This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          lniEQTouvC+Jkb1GYYahNIoPS3799xhWn+i2WmyFIuc=
Subject key identifier:   F0:02:0D:2C:3D:20:74:EC:61:0A:05:BF:AA:6F:01:11:72:C8:60:26
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1FC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1D1E
Signing time:             Sat 06 Dec 2025 15:56:20 +0000
Manifest this update:     Sat 06 Dec 2025 15:56:19 +0000
Manifest next update:     Sat 13 Dec 2025 15:56:19 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: Dtg0asoAAuxSrt+WxlaVYC9U3SvZybEswvf2d+RtNBw=)
                          2: C362F1FC6E8A11F0BCC1991BC4F9AE02.roa (hash: ydv6JHZX5HxYCcM81vwZWeWAlo+E2UnhpXtUpF9b09s=)
                          3: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: 2qn9NXSOf21uSxk9HsnL18AqcQ0bhCjIV+9nqDhn33Y=)
                          4: A42AF5D0559111F08D8D0584C4F9AE02.roa (hash: FkUa4Y4fE67M165KQOCXOv0uBb3P1ghowmi2/pRPoi0=)
                          5: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: 3R0caWlbq1LOK9PMe9S0/RNrK2xglF1D20u07isPD7I=)
                          6: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: Rq28F8DG0yv7BlbarhDxq9/F29Ep/HSvPI5qoAbvOgs=)
                          7: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: APuEYDobiTkr+yjV+CCWI8xd4BdBtVmmm5ve6mCT6Qw=)
                          8: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 1S4Ze1eJ69z/bmw/D2eNMgh3uJmMcwiAvB3cJQ/oA/Q=)
                          9: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: x2K4iGB4XiPQaLbpOQU46N5zgaAZ4UmMEd3zJ7RSB2Q=)
                          10: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: mgxcBaGr7BI/56HJBlh6MCkHXWiHbJ+08mgJcXvNvJg=)
                          11: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: bhR5rDRi92lQT+/4ZT+LwH+kvujHBgyqcJUxAMDwnCU=)
                          12: F59F290A459B11F0AE80E433C4F9AE02.roa (hash: 9MfeAv3ExGwlQsjIUPGrk5ZfzNC4IazKk+fMrC6V7cQ=)
                          13: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: CEIRp2CrdEBIU6s4i+N/CMh7EJRlFmiCG/zfxxnrcFA=)
                          14: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: y7yNxeywRY1r8qYqNTXpqknUD3wMI4iVn5vIBSPv3v0=)
                          15: E32743EEBCE711EFA920D83FC4F9AE02.roa (hash: CQQhpNpcrFkcxmZLzNkL+2k+UmrIbQvNlmEQq3sxyGQ=)
                          16: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: hL2Zdvxv4XI+3HFMfaS+1/ZokoAN1ShisW4m73K9Neo=)
                          17: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: Y5/Nm7yAB/blx4yGYi01eMUiV5qV/PTNhp++ArVqPjw=)
                          18: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: mtne+bMEBaQqJowTZo2wwhS1IpnM92WcDfLdziefH6w=)
                          19: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 0j38Uo+iFQdO5kEPFTuORuug7S4L8ZW5Ebjy0sA1lBc=)
                          20: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: E6jvgXL/Ix4dKJJZE/v870wInYVV+abXs6FhDuV8FYs=)
                          21: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: oBbIK682wSEUP5TvritJ4KxrBNWU5rxHl4orE4VE3u4=)
                          22: E3FFB7282B1F11F09AACBB33C4F9AE02.roa (hash: eSBvSr9bRn6jhbrK6BtpitmGa1/YLUvUvJZQp7St0dE=)
                          23: 152C69AA6E7211F082AE972AC4F9AE02.roa (hash: W2cA7bbeIhpFV8O+ABzw9pSF/dGb8bzFrzfYIIuUe70=)
                          24: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: b5kRJtBI/pSUmP5v9Ia63CXCRGEXjqKz2TLjOK18uWc=)
                          25: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: xjE1wzsHVmSRCzFdeF0NIrknzjRrx9wDvb8yKtaqn18=)
                          26: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: dSsX5nHKXYb9bOl0U0xbwpvb4MLDdOQ/bdm2Sv2pyUc=)
                          27: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: gPqt9BXjKpUpT8BxS+2RF03m6ynmeK5bKK/XmFQPRsc=)
                          28: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: Lvk9jUc2nOmVqiloTp/GHNCkrAD4k8B4c9WxpWLobz0=)
                          29: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: dcnIGRDuhe/YVo11t/zCICa2zZu3fwNbXzjiiNbdEso=)
                          30: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: pzwrfGOBC1aqTT139+tbu2nilQDwKj9t+kR3PSIwn0Y=)
                          31: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: RV8EJBlleyhzVkG95IjKL2zXI9QzuqZSxvDEwW6Abdc=)
                          32: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: KwfuEN2GtNIeymat9QicYfvjGAixMAdsbfteX7WUvEg=)
                          33: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: nXSnzDLmzp0BLqr6LnwQS+rSkrXmy8a6H9txoxxzEAU=)
                          34: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: uysLyPq5b4frr5fJrVPEOfj4Wx/jhSmFE2Cw3P/UT04=)
                          35: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: w2SR4epUhMFSAcQK3/dc+xj2nRxXuAifHwZUSCbmzIY=)
                          36: F3309B3004D011E994985639C4F9AE02.roa (hash: cBlfvRvu5XPZeGK26Yrs2RLgQwg2/ERxPdd95ScxBkY=)
                          37: 9D1066F8474111F08A856E0FC4F9AE02.roa (hash: osyXK4bFAXBaALZNfhA8dh2eViVUfO9fCufB9qUWT7E=)
                          38: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: 6CETeBmdxLp575yCFO+woa7316cbcGtcb5tHB4lGr3U=)
                          39: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: CT9oR+mour9icf2SXlc68B/oJLLnyCcyaxA9b5EH/aA=)
                          40: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: y1hSxpTcRmvGSlokMiKmUttArX3J3HAaJ4mrrIaV/Z0=)
                          41: F5CC48A804D011E994985639C4F9AE02.roa (hash: doD+yTdaGVyKwIsSSZCRhj5n7eg36BNqzqq+qHdoKjY=)
                          42: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: kamFVk5Lhqt3swGOQVtx9Xo8vPBROM2IhuUHDFxP/BE=)
                          43: BD58F50404D311E9A6452047C4F9AE02.roa (hash: 4P793Jb0fesAoesXcB5RaDkBjyGdPNj+Zecm5mMaFtk=)
                          44: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: iWkHjXOrmmMyudZnFP7UPWo3G/SVzy0m5OG/H6qexGA=)
                          45: 50550748066011EEA5F59657C4F9AE02.roa (hash: 85uNE5EA4RwePX68ecsox54cbRTW2BiV90sMJiT4zJc=)
                          46: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: ILtcyDU15URhGSa5Kjj9yOQZtiWVIFSi4W87UvdNp7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8136 (0x1fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Dec  6 15:56:19 2025 GMT
            Not After : Dec 13 15:56:19 2025 GMT
        Subject: CN=69345224-ff45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:b4:a8:f2:76:b4:e7:6a:8d:37:33:28:0a:
                    1d:3f:55:5c:2f:bb:d5:e5:72:ed:f5:e9:c7:d5:f1:
                    d2:09:86:21:0e:21:47:85:42:95:3a:11:bb:b5:a1:
                    f4:dd:44:47:d6:aa:11:4b:59:1a:0b:b4:30:2b:b4:
                    36:8b:6d:15:78:b4:c6:80:1d:71:76:38:04:d8:c2:
                    ab:e8:f0:f0:24:4b:a7:87:6c:db:cc:7c:fd:91:d3:
                    65:f5:c5:20:6c:d7:81:f3:7f:11:aa:dd:f8:e3:ad:
                    55:85:25:a6:24:7e:de:2f:aa:ca:d8:57:7b:ba:64:
                    41:39:53:34:a7:65:19:e9:bf:cd:7b:57:13:81:22:
                    09:2c:e1:2c:0f:a2:76:4f:f7:55:60:2e:4d:49:ea:
                    9b:33:5f:70:47:41:8c:b3:e4:5e:13:18:a9:d4:84:
                    25:dd:ca:75:b0:62:42:15:7b:92:2e:be:6b:d4:b7:
                    78:08:12:57:62:0d:7b:91:8f:a5:49:c6:d0:54:58:
                    6a:a6:3e:f2:47:e3:c1:de:50:93:2c:0e:ca:98:fa:
                    15:f8:85:f9:47:ed:3c:ff:29:db:5c:1c:de:dc:45:
                    d7:25:ea:43:88:c3:69:14:f2:cb:61:f0:31:c8:b0:
                    f0:a4:2f:10:e3:8e:f1:a7:d7:f5:e4:b9:5e:f5:28:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:0D:2C:3D:20:74:EC:61:0A:05:BF:AA:6F:01:11:72:C8:60:26
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7e:90:d6:a8:96:19:32:30:4d:00:72:41:64:7c:c6:c6:f1:
         fd:cc:df:e4:a0:08:73:63:a3:cb:f1:69:5c:9b:f0:c1:4c:d7:
         82:c7:e8:cd:ac:81:e5:6e:27:6c:3f:5e:bd:12:97:99:54:08:
         34:cd:cb:5d:b8:40:21:b9:d8:24:92:2f:85:19:d5:3a:b1:29:
         07:76:2e:9f:c3:90:48:e2:43:32:54:36:69:69:c0:5c:02:64:
         b1:c2:31:33:f2:e2:e8:14:26:17:47:14:97:58:bf:b1:86:a7:
         87:09:94:ad:cb:12:ce:02:30:2b:d3:30:04:3b:b0:df:fa:3c:
         f4:cc:dd:f2:65:e4:42:e8:ea:26:75:ae:ba:1a:a6:97:18:53:
         a2:bd:6c:4c:7e:9e:dd:91:d1:ed:9f:96:c9:10:1e:03:5c:f2:
         9a:d7:84:11:09:6e:0c:15:f3:89:2f:42:ad:85:33:d0:6a:41:
         6b:37:fb:ec:0f:d7:72:6d:88:cc:28:f2:c7:fd:35:e1:2b:34:
         8c:93:21:f6:5b:0d:8b:f5:94:d2:fa:44:9c:1f:fa:95:5d:43:
         ff:3b:96:39:82:06:68:c4:5e:31:2d:88:4c:a2:32:fa:8f:7e:
         e7:cf:c4:49:a0:ab:d2:b9:c2:e9:f4:40:b4:2d:98:e3:18:5a:
         b4:bc:95:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICH8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjUxMjA2MTU1NjE5WhcNMjUxMjEzMTU1NjE5WjAYMRYwFAYD
VQQDEw02OTM0NTIyNC1mZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydm0qPJ2tOdqjTczKAodP1VcL7vV5XLt9enH1fHSCYYhDiFHhUKVOhG7taH0
3URH1qoRS1kaC7QwK7Q2i20VeLTGgB1xdjgE2MKr6PDwJEunh2zbzHz9kdNl9cUg
bNeB838Rqt34461VhSWmJH7eL6rK2Fd7umRBOVM0p2UZ6b/Ne1cTgSIJLOEsD6J2
T/dVYC5NSeqbM19wR0GMs+ReExip1IQl3cp1sGJCFXuSLr5r1Ld4CBJXYg17kY+l
ScbQVFhqpj7yR+PB3lCTLA7KmPoV+IX5R+08/ynbXBze3EXXJepDiMNpFPLLYfAx
yLDwpC8Q447xp9f15Lle9SjTQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPACDSw9
IHTsYQoFv6pvARFyyGAmMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUFFNC82NzUzQjhBRTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2
TVVDRVFGZVh2WlpXNkt5TG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSfpDWqJYZMjBNAHJBZHzGxvH9zN/koAhzY6PL8Wlcm/DBTNeCx+jN
rIHlbidsP169EpeZVAg0zctduEAhudgkki+FGdU6sSkHdi6fw5BI4kMyVDZpacBc
AmSxwjEz8uLoFCYXRxSXWL+xhqeHCZStyxLOAjAr0zAEO7Df+jz0zN3yZeRC6Oom
da66GqaXGFOivWxMfp7dkdHtn5bJEB4DXPKa14QRCW4MFfOJL0KthTPQakFrN/vs
D9dybYjMKPLH/TXhKzSMkyH2Ww2L9ZTS+kScH/qVXUP/O5Y5ggZoxF4xLYhMojL6
j37nz8RJoKvSucLp9EC0LZjjGFq0vJU8
-----END CERTIFICATE-----