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
                          rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
        Validity
            Not Before: Dec 18 21:13:13 2025 GMT
            Not After : Dec 25 21:13:13 2025 GMT
        Subject: CN=69446e6a-363d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a5:82:f7:2c:c9:49:d6:c4:a7:9e:28:48:75:
                    90:98:4b:66:a5:56:5f:ce:82:32:aa:91:02:30:6b:
                    89:fc:1e:bf:a6:64:58:b7:50:3b:70:75:86:f3:f6:
                    c4:d7:4b:7e:87:73:6a:c7:c5:d3:f4:95:ab:5a:74:
                    04:fe:46:cd:45:d8:e5:57:17:2f:29:fe:03:42:ca:
                    ba:e0:8a:42:3f:b6:77:99:b6:d4:b0:79:76:b5:35:
                    47:d8:b7:d9:ff:37:4a:ab:28:14:b2:f7:b1:0a:6b:
                    62:5c:30:ed:11:f6:a2:f2:d0:11:8e:24:b1:a1:ac:
                    53:16:a0:aa:8b:3f:fa:b4:74:9a:17:ee:04:e0:c1:
                    dc:c1:39:39:14:bd:a9:2d:05:7d:b9:54:35:69:3f:
                    7e:06:39:f3:23:9b:fc:2d:78:e3:4a:b4:28:68:16:
                    eb:2c:12:99:b8:91:a2:d9:f1:f5:dc:20:93:ba:ff:
                    32:a3:7a:28:b0:65:58:42:f2:92:3b:e1:71:6d:31:
                    0d:c6:2c:93:c5:91:2e:5c:d7:bb:1e:a5:0a:5e:71:
                    9c:bb:2d:08:8f:c8:4a:aa:63:2b:53:85:96:f2:97:
                    8b:46:ec:85:c5:61:27:de:98:a8:8b:08:4f:e8:78:
                    d1:42:e5:95:c8:d9:76:47:31:a6:d6:8d:f4:07:6c:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4C:72:7E:BF:C0:9B:6F:8B:F8:B6:B7:B7:46:2D:5E:9A:8E:E7:AC
            X509v3 Authority Key Identifier:
                keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5b:db:d5:19:02:bd:d5:7c:00:8f:63:e5:a7:23:80:84:a3:
         5b:0c:1b:43:a3:51:15:e9:65:7c:fc:bc:f7:32:f1:6a:a7:87:
         dc:c4:60:a1:92:5f:74:ca:c9:49:9f:9b:83:92:fc:45:72:a2:
         85:33:0a:54:d0:42:e8:3a:f1:27:22:22:88:19:c0:d4:b6:38:
         9f:7b:b4:4e:b1:3d:50:c0:5c:54:79:d9:9e:67:a6:3b:4b:b9:
         6b:15:f0:8d:e7:ec:4a:8e:bb:47:8d:78:75:74:15:a0:47:7b:
         47:d2:3e:ba:41:34:5b:71:90:e1:03:da:2d:16:97:02:70:4b:
         3b:06:28:f4:05:6d:3e:fa:47:20:9b:11:d8:97:53:c8:f9:67:
         3a:0a:e9:9e:d8:b3:23:92:23:7b:50:6f:9b:32:e6:29:a4:2a:
         3d:77:f5:c2:06:b4:88:da:d5:6e:0b:52:a7:c6:0d:63:c6:e4:
         0f:61:4b:a5:19:0d:4d:a0:23:5d:86:91:2b:d4:65:fc:50:68:
         cd:56:50:dd:bc:9b:ad:26:c4:99:21:ee:47:e6:e2:43:5c:f9:
         4c:23:7c:10:f4:57:80:1e:08:6e:05:07:6f:78:b0:86:a0:6b:
         db:76:a1:dd:ce:48:1b:53:25:01:c7:a1:e4:31:17:90:61:5f:
         e4:ab:c3:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZCM0QxMTAvBgNVBAUTKDdCMTUwMTVEREI5Rjg0NDEyQTY3REIzRTI2RkVDQjRE
RENCQkQ5ODAwHhcNMjUxMjE4MjExMzEzWhcNMjUxMjI1MjExMzEzWjAYMRYwFAYD
VQQDDA02OTQ0NmU2YS0zNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KWC9yzJSdbEp54oSHWQmEtmpVZfzoIyqpECMGuJ/B6/pmRYt1A7cHWG8/bE
10t+h3Nqx8XT9JWrWnQE/kbNRdjlVxcvKf4DQsq64IpCP7Z3mbbUsHl2tTVH2LfZ
/zdKqygUsvexCmtiXDDtEfai8tARjiSxoaxTFqCqiz/6tHSaF+4E4MHcwTk5FL2p
LQV9uVQ1aT9+BjnzI5v8LXjjSrQoaBbrLBKZuJGi2fH13CCTuv8yo3oosGVYQvKS
O+FxbTENxiyTxZEuXNe7HqUKXnGcuy0Ij8hKqmMrU4WW8peLRuyFxWEn3pioiwhP
6HjRQuWVyNl2RzGm1o30B2xiFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZMcn6/
wJtvi/i2t7dGLV6ajuesMB8GA1UdIwQYMBaAFHsVAV3bn4RBKmfbPib+y03cu9mA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkIzRC8wRTk3OEU2NDU5
NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhFRXFaOXMtSnY3TFRkeTcy
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4VUJYZHVmaEVFcVo5cy1KdjdMVGR5NzJZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkIzRC8wRTk3OEU2NDU5NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhF
RXFaOXMtSnY3TFRkeTcyWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoW9vVGQK91XwAj2PlpyOAhKNbDBtDo1EV6WV8/Lz3MvFqp4fcxGCh
kl90yslJn5uDkvxFcqKFMwpU0ELoOvEnIiKIGcDUtjife7ROsT1QwFxUedmeZ6Y7
S7lrFfCN5+xKjrtHjXh1dBWgR3tH0j66QTRbcZDhA9otFpcCcEs7Bij0BW0++kcg
mxHYl1PI+Wc6Cume2LMjkiN7UG+bMuYppCo9d/XCBrSI2tVuC1Knxg1jxuQPYUul
GQ1NoCNdhpEr1GX8UGjNVlDdvJutJsSZIe5H5uJDXPlMI3wQ9FeAHghuBQdveLCG
oGvbdqHdzkgbUyUBx6HkMReQYV/kq8Pf
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:22:26 2025 by rpki-client