This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File:                     0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier:          izWy48m02s9jmjLZUeHXFEViUUh1sZQ8Yf1D0/3QF5E=
Subject key identifier:   C5:DC:E1:7F:EB:8E:3F:4D:9D:AA:3F:96:71:49:3C:20:C1:18:DF:92
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer:       /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number:          11
Signing time:             Fri 05 Dec 2025 05:45:32 +0000
Manifest this update:     Fri 05 Dec 2025 05:45:31 +0000
Manifest next update:     Fri 12 Dec 2025 05:45:31 +0000
Files and hashes:         1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: 5/dXi4AjJweFlxoMa10CYW1ZzJ2QiisrLRpaTdQCZg8=)
                          2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: QTRHzthcKTfHq7lMpoI6Y/zfK2lWpwoDu2JMPtFs/1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
                          rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
        Validity
            Not Before: Dec  5 05:45:31 2025 GMT
            Not After : Dec 12 05:45:31 2025 GMT
        Subject: CN=6932717b-76ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:b4:2b:63:02:69:08:05:58:87:17:cc:0e:
                    78:e3:77:e5:7f:96:3c:dd:d3:3f:7f:32:05:1f:4e:
                    20:f3:2f:5e:fb:0f:5b:57:4c:ea:08:91:8f:67:55:
                    30:f8:59:23:06:78:aa:41:de:61:29:64:a4:d1:02:
                    1e:0d:70:a3:2b:a9:c0:03:d1:c6:35:48:7f:0b:81:
                    e8:ba:8d:2a:50:fa:a2:77:c9:0e:f3:de:0e:c6:77:
                    7b:af:5d:c5:64:33:1e:d7:19:2c:9d:f5:50:d6:e5:
                    b7:70:04:52:90:19:e0:50:00:92:6b:5f:b1:4c:21:
                    5b:f2:34:10:9c:78:72:21:2f:c2:38:b6:50:f8:b0:
                    4e:64:a3:50:22:8f:d3:42:df:29:c0:32:eb:12:8a:
                    c2:97:dc:c4:38:50:de:40:87:d3:85:c2:3b:c1:6f:
                    2d:eb:3d:20:98:d4:b9:8d:cc:74:a7:d7:89:7e:fd:
                    f4:fc:30:d3:41:53:13:67:8c:6d:28:82:96:5b:e7:
                    bc:3c:bc:32:22:9a:e4:47:04:c5:1a:f1:e3:bd:3f:
                    16:e9:9f:3b:a1:54:54:21:b3:88:34:c9:45:8e:e5:
                    5e:bc:04:93:99:95:09:81:09:ce:f4:38:e4:c0:68:
                    5a:68:d0:9c:36:37:8c:84:32:c9:2e:67:3d:38:0a:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DC:E1:7F:EB:8E:3F:4D:9D:AA:3F:96:71:49:3C:20:C1:18:DF:92
            X509v3 Authority Key Identifier:
                keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:90:cd:7d:54:aa:23:1b:24:09:2b:3d:33:78:c7:c9:91:
         6d:ea:5e:25:fa:36:cc:24:87:85:69:ef:1c:60:30:cd:ea:9c:
         4c:d7:6f:54:09:0a:d6:d4:42:66:ea:40:42:c9:50:9e:6a:93:
         b3:5c:80:ba:66:76:37:0c:40:d4:ab:7f:94:69:27:59:28:4e:
         51:1d:e1:fb:85:1e:a7:7d:b0:07:c6:94:38:22:09:82:0d:92:
         59:44:c4:a8:a6:0a:10:92:e8:5b:c4:8e:69:d0:58:c5:49:d6:
         94:b2:79:d5:70:c2:e0:ea:28:bb:aa:dd:b6:a4:dc:ea:1b:df:
         cf:7e:1b:76:6c:1f:71:67:a2:83:29:02:de:ae:0d:7a:54:25:
         85:e1:b3:36:32:9d:56:fb:c8:fc:10:5c:df:f9:22:1b:93:6f:
         e8:04:21:a9:83:af:dd:8b:6c:78:75:73:9e:a9:b0:2a:d2:44:
         00:ae:ac:e4:eb:50:1b:72:47:36:a0:05:b3:f0:39:c4:eb:48:
         cb:a0:6f:33:c3:00:44:bb:61:18:82:f6:46:09:c5:7b:09:b9:
         38:9a:7c:cb:ef:c2:53:a5:04:c2:84:17:1f:ca:3a:bd:2d:96:
         d0:3a:f5:09:b8:51:51:7c:7b:fa:f2:b6:63:54:05:41:98:a6:
         a4:c6:fa:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjY2NzExMC8GA1UEBRMoRDBGNjM4QzVCOThBRThBRkNENkNFRTA1MDM4MjQxOTc0
MDlDM0U5MzAeFw0yNTEyMDUwNTQ1MzFaFw0yNTEyMTIwNTQ1MzFaMBgxFjAUBgNV
BAMTDTY5MzI3MTdiLTc2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8+7QrYwJpCAVYhxfMDnjjd+V/ljzd0z9/MgUfTiDzL177D1tXTOoIkY9nVTD4
WSMGeKpB3mEpZKTRAh4NcKMrqcAD0cY1SH8Lgei6jSpQ+qJ3yQ7z3g7Gd3uvXcVk
Mx7XGSyd9VDW5bdwBFKQGeBQAJJrX7FMIVvyNBCceHIhL8I4tlD4sE5ko1Aij9NC
3ynAMusSisKX3MQ4UN5Ah9OFwjvBby3rPSCY1LmNzHSn14l+/fT8MNNBUxNnjG0o
gpZb57w8vDIimuRHBMUa8eO9PxbpnzuhVFQhs4g0yUWO5V68BJOZlQmBCc70OOTA
aFpo0Jw2N4yEMskuZz04CvCnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxdzhf+uO
P02dqj+WcUk8IMEY35IwHwYDVR0jBBgwFoAU0PY4xbmK6K/NbO4FA4JBl0CcPpMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNjY3LzkxNTkyQjRBQkI5
QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1Bw
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMFBZNHhibUs2S19OYk80RkE0SkJsMENjUHBNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
NjY3LzkxNTkyQjRBQkI5QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktf
TmJPNEZBNEpCbDBDY1BwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJvgkM19VKojGyQJKz0zeMfJkW3qXiX6Nswkh4Vp7xxgMM3qnEzXb1QJ
CtbUQmbqQELJUJ5qk7NcgLpmdjcMQNSrf5RpJ1koTlEd4fuFHqd9sAfGlDgiCYIN
kllExKimChCS6FvEjmnQWMVJ1pSyedVwwuDqKLuq3bak3Oob389+G3ZsH3FnooMp
At6uDXpUJYXhszYynVb7yPwQXN/5IhuTb+gEIamDr92LbHh1c56psCrSRACurOTr
UBtyRzagBbPwOcTrSMugbzPDAES7YRiC9kYJxXsJuTiafMvvwlOlBMKEFx/KOr0t
ltA69Qm4UVF8e/rytmNUBUGYpqTG+n8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:42:26 2025 by rpki-client