This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
File:                     dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json)
Hash identifier:          os63PGyBiT1SITR3TVmi2hqeONxhjd3c4/kCLGKSdes=
Subject key identifier:   FB:B1:AC:56:ED:BE:17:CA:43:B8:7C:6E:96:CC:6B:32:E0:F8:E1:AC
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Certificate issuer:       /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial:       0394
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
Manifest number:          038E
Signing time:             Thu 04 Dec 2025 23:13:42 +0000
Manifest this update:     Thu 04 Dec 2025 23:13:41 +0000
Manifest next update:     Thu 11 Dec 2025 23:13:41 +0000
Files and hashes:         1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: tI1JTcvXd5qD93k1XRKh8PlhGbWcWCfPfNc+eESk8a4=)
                          2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
                          rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B
        Validity
            Not Before: Dec  4 23:13:41 2025 GMT
            Not After : Dec 11 23:13:41 2025 GMT
        Subject: CN=693215a5-12c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b8:f6:ba:85:f1:45:e5:f2:77:a5:92:08:43:
                    fd:36:98:f7:88:4f:6c:e5:73:fc:6d:45:73:23:44:
                    a5:05:75:da:3d:39:08:0f:d8:79:b5:f9:b4:de:bd:
                    cc:cb:3d:f7:30:13:09:cb:f3:8a:13:7d:58:42:9b:
                    8e:07:fb:3f:4d:b3:38:de:29:65:7c:a5:4d:f5:a5:
                    9d:b3:6e:b7:cd:dc:7d:27:11:9d:1f:7a:be:07:ed:
                    cd:eb:75:71:19:70:2b:10:83:9f:c5:79:71:6c:a4:
                    ea:cf:00:67:cf:00:95:d9:15:0e:d4:2d:ca:e0:d0:
                    bf:58:1d:60:af:63:24:c0:2e:11:fe:9d:1b:69:52:
                    0d:46:7f:2b:0e:df:2f:f8:ba:75:d7:b4:30:f9:9a:
                    06:af:54:31:46:05:d6:32:a6:79:20:56:51:b4:58:
                    a0:87:56:a3:b5:97:79:4f:d0:32:47:0c:aa:a2:14:
                    dc:f4:28:81:10:0e:54:e5:1c:e8:37:f1:eb:90:54:
                    24:a7:5a:be:d2:32:c2:8d:43:22:bc:4b:91:e8:6e:
                    8e:5f:f2:7a:ec:49:5a:8d:f8:17:b7:cf:12:52:23:
                    13:1f:d9:8a:37:ed:32:44:47:41:50:73:f3:0c:65:
                    4b:06:c7:28:d2:77:a2:4b:0e:d8:0b:e9:9b:d9:a5:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B1:AC:56:ED:BE:17:CA:43:B8:7C:6E:96:CC:6B:32:E0:F8:E1:AC
            X509v3 Authority Key Identifier:
                keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:8e:c9:6e:a6:49:d3:5c:4b:8c:d6:4a:d8:41:1d:9d:fa:
         b8:d7:fe:6c:cf:8e:11:0f:37:30:5d:0b:f4:e0:93:e8:56:5a:
         d8:c2:57:ff:fd:22:95:1a:fc:de:3c:58:7e:ae:21:55:51:24:
         3d:bf:5d:bc:34:0a:c9:03:5f:e3:9e:35:4a:6b:6b:fc:56:bc:
         04:fa:ad:9b:ea:e5:7c:46:c0:4c:c9:3a:74:d2:f9:be:73:8a:
         a4:9c:e8:ed:9d:f0:76:6f:17:8d:34:4e:8e:e4:57:a0:e2:4c:
         a1:f5:11:e5:d5:51:19:10:9f:0c:c0:42:fa:1a:35:21:ff:69:
         e0:21:0e:5f:0e:f9:71:07:09:ee:da:41:08:be:56:27:cc:ba:
         bd:e6:b2:fe:8a:7c:56:09:de:0c:76:69:62:f0:2f:08:54:39:
         a6:53:55:fd:ee:40:79:8e:1e:53:ef:1f:e6:32:3b:a9:cf:f8:
         a6:c9:70:46:65:ec:13:33:4c:fb:6d:3e:59:0b:fb:01:21:64:
         a2:72:4d:d2:b7:96:98:7f:c1:fb:f4:cb:90:8d:d6:c0:08:21:
         f5:ac:4a:85:3c:c9:db:7e:2b:78:43:d4:c2:50:2e:7f:f6:a2:
         08:55:b4:55:15:41:08:b0:da:75:e0:24:b8:54:09:5a:15:8c:
         a7:24:48:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5
Qjg3MERFMUIwHhcNMjUxMjA0MjMxMzQxWhcNMjUxMjExMjMxMzQxWjAYMRYwFAYD
VQQDEw02OTMyMTVhNS0xMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+Lj2uoXxReXyd6WSCEP9Npj3iE9s5XP8bUVzI0SlBXXaPTkID9h5tfm03r3M
yz33MBMJy/OKE31YQpuOB/s/TbM43illfKVN9aWds263zdx9JxGdH3q+B+3N63Vx
GXArEIOfxXlxbKTqzwBnzwCV2RUO1C3K4NC/WB1gr2MkwC4R/p0baVINRn8rDt8v
+Lp117Qw+ZoGr1QxRgXWMqZ5IFZRtFigh1ajtZd5T9AyRwyqohTc9CiBEA5U5Rzo
N/HrkFQkp1q+0jLCjUMivEuR6G6OX/J67ElajfgXt88SUiMTH9mKN+0yREdBUHPz
DGVLBsco0neiSw7YC+mb2aVFbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuxrFbt
vhfKQ7h8bpbMazLg+OGsMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2
QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD
Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAu847JbqZJ01xLjNZK2EEdnfq41/5sz44RDzcwXQv04JPoVlrYwlf/
/SKVGvzePFh+riFVUSQ9v128NArJA1/jnjVKa2v8VrwE+q2b6uV8RsBMyTp00vm+
c4qknOjtnfB2bxeNNE6O5Feg4kyh9RHl1VEZEJ8MwEL6GjUh/2ngIQ5fDvlxBwnu
2kEIvlYnzLq95rL+inxWCd4Mdmli8C8IVDmmU1X97kB5jh5T7x/mMjupz/imyXBG
ZewTM0z7bT5ZC/sBIWSick3St5aYf8H79MuQjdbACCH1rEqFPMnbfit4Q9TCUC5/
9qIIVbRVFUEIsNp14CS4VAlaFYynJEgD
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:51 2025 by rpki-client