This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File:                     i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier:          qQc4Dk0wmQyi44cn5ySojyQS0cPZcvgCFpUbc7uM4PM=
Subject key identifier:   B7:B4:94:43:7C:DF:6B:F1:EE:7E:92:B4:D3:4B:8E:9C:C4:AD:82:AE
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer:       /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number:          026F
Signing time:             Fri 19 Dec 2025 00:49:58 +0000
Manifest this update:     Fri 19 Dec 2025 00:49:58 +0000
Manifest next update:     Fri 26 Dec 2025 00:49:58 +0000
Files and hashes:         1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: nBBq19ME7+KY7jJpwmSjMDB8IP17TQ0Ow9bjXMApJ1E=)
                          2: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=)
                          3: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
        Validity
            Not Before: Dec 19 00:49:58 2025 GMT
            Not After : Dec 26 00:49:58 2025 GMT
        Subject: CN=6944a136-30a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:d8:f8:08:45:2e:f0:5c:aa:b2:fa:ee:b3:
                    ac:4a:cc:c5:eb:47:b6:c7:30:9a:ce:78:f9:24:db:
                    a0:6d:b4:f6:da:ff:6f:a4:4a:22:09:57:03:e9:b3:
                    d9:8f:f1:56:41:48:41:fa:2a:30:59:5b:3d:86:68:
                    7d:7b:62:fa:16:fc:33:81:08:5a:f7:de:59:1c:00:
                    a6:1b:55:04:8e:c2:14:c9:fe:06:6e:36:4e:df:ca:
                    df:c2:fe:32:88:74:38:d5:49:2b:c0:8e:50:84:10:
                    55:a6:c1:f6:36:84:a2:69:2e:13:44:e3:af:7b:98:
                    36:7d:4f:77:54:d6:b2:6f:35:44:67:a2:af:e5:93:
                    9d:45:b9:9b:f9:8d:f9:f2:e7:d3:43:88:0a:e8:cb:
                    e9:d0:8a:34:c4:84:66:37:52:f1:e0:46:4b:a1:da:
                    f3:1e:f8:29:29:c1:64:61:d2:24:b1:5f:58:61:a6:
                    44:74:3c:47:79:33:3f:92:77:45:93:ce:dc:06:22:
                    58:43:26:e4:64:e6:af:fe:e4:69:6a:3a:d9:3f:eb:
                    f9:d1:6d:9c:8f:e9:f3:79:4e:21:cf:77:3f:6d:aa:
                    70:6b:f1:b8:a1:53:55:27:29:be:d3:b1:98:8d:75:
                    23:70:e0:2a:cd:05:59:77:09:4f:28:77:53:07:5c:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B4:94:43:7C:DF:6B:F1:EE:7E:92:B4:D3:4B:8E:9C:C4:AD:82:AE
            X509v3 Authority Key Identifier:
                keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5e:72:e3:68:79:a2:6d:3d:c7:41:b4:bb:99:4f:41:50:1a:
         32:59:05:05:10:5b:ad:ca:1f:d9:fe:0b:9b:25:9e:14:28:71:
         e6:95:53:9c:37:6f:07:a0:d6:a6:aa:b2:a2:ed:1f:00:fb:d7:
         ed:d9:a6:37:97:4d:0b:47:b1:4c:bf:f1:9b:45:26:b7:6c:b1:
         da:a2:32:90:9d:1e:a1:17:6f:a0:9a:68:9b:b1:6c:7d:80:5f:
         75:1d:74:16:34:97:b0:63:dd:3e:32:d6:be:88:c4:4f:6e:8a:
         f0:de:89:16:54:eb:fe:80:c5:14:f6:a4:b1:4b:ca:ca:ce:92:
         75:16:99:cf:75:1a:a3:ee:a5:ec:39:30:a3:6a:5a:eb:41:5c:
         ba:37:46:b5:ed:d1:49:0d:e1:62:d7:a6:08:69:bf:ad:a0:d7:
         de:27:f6:75:4f:f0:45:fa:53:66:26:8a:60:e2:6a:f5:72:f1:
         ed:22:e2:d4:33:d3:4c:33:3e:40:9f:f5:25:ee:35:37:04:31:
         34:5c:36:26:55:8f:aa:43:97:9a:17:b1:66:2a:c1:1b:9e:11:
         af:cd:ce:58:bd:66:2c:fa:19:90:0a:b4:0b:99:ec:c3:cd:2a:
         a9:ad:5a:56:2f:c2:90:d3:ab:46:31:46:23:69:2c:49:ae:06:
         5f:f1:24:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB
MTk3QjlEN0MwHhcNMjUxMjE5MDA0OTU4WhcNMjUxMjI2MDA0OTU4WjAYMRYwFAYD
VQQDDA02OTQ0YTEzNi0zMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/XY+AhFLvBcqrL67rOsSszF60e2xzCaznj5JNugbbT22v9vpEoiCVcD6bPZ
j/FWQUhB+iowWVs9hmh9e2L6FvwzgQha995ZHACmG1UEjsIUyf4GbjZO38rfwv4y
iHQ41UkrwI5QhBBVpsH2NoSiaS4TROOve5g2fU93VNaybzVEZ6Kv5ZOdRbmb+Y35
8ufTQ4gK6Mvp0Io0xIRmN1Lx4EZLodrzHvgpKcFkYdIksV9YYaZEdDxHeTM/kndF
k87cBiJYQybkZOav/uRpajrZP+v50W2cj+nzeU4hz3c/bapwa/G4oVNVJym+07GY
jXUjcOAqzQVZdwlPKHdTB1ztlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe0lEN8
32vx7n6StNNLjpzErYKuMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB
MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq
VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9XnLjaHmibT3HQbS7mU9BUBoyWQUFEFutyh/Z/gubJZ4UKHHmlVOc
N28HoNamqrKi7R8A+9ft2aY3l00LR7FMv/GbRSa3bLHaojKQnR6hF2+gmmibsWx9
gF91HXQWNJewY90+Mta+iMRPborw3okWVOv+gMUU9qSxS8rKzpJ1FpnPdRqj7qXs
OTCjalrrQVy6N0a17dFJDeFi16YIab+toNfeJ/Z1T/BF+lNmJopg4mr1cvHtIuLU
M9NMMz5An/Ul7jU3BDE0XDYmVY+qQ5eaF7FmKsEbnhGvzc5YvWYs+hmQCrQLmezD
zSqprVpWL8KQ06tGMUYjaSxJrgZf8SSE
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:54:37 2025 by rpki-client