This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          +aXm3jCd1SAo2pxgyyWfYKmcFq0gqRflKeQmtTC7TDo=
Subject key identifier:   08:3E:19:FD:0E:76:19:00:CC:D5:3A:D8:4F:A3:26:2E:7E:AD:E6:4A
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C14
Signing time:             Sat 06 Dec 2025 18:06:17 +0000
Manifest this update:     Sat 06 Dec 2025 18:06:16 +0000
Manifest next update:     Sat 13 Dec 2025 18:06:16 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: +YHTocb4EpwbDltNZS5niZ75oxfzkzNaqj63Pn1Y1Js=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: ioWxXkHuwgM2086xjsQFXghAivhpj/YnVGLVGuciV/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Dec  6 18:06:16 2025 GMT
            Not After : Dec 13 18:06:16 2025 GMT
        Subject: CN=69347098-14fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:aa:fc:12:29:c3:72:a0:d6:48:94:ec:0b:
                    e8:ef:2e:a6:0d:a3:f1:8a:58:36:55:71:e2:1d:96:
                    b2:9e:cc:3c:e1:28:0e:bc:28:12:62:48:19:94:a5:
                    38:64:56:be:21:d2:a9:f0:57:91:b6:97:1e:26:f6:
                    d6:13:c5:98:27:1b:61:8f:c4:df:42:17:e6:1c:a7:
                    ed:f0:b8:47:91:94:8f:1e:a6:1e:c6:2b:88:e2:ac:
                    ca:30:53:52:97:8a:21:02:53:ef:ce:a8:99:6e:be:
                    c3:75:09:c4:33:5a:19:87:37:e6:df:ca:fb:e6:41:
                    9a:e6:f7:f4:ae:73:17:2a:e6:32:91:43:88:7c:b8:
                    e6:9f:ae:54:5a:90:41:55:73:09:0b:7d:b6:5c:8a:
                    68:d9:fa:7f:73:20:ab:15:4e:be:18:0d:fc:28:98:
                    2a:1e:7a:f1:43:96:3a:9e:48:a0:7f:1b:47:c0:27:
                    4c:7a:62:92:9d:5b:af:64:5a:08:65:b3:04:99:37:
                    56:db:8a:f1:3a:fd:b9:e9:bb:35:a4:0c:28:af:1d:
                    4f:1f:5a:57:93:ee:91:13:5c:1f:e3:eb:3d:d2:9c:
                    59:6b:02:c9:f1:6c:5e:da:5c:5e:7f:34:4e:e4:29:
                    21:cd:a9:76:18:1d:5f:12:9e:57:40:cc:90:a5:ce:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:19:FD:0E:76:19:00:CC:D5:3A:D8:4F:A3:26:2E:7E:AD:E6:4A
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:a4:54:6e:6f:8a:1e:7a:bf:1b:87:bd:1f:d3:fa:b8:28:
         eb:e1:73:45:d6:30:a3:52:9c:85:57:e9:51:01:75:b7:4d:e2:
         c2:10:80:f7:f7:0f:de:00:7c:3b:38:1a:2c:f2:39:0a:ca:96:
         3c:50:56:1f:1b:d0:39:5c:6f:87:05:8b:37:a2:15:e1:08:bd:
         15:35:e8:35:4b:50:cd:eb:43:73:02:5e:06:8d:cd:e6:ee:71:
         18:b5:78:7f:d3:58:25:b6:31:90:58:d1:fa:dd:14:3e:bc:ba:
         8f:8d:31:bb:f8:e0:85:a0:2b:ee:7e:74:f6:30:ac:24:f4:b8:
         e1:e0:f1:c0:a9:b1:e1:73:17:08:24:58:75:f3:5d:43:ae:9d:
         38:3d:92:29:e9:f0:21:0b:24:cd:bc:ae:9b:cb:fc:97:4e:56:
         c0:36:95:f6:b8:07:c7:5e:d1:49:95:67:f6:9d:e9:41:c3:dd:
         14:48:95:34:c9:3a:f1:8f:7c:c0:98:42:85:e2:ba:d6:b7:1d:
         f9:40:33:d2:89:f8:e0:25:53:26:ec:f1:16:a2:0a:8e:cc:61:
         e2:3c:f5:4b:8a:4e:7d:36:fb:4c:9a:20:ae:33:95:78:1e:5b:
         b7:18:1b:c3:12:59:ad:86:57:e9:e2:df:e5:f8:d8:23:93:38:
         35:16:f9:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3
NzU4MzAwRjkwHhcNMjUxMjA2MTgwNjE2WhcNMjUxMjEzMTgwNjE2WjAYMRYwFAYD
VQQDEw02OTM0NzA5OC0xNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkmq/BIpw3Kg1kiU7Avo7y6mDaPxilg2VXHiHZaynsw84SgOvCgSYkgZlKU4
ZFa+IdKp8FeRtpceJvbWE8WYJxthj8TfQhfmHKft8LhHkZSPHqYexiuI4qzKMFNS
l4ohAlPvzqiZbr7DdQnEM1oZhzfm38r75kGa5vf0rnMXKuYykUOIfLjmn65UWpBB
VXMJC322XIpo2fp/cyCrFU6+GA38KJgqHnrxQ5Y6nkigfxtHwCdMemKSnVuvZFoI
ZbMEmTdW24rxOv256bs1pAworx1PH1pXk+6RE1wf4+s90pxZawLJ8Wxe2lxefzRO
5Ckhzal2GB1fEp5XQMyQpc6lTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg+Gf0O
dhkAzNU62E+jJi5+reZKMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx
MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF
YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRAqRUbm+KHnq/G4e9H9P6uCjr4XNF1jCjUpyFV+lRAXW3TeLCEID3
9w/eAHw7OBos8jkKypY8UFYfG9A5XG+HBYs3ohXhCL0VNeg1S1DN60NzAl4Gjc3m
7nEYtXh/01gltjGQWNH63RQ+vLqPjTG7+OCFoCvufnT2MKwk9Ljh4PHAqbHhcxcI
JFh1811Drp04PZIp6fAhCyTNvK6by/yXTlbANpX2uAfHXtFJlWf2nelBw90USJU0
yTrxj3zAmEKF4rrWtx35QDPSifjgJVMm7PEWogqOzGHiPPVLik59NvtMmiCuM5V4
Hlu3GBvDElmthlfp4t/l+Ngjkzg1Fvni
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:56:01 2025 by rpki-client