This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
File:                     0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft (raw, json)
Hash identifier:          hAKXiXmvYIo373TxTCeutbbP1hJyTho43OSDcGaukPE=
Subject key identifier:   45:55:0A:FF:26:FF:F6:D2:28:45:E9:BB:9C:4E:BD:67:0F:FE:EE:31
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Certificate issuer:       /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
Manifest number:          0726
Signing time:             Sat 06 Dec 2025 20:47:35 +0000
Manifest this update:     Sat 06 Dec 2025 20:47:35 +0000
Manifest next update:     Sat 13 Dec 2025 20:47:35 +0000
Files and hashes:         1: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl (hash: VNemPw3iFABk2Y2rmzd4N8STcbXmYqsbRsmHIG2Apd4=)
                          2: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (hash: 8i4ad6LrRcxPKcbznzNvi2BM6i3jnmiOquYCkcN8Y1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
                          rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913397F, serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
        Validity
            Not Before: Dec  6 20:47:35 2025 GMT
            Not After : Dec 13 20:47:35 2025 GMT
        Subject: CN=69349667-a93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:53:a9:a1:14:ba:2e:67:b3:76:4a:48:7c:
                    1e:c1:8a:85:73:79:5c:c7:bc:20:46:21:b2:9e:05:
                    55:3a:03:52:59:02:e5:9c:63:43:30:85:44:ca:16:
                    c7:69:0d:fa:9c:a3:21:39:c6:c1:5b:19:e9:3e:ed:
                    8a:ff:7c:95:65:b2:e2:c2:93:b2:88:94:f8:2a:95:
                    cd:41:18:1e:c3:1b:43:bb:00:e7:2c:74:b9:d0:d7:
                    23:6d:f8:f1:b0:6d:e3:e2:65:b7:3d:b9:8c:05:27:
                    5b:fe:a8:fb:3e:ca:83:25:0b:b3:90:37:5f:7f:86:
                    74:a6:0f:4c:69:9d:7a:cb:8f:03:bf:4b:39:cc:ee:
                    21:2b:1b:eb:2c:ec:3a:23:17:69:e7:3d:a1:2c:e7:
                    f9:73:aa:19:7b:f9:02:d0:c2:f2:a8:ae:8c:60:2e:
                    35:4e:06:7c:93:b1:57:65:3e:9d:4f:b1:2d:b8:48:
                    b4:c8:1a:35:a9:51:2d:2d:7c:bc:d3:c1:70:44:0b:
                    4b:35:3c:d5:c0:33:49:06:8f:c1:94:18:74:b6:c8:
                    d4:98:69:db:b9:16:95:56:d7:e6:37:93:0c:7a:f8:
                    4d:34:1e:ce:5b:5f:9d:d5:f4:8f:84:73:d1:28:f5:
                    6a:df:10:c5:e0:8a:c6:b7:b2:2b:1d:17:2e:b4:85:
                    1a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:0A:FF:26:FF:F6:D2:28:45:E9:BB:9C:4E:BD:67:0F:FE:EE:31
            X509v3 Authority Key Identifier:
                keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:12:a8:49:94:0e:c0:55:8a:e9:26:6d:08:ef:d3:43:7f:f5:
         27:e4:28:b4:e0:1f:2a:f4:11:b5:c0:be:dc:6c:66:b7:1a:b9:
         52:de:01:07:08:1f:bc:35:86:bc:30:e6:fc:e6:55:8c:8e:f9:
         17:12:47:1f:4f:88:16:19:c4:80:82:35:f3:76:11:97:06:df:
         25:98:6f:8b:a4:99:8a:27:63:b5:f8:74:28:e5:6d:72:52:f6:
         66:3c:c7:8b:c4:32:c5:2e:08:cd:0d:a6:1d:fd:02:54:09:17:
         43:a3:9e:6d:5e:08:99:02:a0:e1:0e:f7:7e:95:c3:f9:59:9d:
         b6:34:90:19:e7:85:32:b8:e9:1e:ad:90:7c:0c:a7:7e:e4:b3:
         38:28:86:ff:e5:45:14:ef:95:f1:fa:5e:85:10:e9:e4:11:60:
         fb:f8:69:05:f8:ef:2b:af:67:21:32:84:38:43:1d:07:79:d1:
         28:88:93:59:a7:ed:ab:6a:e0:ef:33:04:b2:c2:1d:f3:c1:f8:
         64:db:52:0c:e4:40:de:56:2d:9c:76:55:80:1a:ba:a4:90:18:
         c5:e0:22:0e:e3:97:89:b2:1c:99:f7:c0:e6:85:4a:ed:a1:ce:
         a8:5f:61:31:c4:9f:96:a0:82:e7:65:28:8c:8b:fa:38:0b:86:
         5c:30:29:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM5N0YxMTAvBgNVBAUTKEQyMzNCQjg4QjA4ODlCNjRGMTRGNTMxNUQ3MTYxM0FB
MTY3NEQwMDcwHhcNMjUxMjA2MjA0NzM1WhcNMjUxMjEzMjA0NzM1WjAYMRYwFAYD
VQQDEw02OTM0OTY2Ny1hOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYNTqaEUui5ns3ZKSHwewYqFc3lcx7wgRiGyngVVOgNSWQLlnGNDMIVEyhbH
aQ36nKMhOcbBWxnpPu2K/3yVZbLiwpOyiJT4KpXNQRgewxtDuwDnLHS50Ncjbfjx
sG3j4mW3PbmMBSdb/qj7PsqDJQuzkDdff4Z0pg9MaZ16y48Dv0s5zO4hKxvrLOw6
Ixdp5z2hLOf5c6oZe/kC0MLyqK6MYC41TgZ8k7FXZT6dT7EtuEi0yBo1qVEtLXy8
08FwRAtLNTzVwDNJBo/BlBh0tsjUmGnbuRaVVtfmN5MMevhNNB7OW1+d1fSPhHPR
KPVq3xDF4IrGt7IrHRcutIUaPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVVCv8m
//bSKEXpu5xOvWcP/u4xMB8GA1UdIwQYMBaAFNIzu4iwiJtk8U9TFdcWE6oWdNAH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk3Ri9GRjk4RDY4QTVB
NDYxMUVCQTAyNkRFMjNDNEY5QUUwMi8wak83aUxDSW0yVHhUMU1WMXhZVHFoWjAw
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBqTzdpTENJbTJUeFQxTVYxeFlUcWhaMDBBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mzk3Ri9GRjk4RDY4QTVBNDYxMUVCQTAyNkRFMjNDNEY5QUUwMi8wak83aUxDSW0y
VHhUMU1WMXhZVHFoWjAwQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwEqhJlA7AVYrpJm0I79NDf/Un5Ci04B8q9BG1wL7cbGa3GrlS3gEH
CB+8NYa8MOb85lWMjvkXEkcfT4gWGcSAgjXzdhGXBt8lmG+LpJmKJ2O1+HQo5W1y
UvZmPMeLxDLFLgjNDaYd/QJUCRdDo55tXgiZAqDhDvd+lcP5WZ22NJAZ54UyuOke
rZB8DKd+5LM4KIb/5UUU75Xx+l6FEOnkEWD7+GkF+O8rr2chMoQ4Qx0HedEoiJNZ
p+2rauDvMwSywh3zwfhk21IM5EDeVi2cdlWAGrqkkBjF4CIO45eJshyZ98DmhUrt
oc6oX2ExxJ+WoILnZSiMi/o4C4ZcMCkK
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:41 2025 by rpki-client