This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File:                     e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier:          kNwRAI1tfrUKG9OGpnrenN8OQ8aJ/tTlq3pp4S7gmRk=
Subject key identifier:   FA:F1:BA:07:94:3F:14:F8:A3:E2:62:01:CB:A7:2B:D9:7A:78:41:50
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number:          BC
Signing time:             Fri 05 Dec 2025 04:01:33 +0000
Manifest this update:     Fri 05 Dec 2025 04:01:33 +0000
Manifest next update:     Fri 12 Dec 2025 04:01:33 +0000
Files and hashes:         1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: bzui0zhUPEVkDQZiqs7X6ZVeGfD6RJlYRiltiSfqUA8=)
                          2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
                          rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Dec  5 04:01:33 2025 GMT
            Not After : Dec 12 04:01:33 2025 GMT
        Subject: CN=6932591d-29a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:88:4e:cf:8a:7b:ba:67:7d:9f:88:19:6f:
                    86:8a:25:02:8e:35:21:94:0b:42:3f:6e:0d:4c:05:
                    cd:d8:bb:e1:92:78:06:18:4b:ad:3f:c0:3d:f7:3b:
                    43:c0:a0:3e:7f:63:60:59:cb:6d:03:d3:4e:87:c0:
                    11:a0:15:7c:08:b7:86:cd:c0:ed:a3:8d:f8:15:7c:
                    d6:65:e3:85:94:aa:ce:71:bb:05:03:be:2f:28:43:
                    c5:c6:2c:c5:ea:e3:9f:75:be:7c:cd:e9:bb:d9:f9:
                    7b:18:6c:8d:4b:28:0a:cb:21:e4:f3:22:4e:61:6e:
                    67:68:0f:29:cb:ec:48:ff:78:6f:98:e3:b4:4c:a6:
                    09:61:63:9b:65:3e:28:81:f2:e1:48:67:fa:03:e0:
                    16:3b:11:03:b7:87:7d:6d:3f:c7:61:75:d9:fb:69:
                    43:f4:98:9f:c7:82:f8:f5:2d:b8:cd:c6:27:f0:4f:
                    86:16:20:b0:f7:24:9e:a3:c7:87:5a:08:5c:31:66:
                    56:ac:ed:a6:7b:66:36:64:2e:cf:a1:9a:3a:50:60:
                    f8:e7:97:76:57:91:ac:af:b5:3c:a0:5c:2a:05:3b:
                    56:e0:b3:e6:63:02:ca:86:d8:0f:8d:26:b4:a4:85:
                    f5:34:fd:a2:d1:44:8d:0c:ff:07:c8:f5:d2:8a:1b:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:BA:07:94:3F:14:F8:A3:E2:62:01:CB:A7:2B:D9:7A:78:41:50
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:13:86:bf:70:dd:4a:35:1d:95:7c:c3:c4:e6:29:ba:9e:3d:
         2e:f3:6c:9c:e3:9c:b1:ca:94:5c:32:06:23:29:76:62:39:56:
         6f:0c:2f:5c:e5:56:c8:89:83:10:9c:3b:2b:02:1e:3a:23:4b:
         6f:43:0f:f3:d3:3d:97:40:b1:79:47:de:06:a7:fb:15:ab:12:
         1d:5b:bb:1f:81:db:82:80:c5:15:6e:41:19:69:7d:fe:01:e2:
         ef:bd:ca:c9:44:e2:57:7d:2c:07:98:07:09:41:bc:fd:ff:f3:
         b0:5a:f5:6e:91:1d:58:7c:d8:6d:44:86:83:49:b4:3d:47:c3:
         5e:8a:6b:82:6f:ce:d4:7c:82:0a:79:c0:53:48:66:76:af:89:
         c9:ac:35:21:f4:06:ec:17:43:92:b3:c3:48:ee:63:9f:ea:e1:
         33:19:c4:3a:c0:11:20:8c:de:76:dc:c1:fe:db:85:95:94:d5:
         bc:92:40:66:4f:38:a8:18:3e:0e:f5:44:87:b2:fa:f9:3a:bc:
         95:f2:52:e7:77:4a:68:23:af:f8:ec:b0:4e:23:de:e7:a8:bd:
         ff:39:d8:45:47:bd:8f:6a:bc:17:3c:06:98:20:31:df:ab:db:
         b1:0d:9f:63:68:14:b3:12:31:fa:e9:29:f9:3f:03:c7:8c:ff:
         15:8e:4a:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M4M0ExMTAvBgNVBAUTKDdCNTM0QUVERDMwRjI0NDU5NTg4MEQ2NEU3NjQ2QkQx
MzMzNEFGQjQwHhcNMjUxMjA1MDQwMTMzWhcNMjUxMjEyMDQwMTMzWjAYMRYwFAYD
VQQDEw02OTMyNTkxZC0yOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYOITs+Ke7pnfZ+IGW+GiiUCjjUhlAtCP24NTAXN2LvhkngGGEutP8A99ztD
wKA+f2NgWcttA9NOh8ARoBV8CLeGzcDto434FXzWZeOFlKrOcbsFA74vKEPFxizF
6uOfdb58zem72fl7GGyNSygKyyHk8yJOYW5naA8py+xI/3hvmOO0TKYJYWObZT4o
gfLhSGf6A+AWOxEDt4d9bT/HYXXZ+2lD9Jifx4L49S24zcYn8E+GFiCw9ySeo8eH
WghcMWZWrO2me2Y2ZC7PoZo6UGD455d2V5Gsr7U8oFwqBTtW4LPmYwLKhtgPjSa0
pIX1NP2i0USNDP8HyPXSihuupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrxugeU
PxT4o+JiAcunK9l6eEFQMB8GA1UdIwQYMBaAFHtTSu3TDyRFlYgNZOdka9EzNK+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzgzQS9DQjYyQTBBQUI2
OUQxMUVGQTgxMzk4NEJDNEY5QUUwMi9lMU5LN2RNUEpFV1ZpQTFrNTJScjBUTTBy
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UxTks3ZE1QSkVXVmlBMWs1MlJyMFRNMHI3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzgzQS9DQjYyQTBBQUI2OUQxMUVGQTgxMzk4NEJDNEY5QUUwMi9lMU5LN2RNUEpF
V1ZpQTFrNTJScjBUTTByN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHE4a/cN1KNR2VfMPE5im6nj0u82yc45yxypRcMgYjKXZiOVZvDC9c
5VbIiYMQnDsrAh46I0tvQw/z0z2XQLF5R94Gp/sVqxIdW7sfgduCgMUVbkEZaX3+
AeLvvcrJROJXfSwHmAcJQbz9//OwWvVukR1YfNhtRIaDSbQ9R8NeimuCb87UfIIK
ecBTSGZ2r4nJrDUh9AbsF0OSs8NI7mOf6uEzGcQ6wBEgjN523MH+24WVlNW8kkBm
TzioGD4O9USHsvr5OryV8lLnd0poI6/47LBOI97nqL3/OdhFR72ParwXPAaYIDHf
q9uxDZ9jaBSzEjH66Sn5PwPHjP8VjkpN
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:45:17 2025 by rpki-client