This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
File:                     C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json)
Hash identifier:          x/F1yn98HfA0y2Lm+RzoHYaeiKeF78SPL+hqozKvvyk=
Subject key identifier:   B8:59:37:8B:7A:F3:FC:30:65:B0:1B:63:8C:D3:96:7E:E5:07:AF:49
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Certificate issuer:       /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
Manifest number:          0857
Signing time:             Thu 04 Dec 2025 19:50:40 +0000
Manifest this update:     Thu 04 Dec 2025 19:50:39 +0000
Manifest next update:     Thu 11 Dec 2025 19:50:39 +0000
Files and hashes:         1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: t5PLucnIbesJd0SYr+wyJdLyWkv6TFhGdXRKBfaMv50=)
                          2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: P0Z3h3HuumfxbGBOlXuGuMnAJ1+xepxRxLb1CH8TQZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
                          rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155DEB, serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
        Validity
            Not Before: Dec  4 19:50:39 2025 GMT
            Not After : Dec 11 19:50:39 2025 GMT
        Subject: CN=6931e60f-4713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8a:1a:33:d3:a8:2d:36:75:d7:95:4b:f1:15:
                    da:9a:45:b1:8f:b6:86:42:d6:08:38:00:6c:41:f3:
                    0d:c0:06:af:19:6b:72:d3:1b:e0:83:6c:52:ea:44:
                    87:14:7e:a1:0c:ad:e5:45:fc:0c:ab:dd:bc:25:5d:
                    ed:1f:3d:92:c5:b7:5a:7e:28:79:36:1d:2e:f2:d0:
                    df:37:28:e3:00:39:f7:8a:3b:50:91:df:13:ef:0c:
                    6f:1c:5f:46:c4:f5:21:bb:81:42:9d:79:31:82:e5:
                    3a:ff:ee:15:6f:be:79:64:a7:02:4d:14:4f:1f:8d:
                    27:94:a6:b6:21:74:d5:c9:e1:77:b7:e8:04:e9:11:
                    c2:7a:da:3a:ce:c0:b6:91:93:be:83:03:a7:ee:30:
                    15:82:d0:2f:d6:94:4f:a9:10:f3:f4:ce:05:cf:97:
                    ff:4b:8f:a9:08:90:f4:bd:df:95:78:7f:6d:45:4d:
                    e2:07:f0:6e:a7:10:61:91:83:e6:38:92:35:a9:94:
                    43:fc:0f:dd:1a:6f:98:71:36:3c:2b:07:3c:a2:50:
                    56:be:7b:e6:16:23:6e:d1:5b:25:0f:b4:48:a2:0d:
                    6b:16:cf:db:04:f4:07:0b:34:5d:6c:13:ec:8d:a7:
                    0e:ae:f7:56:02:8e:c1:e2:7e:f9:8b:02:05:0c:f4:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:59:37:8B:7A:F3:FC:30:65:B0:1B:63:8C:D3:96:7E:E5:07:AF:49
            X509v3 Authority Key Identifier:
                keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:f0:ad:7f:af:f2:28:8a:b5:f4:54:cb:9e:19:fb:a1:04:
         01:ae:71:e5:77:bb:37:da:cc:d6:5e:10:09:1c:f4:79:91:ab:
         d1:93:67:8a:bd:49:84:82:50:4d:d1:19:c7:93:e9:f4:46:d5:
         da:73:53:88:61:3a:bf:0e:2e:3c:5f:ec:6c:27:2d:bf:ce:c8:
         af:5b:ea:75:ef:1c:5e:c7:68:10:05:e1:f6:c9:f2:06:8b:36:
         3c:b9:98:53:51:1c:00:6b:d0:ca:94:bb:6c:38:ef:8d:b6:03:
         19:31:76:c6:a9:1a:6f:fa:24:f5:16:64:80:59:16:89:d0:53:
         71:40:94:03:64:f9:89:de:b8:c2:68:10:4c:f5:6f:ad:eb:a1:
         81:24:f9:72:46:7d:e4:5f:75:d6:03:6e:44:33:82:11:cf:95:
         fe:37:fa:b8:cb:ca:09:98:3c:42:64:a3:62:1a:51:b1:19:29:
         4a:70:47:b2:e5:a3:4d:af:92:8e:43:16:8d:07:a8:60:37:99:
         1f:03:1f:61:3a:d1:2c:02:cc:36:92:6c:59:78:db:d1:9e:71:
         8a:09:f4:b4:18:af:11:f5:2e:07:cd:5d:48:cb:9e:ba:66:02:
         dd:86:c9:28:41:29:49:ef:98:d7:0f:3a:fc:02:39:37:a7:12:
         2d:64:f6:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdCQjU3MUE1MjAw
Q0U1NUQ4RjMwHhcNMjUxMjA0MTk1MDM5WhcNMjUxMjExMTk1MDM5WjAYMRYwFAYD
VQQDEw02OTMxZTYwZi00NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA84oaM9OoLTZ115VL8RXamkWxj7aGQtYIOABsQfMNwAavGWty0xvgg2xS6kSH
FH6hDK3lRfwMq928JV3tHz2Sxbdafih5Nh0u8tDfNyjjADn3ijtQkd8T7wxvHF9G
xPUhu4FCnXkxguU6/+4Vb755ZKcCTRRPH40nlKa2IXTVyeF3t+gE6RHCeto6zsC2
kZO+gwOn7jAVgtAv1pRPqRDz9M4Fz5f/S4+pCJD0vd+VeH9tRU3iB/BupxBhkYPm
OJI1qZRD/A/dGm+YcTY8Kwc8olBWvnvmFiNu0VslD7RIog1rFs/bBPQHCzRdbBPs
jacOrvdWAo7B4n75iwIFDPSK3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhZN4t6
8/wwZbAbY4zTln7lB69JMB8GA1UdIwQYMBaAFAtTuApsnIrrdNbXu1caUgDOVdjz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NURFQi8xNjJDQjI3NEVB
NEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1dDAxdGU3VnhwU0FNNVYy
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MxTzRDbXljaXV0MDF0ZTdWeHBTQU01VjJQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NURFQi8xNjJDQjI3NEVBNEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1
dDAxdGU3VnhwU0FNNVYyUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ0/Ctf6/yKIq19FTLnhn7oQQBrnHld7s32szWXhAJHPR5kavRk2eK
vUmEglBN0RnHk+n0RtXac1OIYTq/Di48X+xsJy2/zsivW+p17xxex2gQBeH2yfIG
izY8uZhTURwAa9DKlLtsOO+NtgMZMXbGqRpv+iT1FmSAWRaJ0FNxQJQDZPmJ3rjC
aBBM9W+t66GBJPlyRn3kX3XWA25EM4IRz5X+N/q4y8oJmDxCZKNiGlGxGSlKcEey
5aNNr5KOQxaNB6hgN5kfAx9hOtEsAsw2kmxZeNvRnnGKCfS0GK8R9S4HzV1Iy566
ZgLdhskoQSlJ75jXDzr8Ajk3pxItZPZQ
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:24 2025 by rpki-client