This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
File:                     838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json)
Hash identifier:          p3HO6kBJ7yrj+quOdx15sbuO6NQLtVb5fM3rotQWffs=
Subject key identifier:   7E:F9:8A:47:9C:B9:54:CE:2D:EA:D7:19:03:EF:AB:11:CD:1F:18:11
Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
Certificate issuer:       /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
Manifest number:          D1
Signing time:             Fri 05 Dec 2025 03:45:09 +0000
Manifest this update:     Fri 05 Dec 2025 03:45:08 +0000
Manifest next update:     Fri 12 Dec 2025 03:45:08 +0000
Files and hashes:         1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: +Nv8jHgLbycAqCnZWJ3Rpu70LgFmSa+/xJzGqhgb3TA=)
                          2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
                          rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
        Validity
            Not Before: Dec  5 03:45:08 2025 GMT
            Not After : Dec 12 03:45:08 2025 GMT
        Subject: CN=69325545-d166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:fd:f6:04:ae:2d:1a:a9:f3:4f:a4:03:5f:
                    5c:fc:1c:eb:70:61:35:5f:56:17:b4:8e:4b:14:84:
                    1e:cb:d5:09:0b:01:f2:e0:52:29:ea:28:ab:62:2d:
                    c4:b7:bf:af:73:70:f5:33:21:3b:8b:ea:f1:a9:95:
                    cf:84:65:88:fc:c4:d1:50:70:8a:84:b5:f0:8e:f0:
                    34:aa:60:1a:9b:b5:f1:87:2d:bc:a3:27:be:4a:d4:
                    e9:93:a6:45:68:80:57:ab:cf:c1:91:0d:2d:9c:d8:
                    14:5c:cb:a9:2c:ef:7f:18:2f:ee:6b:d5:d6:5c:45:
                    aa:c8:56:da:af:c5:30:0d:10:67:fa:1c:67:86:29:
                    1d:1a:f1:3c:3c:1e:16:d9:ad:2d:7d:b9:21:5b:08:
                    aa:b2:52:3c:be:4e:55:c6:ac:c3:ea:f8:a2:19:10:
                    b2:e7:37:cb:3b:fc:53:15:e7:a9:d7:60:2c:18:3b:
                    0a:dc:c1:46:de:4b:f9:51:1c:a2:18:ba:d2:cf:86:
                    f0:20:33:ca:47:34:24:39:bb:7a:8c:9b:66:e0:8f:
                    29:f3:eb:b3:7f:51:fe:1a:8b:33:e9:e1:e8:c0:57:
                    94:3f:d8:0b:f3:d5:55:a9:75:d8:82:77:f3:a8:20:
                    01:4c:2e:13:bd:66:96:bc:18:f4:a2:11:82:c5:28:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:8A:47:9C:B9:54:CE:2D:EA:D7:19:03:EF:AB:11:CD:1F:18:11
            X509v3 Authority Key Identifier:
                keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:50:91:f4:15:8b:cc:e6:58:58:0e:5b:be:38:27:59:73:75:
         07:62:4d:d7:f6:cb:f4:fc:a0:a1:3d:e0:8d:0d:69:12:90:c5:
         79:93:9e:3b:a7:b6:a8:86:f2:ab:a4:01:0e:9f:d6:cc:82:4a:
         86:4e:4e:62:6b:0a:bb:02:7c:28:fc:b4:ff:4d:b3:00:24:43:
         82:6c:37:2b:9a:09:22:31:a1:be:4a:07:2c:92:c1:0f:fd:a0:
         f7:de:b5:53:24:ee:7d:d9:1a:fa:5c:e4:99:a3:e5:e0:36:9e:
         cf:f7:39:a1:cd:d5:b2:ae:f7:d7:3f:4e:66:de:b3:f9:4b:7d:
         19:12:18:db:13:c5:7b:cd:c0:a3:ff:e5:7f:0b:42:50:5f:b0:
         db:cd:ee:50:9a:85:2a:b8:1e:60:b1:ed:6d:bb:d7:c7:d6:d8:
         f7:53:05:a4:8e:50:d8:32:5f:96:34:82:04:04:fd:04:31:bb:
         fe:b6:1e:ed:69:5a:9a:9e:77:83:6b:7b:bf:09:ba:d9:a1:fb:
         49:5a:1b:14:3a:0c:79:e1:ab:70:bc:54:ac:11:8c:a4:52:5f:
         58:a4:07:39:22:c0:35:61:13:b6:78:e2:4a:d1:f9:be:0b:f5:
         05:f3:3f:a2:84:60:e8:9b:5c:03:23:7d:db:76:24:f5:58:d9:
         16:af:e8:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB
MDU2MUMyRkMwHhcNMjUxMjA1MDM0NTA4WhcNMjUxMjEyMDM0NTA4WjAYMRYwFAYD
VQQDEw02OTMyNTU0NS1kMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl3j99gSuLRqp80+kA19c/BzrcGE1X1YXtI5LFIQey9UJCwHy4FIp6iirYi3E
t7+vc3D1MyE7i+rxqZXPhGWI/MTRUHCKhLXwjvA0qmAam7Xxhy28oye+StTpk6ZF
aIBXq8/BkQ0tnNgUXMupLO9/GC/ua9XWXEWqyFbar8UwDRBn+hxnhikdGvE8PB4W
2a0tfbkhWwiqslI8vk5VxqzD6viiGRCy5zfLO/xTFeep12AsGDsK3MFG3kv5URyi
GLrSz4bwIDPKRzQkObt6jJtm4I8p8+uzf1H+Gosz6eHowFeUP9gL89VVqXXYgnfz
qCABTC4TvWaWvBj0ohGCxSj8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH75ikec
uVTOLerXGQPvqxHNHxgRMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3
RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ
X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiUJH0FYvM5lhYDlu+OCdZc3UHYk3X9sv0/KChPeCNDWkSkMV5k547
p7aohvKrpAEOn9bMgkqGTk5iawq7Anwo/LT/TbMAJEOCbDcrmgkiMaG+SgcsksEP
/aD33rVTJO592Rr6XOSZo+XgNp7P9zmhzdWyrvfXP05m3rP5S30ZEhjbE8V7zcCj
/+V/C0JQX7Dbze5QmoUquB5gse1tu9fH1tj3UwWkjlDYMl+WNIIEBP0EMbv+th7t
aVqanneDa3u/CbrZoftJWhsUOgx54atwvFSsEYykUl9YpAc5IsA1YRO2eOJK0fm+
C/UF8z+ihGDom1wDI33bdiT1WNkWr+jp
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:09:57 2025 by rpki-client