This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          7KBF1JKXlaSAt8r2u2QcOKbCEMXFHCKYlRjW1idtAXU=
Subject key identifier:   8B:B3:A5:DA:9F:B8:6D:0E:36:3F:BD:2F:B0:78:A6:16:47:D6:17:2A
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          63
Signing time:             Fri 05 Dec 2025 04:57:34 +0000
Manifest this update:     Fri 05 Dec 2025 04:57:34 +0000
Manifest next update:     Fri 12 Dec 2025 04:57:34 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: JLEaa8I0ZFYZl/Hc4CZxm6heIcfRV0061VWgUU7npeo=)
                          2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=)
                          3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Dec  5 04:57:34 2025 GMT
            Not After : Dec 12 04:57:34 2025 GMT
        Subject: CN=6932663e-5b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:a3:4b:5f:42:d9:2f:7c:2a:87:d2:22:c6:
                    ca:11:fb:3b:cb:0e:c5:b5:27:6c:7a:a8:04:3a:d2:
                    96:93:24:0c:a3:2f:c9:23:f0:f2:32:3b:3b:e4:8c:
                    98:b6:7a:a8:62:8a:06:ea:4b:62:f7:f0:91:a2:53:
                    34:38:e3:69:26:cf:7f:d0:7c:f9:92:83:6d:20:be:
                    4f:8c:fc:76:14:0f:fd:ab:64:44:a7:7f:33:fe:c8:
                    1b:ea:e4:76:34:8f:e9:6c:ab:e6:7d:5d:b4:42:87:
                    76:17:34:35:f1:c7:91:12:c1:9b:da:f2:94:a7:45:
                    38:57:c2:a5:87:b8:97:df:8a:8a:35:c5:83:13:18:
                    4a:0b:3b:5e:0c:1e:06:f9:9a:0b:0d:d0:77:5d:43:
                    8f:d2:61:53:59:f4:25:ba:56:20:84:39:31:00:63:
                    fa:0a:f9:75:59:13:0c:f5:67:fe:87:ab:a7:e0:89:
                    3f:5f:f7:7a:4e:12:89:0a:b9:1d:64:71:dc:c3:03:
                    5d:26:a3:f9:19:e1:d7:66:9a:f6:be:1d:eb:a5:dd:
                    b6:a7:c8:40:ba:34:2d:a2:2b:6f:8e:02:63:ca:60:
                    96:0b:32:82:16:3d:20:de:a7:fc:15:e0:d2:e1:16:
                    19:45:5b:24:b5:8a:5f:c1:05:f6:b9:e4:44:2f:7a:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:A5:DA:9F:B8:6D:0E:36:3F:BD:2F:B0:78:A6:16:47:D6:17:2A
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:34:37:c9:81:80:2e:01:be:e1:d3:1b:e7:58:f3:7d:d7:
         a9:1a:a6:3e:36:0d:14:93:2a:d5:72:94:10:e5:26:5e:e3:75:
         d6:8b:85:52:8a:70:5a:a1:db:7c:eb:5f:9d:03:d0:d4:7a:5c:
         bb:c6:f3:d1:c0:b1:37:7c:42:09:c4:31:b0:98:52:d1:80:71:
         7a:2b:f3:61:3a:a0:0d:4c:ec:63:22:e9:76:9a:41:b6:f5:35:
         61:d9:4b:89:d3:cd:01:42:10:f0:bc:25:87:af:44:75:2f:db:
         80:95:69:c5:b8:7a:4e:fe:8d:f0:61:8a:c9:62:04:68:2f:e2:
         51:3c:27:1b:b9:48:bd:a8:29:80:fe:31:f0:92:c0:bc:fa:40:
         27:71:5f:c8:c1:c8:4a:85:a7:2c:4d:2b:dd:83:3d:11:fe:01:
         da:93:40:26:6a:9b:39:8e:53:05:b3:75:cd:a2:c5:4e:f7:6d:
         9e:d8:24:07:6c:fa:3a:e2:f5:0c:45:95:72:77:79:d9:35:b4:
         f7:92:7d:65:01:5e:4f:94:46:e1:07:5e:68:10:32:4c:63:3b:
         e8:7c:e0:d0:a0:33:4a:ac:0d:9e:8d:a1:3e:59:89:e6:93:a6:
         79:ba:09:23:0c:a8:26:da:41:26:96:91:6f:09:af:6b:87:00:
         02:6b:33:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF
NUFERjYzQjAeFw0yNTEyMDUwNDU3MzRaFw0yNTEyMTIwNDU3MzRaMBgxFjAUBgNV
BAMTDTY5MzI2NjNlLTViNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUXaNLX0LZL3wqh9IixsoR+zvLDsW1J2x6qAQ60paTJAyjL8kj8PIyOzvkjJi2
eqhiigbqS2L38JGiUzQ442kmz3/QfPmSg20gvk+M/HYUD/2rZESnfzP+yBvq5HY0
j+lsq+Z9XbRCh3YXNDXxx5ESwZva8pSnRThXwqWHuJffioo1xYMTGEoLO14MHgb5
mgsN0HddQ4/SYVNZ9CW6ViCEOTEAY/oK+XVZEwz1Z/6Hq6fgiT9f93pOEokKuR1k
cdzDA10mo/kZ4ddmmva+Heul3banyEC6NC2iK2+OAmPKYJYLMoIWPSDep/wV4NLh
FhlFWyS1il/BBfa55EQvegtlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi7Ol2p+4
bQ42P70vsHimFkfWFyowHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF
MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0
MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz
MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAANLNDfJgYAuAb7h0xvnWPN916kapj42DRSTKtVylBDlJl7jddaLhVKK
cFqh23zrX50D0NR6XLvG89HAsTd8QgnEMbCYUtGAcXor82E6oA1M7GMi6XaaQbb1
NWHZS4nTzQFCEPC8JYevRHUv24CVacW4ek7+jfBhisliBGgv4lE8Jxu5SL2oKYD+
MfCSwLz6QCdxX8jByEqFpyxNK92DPRH+AdqTQCZqmzmOUwWzdc2ixU73bZ7YJAds
+jri9QxFlXJ3edk1tPeSfWUBXk+URuEHXmgQMkxjO+h84NCgM0qsDZ6NoT5ZieaT
pnm6CSMMqCbaQSaWkW8Jr2uHAAJrM6I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:54 2025 by rpki-client