This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File:                     _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier:          6tbE+GuoU2t1GqPA8/vo1JCxgcvjCKKw8auo+tIEm1w=
Subject key identifier:   B8:89:DF:87:85:71:1E:F3:29:68:6F:4C:96:26:A7:EE:9C:08:B3:F6
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer:       /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number:          0178
Signing time:             Fri 05 Dec 2025 01:57:08 +0000
Manifest this update:     Fri 05 Dec 2025 01:57:07 +0000
Manifest next update:     Fri 12 Dec 2025 01:57:07 +0000
Files and hashes:         1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: JQhWIW/q7uEHsQlaafe/ItCvsF2KceI5mYREJ5B6zLU=)
                          2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: pUmBGJmyMHEcbY4KaDR5mt/b7cXO616AtPpB4tejaZA=)
                          3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: 5OTHdHDCmfuI/ZOanycQLnoktf60OpN1mQqMdmP9U+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
                          rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
        Validity
            Not Before: Dec  5 01:57:07 2025 GMT
            Not After : Dec 12 01:57:07 2025 GMT
        Subject: CN=69323bf4-ab3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:26:5d:58:3c:92:8c:88:cb:1d:0e:e7:a1:
                    47:85:64:48:50:f8:f9:b4:b2:f9:8a:19:a1:da:8b:
                    1f:95:2d:22:21:20:65:30:6c:78:47:bf:ef:54:54:
                    e2:f8:85:d8:71:83:eb:66:a0:e4:f2:b3:a2:93:cf:
                    8e:e0:97:74:29:d5:dd:d1:ef:ca:21:00:b2:c3:27:
                    d2:80:50:9e:54:a7:3e:3a:b0:d4:c2:52:a0:bb:a8:
                    9c:24:8d:c6:71:ff:17:6e:64:bd:0d:28:54:c7:73:
                    72:50:e4:94:9b:5c:2f:dc:75:4f:0d:d5:8a:b3:5a:
                    34:5f:50:a8:72:f4:7f:38:3e:4a:bf:b1:83:34:9d:
                    8c:0b:2c:bb:39:2e:e3:0e:3b:1b:67:83:dd:92:03:
                    be:ea:5f:d8:5b:18:47:1b:43:e0:d9:de:63:18:22:
                    cf:93:b3:5f:68:5b:85:f4:4b:55:76:1d:6c:c0:6a:
                    39:18:0e:6c:85:f9:fc:ee:77:e6:1d:f8:e6:68:5c:
                    ce:52:57:f6:c2:0e:5d:01:9d:86:76:3b:ac:6a:ba:
                    e2:90:b2:96:01:14:83:6a:78:eb:a5:2c:85:0b:ea:
                    4c:34:9c:c6:12:93:5d:9a:17:a3:b1:fc:ba:6d:de:
                    5a:5f:47:e1:78:ce:a3:11:86:42:b4:3f:81:34:30:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:DF:87:85:71:1E:F3:29:68:6F:4C:96:26:A7:EE:9C:08:B3:F6
            X509v3 Authority Key Identifier:
                keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:2f:84:d4:bc:86:ae:7e:d6:e4:08:94:2b:40:9f:aa:75:
         37:8e:b3:02:2f:36:29:9b:d0:b4:97:3f:ca:fe:28:0c:06:df:
         1f:a8:c8:28:eb:f6:a1:78:9c:a8:18:ec:d9:8d:e1:55:d6:29:
         1a:7c:c3:b0:15:53:1e:35:71:68:96:ae:c7:1a:28:7f:20:a5:
         5a:68:96:a8:e0:ea:a8:d2:bb:ea:8f:e9:b0:32:ff:20:b7:2a:
         e2:3b:d8:a1:1d:63:78:24:f1:35:6b:b4:eb:fb:d2:c6:dd:42:
         1d:09:30:85:24:87:88:da:c3:98:b6:93:72:92:b8:e8:3b:88:
         93:78:2b:4c:70:1c:9d:93:44:da:39:07:49:92:88:84:29:db:
         a3:54:4b:1f:79:3c:cf:c2:56:ec:49:e5:2b:d8:2c:11:86:43:
         b0:5a:b5:ad:9b:6f:fa:8b:95:73:2a:f4:e9:4c:8b:96:9d:f9:
         4f:07:64:70:7e:87:86:98:19:a9:53:53:a7:54:84:ea:3c:dc:
         3f:21:d5:62:71:1e:05:a1:b2:21:e3:8a:03:4c:f7:c9:00:ce:
         2a:58:f1:65:fd:82:23:05:01:99:fd:9d:5a:7f:af:8f:96:c6:
         1c:c3:c5:02:53:1b:c7:fa:19:8b:7b:8b:5f:47:80:b1:76:46:
         fd:c2:2a:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ5MTMxMTAvBgNVBAUTKEZGNUMxMDA5NzVFMzY4NjI0NUNBREU1NzlDNTc0MzNC
QkZERjY4MTkwHhcNMjUxMjA1MDE1NzA3WhcNMjUxMjEyMDE1NzA3WjAYMRYwFAYD
VQQDEw02OTMyM2JmNC1hYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zQmXVg8koyIyx0O56FHhWRIUPj5tLL5ihmh2osflS0iISBlMGx4R7/vVFTi
+IXYcYPrZqDk8rOik8+O4Jd0KdXd0e/KIQCywyfSgFCeVKc+OrDUwlKgu6icJI3G
cf8XbmS9DShUx3NyUOSUm1wv3HVPDdWKs1o0X1CocvR/OD5Kv7GDNJ2MCyy7OS7j
DjsbZ4PdkgO+6l/YWxhHG0Pg2d5jGCLPk7NfaFuF9EtVdh1swGo5GA5shfn87nfm
HfjmaFzOUlf2wg5dAZ2GdjusarrikLKWARSDanjrpSyFC+pMNJzGEpNdmhejsfy6
bd5aX0fheM6jEYZCtD+BNDChewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiJ34eF
cR7zKWhvTJYmp+6cCLP2MB8GA1UdIwQYMBaAFP9cEAl142hiRcreV5xXQzu/32gZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDkxMy8wNkY1QjVDQTkw
RDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFHSkZ5dDVYbkZkRE83X2Zh
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18xd1FDWFhqYUdKRnl0NVhuRmRETzdfZmFCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDkxMy8wNkY1QjVDQTkwRDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFH
SkZ5dDVYbkZkRE83X2ZhQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAo4C+E1LyGrn7W5AiUK0CfqnU3jrMCLzYpm9C0lz/K/igMBt8fqMgo
6/aheJyoGOzZjeFV1ikafMOwFVMeNXFolq7HGih/IKVaaJao4Oqo0rvqj+mwMv8g
tyriO9ihHWN4JPE1a7Tr+9LG3UIdCTCFJIeI2sOYtpNykrjoO4iTeCtMcBydk0Ta
OQdJkoiEKdujVEsfeTzPwlbsSeUr2CwRhkOwWrWtm2/6i5VzKvTpTIuWnflPB2Rw
foeGmBmpU1OnVITqPNw/IdVicR4FobIh44oDTPfJAM4qWPFl/YIjBQGZ/Z1af6+P
lsYcw8UCUxvH+hmLe4tfR4Cxdkb9wirA
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:01:07 2025 by rpki-client