This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File:                     tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier:          +LQyEYx1/ukH5uN4i1exabTC9/GW1FsvmU+b2BSujy4=
Subject key identifier:   A5:AC:36:35:F8:9D:8E:9C:4E:AE:4D:39:14:FE:94:F0:8A:0F:0D:00
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer:       /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number:          84
Signing time:             Fri 05 Dec 2025 04:38:13 +0000
Manifest this update:     Fri 05 Dec 2025 04:38:13 +0000
Manifest next update:     Fri 12 Dec 2025 04:38:12 +0000
Files and hashes:         1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: k0Fqkr/gWo3Ld6JhlmrD/877WlI6Gr0/31asBWpAZd8=)
                          2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: 9xmGjx6/ygbzmZES5SPZTo7PpjmH7n67UZFSuthwcDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
                          rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
        Validity
            Not Before: Dec  5 04:38:13 2025 GMT
            Not After : Dec 12 04:38:12 2025 GMT
        Subject: CN=693261b5-207b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:26:06:70:e4:f8:0f:ba:07:0f:42:2d:8e:
                    63:93:4e:3d:16:6c:69:ab:1c:2f:e3:b8:ef:03:8b:
                    3a:b8:9b:a8:0d:b6:34:9e:c4:05:7b:5b:fd:45:b6:
                    57:43:93:87:93:c3:14:98:1c:34:03:a5:94:31:03:
                    3b:37:12:b1:2e:42:12:3b:33:8d:52:af:a8:a5:9c:
                    15:57:ec:74:37:96:18:87:30:23:0e:16:1b:29:57:
                    4c:a4:a5:38:a5:e1:4c:3a:d7:77:81:6d:1b:6f:75:
                    5c:e1:cf:2d:3e:3c:7e:cc:ca:c4:6e:0e:cb:1d:74:
                    33:81:7f:0e:fe:00:07:a0:92:d7:3a:83:03:1d:0e:
                    c6:27:97:f9:80:6a:84:e0:dc:e4:c3:75:99:1c:a3:
                    54:54:10:f9:ec:32:59:34:3a:ce:1c:c9:cd:4b:15:
                    f7:7b:6b:16:38:f2:c8:b3:3b:60:18:7e:fd:83:1f:
                    18:c6:b0:26:23:7b:39:2e:37:45:6c:2f:ec:dc:50:
                    1c:c6:f7:6a:08:7a:a0:3f:33:22:a4:34:f7:8f:88:
                    31:ef:b9:1e:61:86:06:ba:f2:31:e8:68:9e:87:5e:
                    82:fb:4c:1c:b6:0a:1a:7e:ac:d5:bc:a8:08:68:5a:
                    a4:46:1b:45:35:94:71:6a:88:6f:8c:ea:c2:40:b0:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AC:36:35:F8:9D:8E:9C:4E:AE:4D:39:14:FE:94:F0:8A:0F:0D:00
            X509v3 Authority Key Identifier:
                keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:08:81:b0:a8:2b:92:86:e6:02:d7:70:8c:36:a2:83:f5:
         bf:60:3d:e9:31:2d:4d:6c:b2:bd:6f:00:37:10:b9:9f:43:52:
         f5:62:4c:23:6e:9c:28:ed:eb:78:e8:8b:89:92:ee:7e:54:78:
         80:66:89:86:10:37:83:ce:ab:6b:bc:ce:80:c7:9d:ff:fd:c5:
         cb:0f:79:67:3e:19:a4:23:09:0f:e2:83:78:cc:13:54:6e:7b:
         51:52:4c:2b:77:65:c6:55:1e:d5:4d:10:1e:08:60:a4:98:64:
         e1:ae:9a:45:8c:34:63:7d:81:58:15:85:7a:e6:56:1b:a5:e7:
         15:95:5e:d9:44:aa:68:f7:48:ef:9c:5e:e3:96:5f:8b:46:6b:
         90:a2:a7:fa:a9:b0:2c:fe:90:a9:c0:fa:2c:59:7c:b4:7c:ec:
         c9:97:0c:1e:e3:f2:5f:85:4f:8d:a6:ae:c4:fa:7f:e8:ca:09:
         61:74:2e:05:b1:89:5a:d9:cf:d1:d0:87:61:aa:0d:b6:2c:91:
         00:cc:d8:29:34:07:96:16:60:3a:55:54:72:56:17:d8:78:32:
         e6:28:55:c7:28:3c:7c:67:89:ea:24:e7:a4:31:aa:30:2a:2f:
         c3:1d:59:50:df:a6:94:b4:08:74:69:13:c0:d3:94:4c:15:de:
         f9:54:b8:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzExODExMTAvBgNVBAUTKEI0ODM5RjRGQzNGOEVERkNCRDIyREExQTc5OUQ4NjVB
Q0ZFMDMyNUYwHhcNMjUxMjA1MDQzODEzWhcNMjUxMjEyMDQzODEyWjAYMRYwFAYD
VQQDEw02OTMyNjFiNS0yMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1kmBnDk+A+6Bw9CLY5jk049Fmxpqxwv47jvA4s6uJuoDbY0nsQFe1v9RbZX
Q5OHk8MUmBw0A6WUMQM7NxKxLkISOzONUq+opZwVV+x0N5YYhzAjDhYbKVdMpKU4
peFMOtd3gW0bb3Vc4c8tPjx+zMrEbg7LHXQzgX8O/gAHoJLXOoMDHQ7GJ5f5gGqE
4Nzkw3WZHKNUVBD57DJZNDrOHMnNSxX3e2sWOPLIsztgGH79gx8YxrAmI3s5LjdF
bC/s3FAcxvdqCHqgPzMipDT3j4gx77keYYYGuvIx6Gieh16C+0wctgoafqzVvKgI
aFqkRhtFNZRxaohvjOrCQLDD+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWsNjX4
nY6cTq5NORT+lPCKDw0AMB8GA1UdIwQYMBaAFLSDn0/D+O38vSLaGnmdhlrP4DJf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE4MS9BQTA4N0Y3QTBC
NzkxMUYwQkI5OUVENkFDNEY5QUUwMi90SU9mVDhQNDdmeTlJdG9hZVoyR1dzX2dN
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01sOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTE4MS9BQTA4N0Y3QTBCNzkxMUYwQkI5OUVENkFDNEY5QUUwMi90SU9mVDhQNDdm
eTlJdG9hZVoyR1dzX2dNbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeNAiBsKgrkobmAtdwjDaig/W/YD3pMS1NbLK9bwA3ELmfQ1L1Ykwj
bpwo7et46IuJku5+VHiAZomGEDeDzqtrvM6Ax53//cXLD3lnPhmkIwkP4oN4zBNU
bntRUkwrd2XGVR7VTRAeCGCkmGThrppFjDRjfYFYFYV65lYbpecVlV7ZRKpo90jv
nF7jll+LRmuQoqf6qbAs/pCpwPosWXy0fOzJlwwe4/JfhU+Npq7E+n/oyglhdC4F
sYla2c/R0Idhqg22LJEAzNgpNAeWFmA6VVRyVhfYeDLmKFXHKDx8Z4nqJOekMaow
Ki/DHVlQ36aUtAh0aRPA05RMFd75VLjs
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:47 2025 by rpki-client