This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File:                     pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier:          obytCspu9bH4sQcdmjdj6Kvp8XcQM2QzCZV5Cps/yl8=
Subject key identifier:   E9:68:82:B2:E6:A7:16:ED:CE:10:ED:57:F6:D0:1D:CB:50:D7:9A:3A
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer:       /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number:          C1
Signing time:             Sat 06 Dec 2025 18:24:38 +0000
Manifest this update:     Sat 06 Dec 2025 18:24:38 +0000
Manifest next update:     Sat 13 Dec 2025 18:24:38 +0000
Files and hashes:         1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: XJtAADStnGQhmAVCBvDy02DhLKfDz27CHADWDAdp3fE=)
                          2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pDBpwWzy3RFOzY6mOa1pibkze94QAdG3zJbynRenhAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
                          rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
        Validity
            Not Before: Dec  6 18:24:38 2025 GMT
            Not After : Dec 13 18:24:38 2025 GMT
        Subject: CN=693474e6-c164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:ed:0b:4a:b1:95:56:06:bb:b8:d2:11:9f:
                    5a:eb:fd:c5:dc:fe:76:36:01:52:58:08:30:42:f6:
                    91:d5:3c:cb:8a:b0:f1:77:02:c1:c6:07:59:29:98:
                    84:fa:37:92:d6:97:75:06:b2:a2:3f:62:e1:f4:ff:
                    88:13:20:0f:d6:f1:b1:3a:d8:6e:6b:c1:b5:54:5f:
                    da:34:b1:b0:26:90:50:62:02:b1:a8:e8:19:6f:25:
                    27:21:ba:8c:30:8e:76:76:70:09:1b:aa:fa:9d:08:
                    49:ae:9d:72:cf:11:e5:35:c9:b9:0b:80:0d:b1:3e:
                    69:3c:c4:d9:b8:97:3b:50:65:a5:ad:14:f6:58:a4:
                    00:b0:ec:0f:0b:67:ba:9b:2a:b1:8a:d6:c8:a4:eb:
                    1c:1d:a4:46:d0:77:86:07:85:f8:7c:ff:b6:b5:bc:
                    b5:ea:db:c9:8f:51:b3:fa:7c:26:ca:5d:d1:df:fc:
                    2c:70:10:01:2f:2a:44:63:5d:6b:1d:93:f2:c7:9e:
                    60:ec:94:c8:cb:be:f5:8a:c2:53:ed:55:57:79:52:
                    c6:c1:d1:b5:ad:b6:11:fc:b6:3c:2f:e8:11:45:a5:
                    64:10:45:b0:77:6b:55:d0:a0:fa:d2:a7:58:74:7e:
                    33:61:f7:51:eb:30:a3:97:0b:08:16:fd:94:11:28:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:68:82:B2:E6:A7:16:ED:CE:10:ED:57:F6:D0:1D:CB:50:D7:9A:3A
            X509v3 Authority Key Identifier:
                keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:58:4b:c3:5d:3b:18:55:fe:b0:e1:e6:13:6b:3b:e9:e0:7a:
         d5:f5:b7:53:1d:8d:33:e0:6e:e6:7b:eb:be:b0:95:a5:ae:db:
         2e:cd:eb:6d:fb:dd:6e:92:ca:11:3e:9d:42:f4:76:df:7f:81:
         89:a1:8f:10:60:ac:b3:59:ae:9c:35:e6:52:d5:2c:b5:c4:d1:
         34:30:13:cc:7f:99:d8:2c:81:ea:09:20:25:9a:68:34:23:8c:
         79:63:74:73:0d:e1:6c:3a:6b:33:65:31:f3:f0:f6:18:5c:44:
         a2:1c:5a:da:75:34:49:3e:f5:9d:fb:52:13:24:67:37:37:7d:
         98:1f:2c:37:f5:de:ce:bf:a2:2e:c5:a8:e3:35:68:d4:cf:43:
         a7:e7:99:fa:1c:67:b8:de:36:e7:bd:89:e3:af:30:96:33:ba:
         47:d0:70:5a:97:36:8e:9a:07:ab:9e:2f:6a:4e:af:cb:bf:08:
         14:a3:ff:ef:9c:ed:aa:22:6e:ff:39:45:4b:1b:51:81:b5:7a:
         5e:c5:82:17:73:8f:52:b9:3c:79:6d:85:38:fd:af:38:1c:d6:
         10:c4:18:ba:b6:e7:53:fc:db:57:49:40:9e:f1:60:de:3c:26:
         38:c9:64:83:c8:0f:bf:be:a0:51:60:a4:9c:a6:66:49:82:49:
         cb:28:53:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5
OUQyQzcyN0MwHhcNMjUxMjA2MTgyNDM4WhcNMjUxMjEzMTgyNDM4WjAYMRYwFAYD
VQQDEw02OTM0NzRlNi1jMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1rtC0qxlVYGu7jSEZ9a6/3F3P52NgFSWAgwQvaR1TzLirDxdwLBxgdZKZiE
+jeS1pd1BrKiP2Lh9P+IEyAP1vGxOthua8G1VF/aNLGwJpBQYgKxqOgZbyUnIbqM
MI52dnAJG6r6nQhJrp1yzxHlNcm5C4ANsT5pPMTZuJc7UGWlrRT2WKQAsOwPC2e6
myqxitbIpOscHaRG0HeGB4X4fP+2tby16tvJj1Gz+nwmyl3R3/wscBABLypEY11r
HZPyx55g7JTIy771isJT7VVXeVLGwdG1rbYR/LY8L+gRRaVkEEWwd2tV0KD60qdY
dH4zYfdR6zCjlwsIFv2UEShL4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlogrLm
pxbtzhDtV/bQHctQ15o6MB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE
QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM
MnVSSkd3LWd6WENaMHNjbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApWEvDXTsYVf6w4eYTazvp4HrV9bdTHY0z4G7me+u+sJWlrtsuzett
+91uksoRPp1C9Hbff4GJoY8QYKyzWa6cNeZS1Sy1xNE0MBPMf5nYLIHqCSAlmmg0
I4x5Y3RzDeFsOmszZTHz8PYYXESiHFradTRJPvWd+1ITJGc3N32YHyw39d7Ov6Iu
xajjNWjUz0On55n6HGe43jbnvYnjrzCWM7pH0HBalzaOmgerni9qTq/LvwgUo//v
nO2qIm7/OUVLG1GBtXpexYIXc49SuTx5bYU4/a84HNYQxBi6tudT/NtXSUCe8WDe
PCY4yWSDyA+/vqBRYKScpmZJgknLKFPt
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:07 2025 by rpki-client