This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
File:                     m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft (raw, json)
Hash identifier:          dLGeLTm4XFmBbOecV97aT2TNbtzx41ztYlQG7d1GEDc=
Subject key identifier:   D2:57:EA:1B:95:65:C8:9B:76:75:25:74:95:42:C9:10:CD:9B:8C:51
Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF
Certificate issuer:       /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
Certificate serial:       0E85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
Manifest number:          0E74
Signing time:             Thu 18 Dec 2025 17:32:29 +0000
Manifest this update:     Thu 18 Dec 2025 17:32:29 +0000
Manifest next update:     Thu 25 Dec 2025 17:32:29 +0000
Files and hashes:         1: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl (hash: 4HG+L3ruoNgem2QqmKIeMn0HaFv3JYqXDlveUgWXoGQ=)
                          2: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (hash: 8NVpsPcDMGoWQFQIPCX3JaQvzLbOvfMFg7LvyCj+VbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl
                          rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3717 (0xe85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115854, serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
        Validity
            Not Before: Dec 18 17:32:29 2025 GMT
            Not After : Dec 25 17:32:29 2025 GMT
        Subject: CN=69443aad-8ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:e4:9b:e4:03:b2:79:f0:0d:56:13:6b:5b:
                    6e:7c:34:70:d9:18:04:dc:1b:0e:08:48:31:ab:18:
                    8a:a8:8f:cd:99:cb:e5:3b:f2:16:5f:fe:60:46:db:
                    73:f9:b8:7f:a0:94:2d:0e:a8:54:56:a8:b1:20:37:
                    f9:04:2d:3d:94:f7:b7:5c:00:65:99:21:08:b4:50:
                    7a:ff:e3:4c:2d:0d:3c:21:8a:65:32:08:0b:1a:0c:
                    04:c0:63:e9:70:ef:13:c8:93:fa:84:9a:51:4a:cc:
                    dc:bd:e4:5a:a9:67:f8:5c:54:fd:5c:7f:3d:8f:5d:
                    58:e1:37:bd:44:2c:65:e6:ee:6b:ac:95:b6:74:01:
                    2a:8a:e5:2f:50:10:41:d2:fb:7d:77:c4:6e:f0:ec:
                    e5:0f:b4:43:63:61:2d:46:b0:20:56:73:f2:72:88:
                    17:4c:55:7e:96:d8:fd:ce:25:e0:a0:d5:a2:88:a1:
                    d1:a6:b0:72:00:d6:00:d0:9b:27:90:b1:4d:93:ac:
                    7e:b4:90:2f:ec:b2:7e:e3:81:c2:5d:16:18:3c:74:
                    f3:86:1e:ef:b1:22:49:30:72:24:a3:88:ad:ce:70:
                    25:59:cd:01:45:00:93:b0:c3:ad:cc:ce:49:dd:64:
                    e2:8d:43:6c:52:45:56:e8:fe:5b:34:4f:7a:1d:2f:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:EA:1B:95:65:C8:9B:76:75:25:74:95:42:C9:10:CD:9B:8C:51
            X509v3 Authority Key Identifier:
                keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:75:20:63:7a:68:bb:63:2b:22:38:43:23:1d:b6:eb:c5:
         30:d7:44:9a:35:0f:23:c8:96:a1:42:3f:47:03:f7:11:01:78:
         5a:7d:63:34:77:55:55:fe:c4:48:73:7d:9e:26:ad:f7:85:44:
         64:09:2c:84:40:95:90:6a:12:ec:a4:03:91:ec:3f:c3:32:d1:
         67:90:41:04:e3:21:7d:96:14:82:68:5d:96:d4:a5:cd:4f:86:
         47:fb:c5:52:b9:00:36:0e:2f:e6:2d:eb:78:5d:4f:4f:1b:c2:
         94:e5:96:41:ca:c6:f1:3e:39:62:de:dc:61:03:5f:82:85:4b:
         39:0e:32:2b:62:5e:b2:36:e4:83:57:f9:15:f8:8d:4d:7c:4d:
         00:d7:63:bf:59:fb:e8:68:7a:fe:5e:21:c8:0e:08:b8:57:b0:
         3f:bb:92:10:46:ad:6f:3f:4b:21:11:9b:ec:ad:cb:f2:6c:da:
         54:61:3e:b7:af:c1:2f:bc:67:ce:44:43:a7:ac:12:d0:ba:74:
         1d:6b:ab:9f:b9:de:a5:72:cd:ec:63:c6:36:c7:e5:1d:75:fe:
         33:be:0c:56:f0:89:6a:91:db:e4:85:1a:13:ab:e8:dd:55:1c:
         f5:3b:6b:25:99:d5:b9:99:ad:60:b2:3a:e3:f0:4b:83:f4:af:
         a1:e0:6d:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU4NTQxMTAvBgNVBAUTKDlCQTM5NTFDQ0I1RDgzQTlGM0RDNEE3NUJFQTAxRkY1
QUZENzFGRkYwHhcNMjUxMjE4MTczMjI5WhcNMjUxMjI1MTczMjI5WjAYMRYwFAYD
VQQDDA02OTQ0M2FhZC04ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp47km+QDsnnwDVYTa1tufDRw2RgE3BsOCEgxqxiKqI/NmcvlO/IWX/5gRttz
+bh/oJQtDqhUVqixIDf5BC09lPe3XABlmSEItFB6/+NMLQ08IYplMggLGgwEwGPp
cO8TyJP6hJpRSszcveRaqWf4XFT9XH89j11Y4Te9RCxl5u5rrJW2dAEqiuUvUBBB
0vt9d8Ru8OzlD7RDY2EtRrAgVnPycogXTFV+ltj9ziXgoNWiiKHRprByANYA0Jsn
kLFNk6x+tJAv7LJ+44HCXRYYPHTzhh7vsSJJMHIko4itznAlWc0BRQCTsMOtzM5J
3WTijUNsUkVW6P5bNE96HS8dywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJX6huV
ZcibdnUldJVCyRDNm4xRMB8GA1UdIwQYMBaAFJujlRzLXYOp89xKdb6gH/Wv1x//
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTg1NC8zNjM4MEZBQUFD
QzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2bnozRXAxdnFBZjlhX1hI
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL202T1ZITXRkZzZuejNFcDF2cUFmOWFfWEhfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTg1NC8zNjM4MEZBQUFDQzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2
bnozRXAxdnFBZjlhX1hIXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJe3UgY3pou2MrIjhDIx2268Uw10SaNQ8jyJahQj9HA/cRAXhafWM0
d1VV/sRIc32eJq33hURkCSyEQJWQahLspAOR7D/DMtFnkEEE4yF9lhSCaF2W1KXN
T4ZH+8VSuQA2Di/mLet4XU9PG8KU5ZZBysbxPjli3txhA1+ChUs5DjIrYl6yNuSD
V/kV+I1NfE0A12O/WfvoaHr+XiHIDgi4V7A/u5IQRq1vP0shEZvsrcvybNpUYT63
r8EvvGfOREOnrBLQunQda6ufud6lcs3sY8Y2x+Uddf4zvgxW8IlqkdvkhRoTq+jd
VRz1O2slmdW5ma1gsjrj8EuD9K+h4G3N
-----END CERTIFICATE-----
Generated at Thu Dec 18 19:12:48 2025 by rpki-client