This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          VT37RNtEt0sQuwCZ6r2m3CCAoZEMf5A+v0ka3n1bjEc=
Subject key identifier:   A6:53:8D:36:82:65:47:55:25:91:18:14:1B:C1:B9:01:09:BF:DB:81
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          011B
Signing time:             Fri 05 Dec 2025 02:51:21 +0000
Manifest this update:     Fri 05 Dec 2025 02:51:21 +0000
Manifest next update:     Fri 12 Dec 2025 02:51:21 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: Wxy/cVwlydKCkt7V4xiw2mB6OKPwGjUcWh83mmcSc0k=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Dec  5 02:51:21 2025 GMT
            Not After : Dec 12 02:51:21 2025 GMT
        Subject: CN=693248a9-45ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:2d:55:6b:2d:e0:0b:9c:c8:3d:11:d5:c5:
                    12:65:e5:3f:5f:81:19:71:b6:f9:b7:72:a6:a4:63:
                    f7:29:2d:cc:b3:51:46:59:1a:6c:e5:10:6c:ab:33:
                    32:4e:60:f3:e5:3c:dd:f3:e0:50:0d:61:99:3b:2f:
                    5a:48:d5:97:81:1f:08:65:22:50:48:b0:ee:a2:7a:
                    f6:be:f1:8f:e5:ae:24:17:78:79:d5:84:6f:fe:a3:
                    b6:2a:f0:8c:61:8a:f0:b2:21:1b:34:da:48:47:dc:
                    de:b5:ea:0b:7b:c7:92:54:7b:ce:5f:85:b9:c9:46:
                    98:e8:88:9b:1f:57:0e:c3:c9:d2:1e:98:70:1b:95:
                    61:16:c5:3b:2c:94:9a:6d:7d:67:13:bd:c4:60:c4:
                    8a:bb:cb:1c:a7:c8:83:ff:00:04:48:ac:d4:5b:fb:
                    09:03:89:47:74:d2:6e:1b:d4:0b:81:e1:7d:02:b3:
                    17:1d:a0:d8:18:66:0a:b6:3c:83:d4:58:41:16:56:
                    df:a8:bd:ad:3a:ce:1f:9e:c6:7a:71:c6:8c:be:ab:
                    ee:58:53:0c:1c:62:93:e4:9c:3e:c0:27:52:62:30:
                    b6:2f:3b:4b:9c:2b:5e:17:cc:14:f1:01:10:9d:11:
                    d0:45:32:9a:a6:df:2f:ee:93:cd:c7:05:45:70:1f:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:53:8D:36:82:65:47:55:25:91:18:14:1B:C1:B9:01:09:BF:DB:81
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:7d:3c:c9:08:bd:34:eb:47:33:05:88:e1:f2:0f:89:c1:
         00:0f:29:93:17:05:06:ba:af:3a:59:46:a8:1d:7e:04:c5:10:
         98:09:ee:68:a9:4d:4d:35:f4:11:4e:1f:e1:d1:58:bd:8b:ae:
         16:5e:7e:34:eb:6b:d1:2a:6e:27:7d:80:75:30:9b:4b:7b:82:
         6a:ad:3c:c8:28:68:0e:fa:45:96:1c:66:83:f8:db:6e:5e:28:
         6f:50:9b:0c:0f:fe:0b:59:01:4f:a5:f8:b9:72:18:2e:97:90:
         0f:53:91:ba:39:af:7c:78:fd:5c:f1:72:d3:8d:73:e1:b5:07:
         95:08:10:02:b2:d3:6e:85:eb:ea:22:16:86:fa:d5:60:bd:bb:
         e8:d5:1b:c0:6e:db:4a:97:b8:bc:d7:50:b5:96:ab:09:bf:d6:
         34:c7:1e:bd:ff:cc:23:97:1c:d8:1a:05:8d:23:54:07:82:00:
         a8:1c:f7:7c:39:74:79:6f:b6:57:85:4e:fb:be:86:fa:57:f6:
         b7:b8:78:ff:ee:f4:0f:b8:bb:8f:6a:5b:75:64:94:de:51:04:
         62:df:90:9e:dd:f9:56:38:f2:f8:87:2c:e0:4a:bc:a6:fa:bf:
         2e:2f:2a:da:01:47:b7:8b:fc:c8:3e:77:e0:b4:1a:72:4b:1a:
         7c:ac:d5:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz
OUU5MzQ2QTAwHhcNMjUxMjA1MDI1MTIxWhcNMjUxMjEyMDI1MTIxWjAYMRYwFAYD
VQQDEw02OTMyNDhhOS00NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcUtVWst4AucyD0R1cUSZeU/X4EZcbb5t3KmpGP3KS3Ms1FGWRps5RBsqzMy
TmDz5Tzd8+BQDWGZOy9aSNWXgR8IZSJQSLDuonr2vvGP5a4kF3h51YRv/qO2KvCM
YYrwsiEbNNpIR9zeteoLe8eSVHvOX4W5yUaY6IibH1cOw8nSHphwG5VhFsU7LJSa
bX1nE73EYMSKu8scp8iD/wAESKzUW/sJA4lHdNJuG9QLgeF9ArMXHaDYGGYKtjyD
1FhBFlbfqL2tOs4fnsZ6ccaMvqvuWFMMHGKT5Jw+wCdSYjC2LztLnCteF8wU8QEQ
nRHQRTKapt8v7pPNxwVFcB+uPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZTjTaC
ZUdVJZEYFBvBuQEJv9uBMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG
MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI
LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAATH08yQi9NOtHMwWI4fIPicEADymTFwUGuq86WUaoHX4ExRCYCe5o
qU1NNfQRTh/h0Vi9i64WXn4062vRKm4nfYB1MJtLe4JqrTzIKGgO+kWWHGaD+Ntu
XihvUJsMD/4LWQFPpfi5chgul5APU5G6Oa98eP1c8XLTjXPhtQeVCBACstNuhevq
IhaG+tVgvbvo1RvAbttKl7i811C1lqsJv9Y0xx69/8wjlxzYGgWNI1QHggCoHPd8
OXR5b7ZXhU77vob6V/a3uHj/7vQPuLuPalt1ZJTeUQRi35Ce3flWOPL4hyzgSrym
+r8uLyraAUe3i/zIPnfgtBpySxp8rNVv
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:57 2025 by rpki-client