This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
File:                     m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json)
Hash identifier:          4NjBYQOHwCwp9NXqouTLdhKuO4xfRV4TAF35j1qvBZM=
Subject key identifier:   3C:92:A4:15:7D:6B:24:43:AE:5D:55:38:B9:9D:B7:7E:01:05:EE:04
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Certificate issuer:       /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial:       1846
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
Manifest number:          183E
Signing time:             Sat 06 Dec 2025 16:08:08 +0000
Manifest this update:     Sat 06 Dec 2025 16:08:08 +0000
Manifest next update:     Sat 13 Dec 2025 16:08:08 +0000
Files and hashes:         1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: GlI8mP2X6nFHwBboSlYrvA9hm8lWdUW9Akdl/1JmrPs=)
                          2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
                          rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6214 (0x1846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
        Validity
            Not Before: Dec  6 16:08:08 2025 GMT
            Not After : Dec 13 16:08:08 2025 GMT
        Subject: CN=693454e8-d171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:1c:27:f5:ed:97:65:86:43:68:72:5d:f8:
                    a1:a2:a0:7a:89:fa:36:92:88:56:20:0b:10:02:22:
                    13:d7:3a:32:d6:21:c8:b4:2d:78:75:1e:05:fc:a8:
                    31:f6:2b:6c:e7:4c:e1:07:3a:f8:fe:58:54:eb:9d:
                    93:ac:08:cd:c0:d5:c9:c6:be:4f:fa:df:33:f2:5a:
                    6b:2c:c8:02:15:a6:97:1e:b7:97:a4:87:63:13:26:
                    09:a0:30:69:bb:9f:03:99:52:82:f4:51:93:5c:a0:
                    4e:84:f1:ec:16:ee:bd:c5:f8:fb:75:48:d6:17:2a:
                    ac:d4:49:e3:f1:ef:4a:3e:75:05:be:a6:4a:8b:ab:
                    32:df:19:0b:d4:d5:93:89:66:39:8d:56:90:c3:86:
                    fe:4b:1f:f0:4a:5e:c8:0d:87:4c:e5:05:be:b9:1a:
                    21:4a:e8:16:be:2f:c8:d7:ec:a6:6b:c0:f3:e7:2c:
                    00:41:3b:66:d4:a9:42:e5:77:1b:cc:e8:ae:35:74:
                    cf:ff:54:76:3f:4d:39:3a:91:df:27:25:1a:4a:b2:
                    41:a9:a6:e7:63:84:55:a8:54:bb:17:25:5e:40:66:
                    d9:66:66:63:a9:a8:cc:27:48:a0:07:c7:6e:1a:e8:
                    5c:d6:e3:b8:bb:a3:07:a3:b0:da:6e:55:be:27:a0:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:A4:15:7D:6B:24:43:AE:5D:55:38:B9:9D:B7:7E:01:05:EE:04
            X509v3 Authority Key Identifier:
                keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:32:f4:db:6c:88:bc:04:50:e7:e6:11:2e:f6:17:7c:fc:
         7a:21:2b:bb:f2:b1:ee:3d:4a:78:10:9e:81:82:15:22:bf:a1:
         6a:9f:ba:a5:d8:3f:f6:fa:c7:b9:ee:9c:a1:a6:82:0d:f0:c2:
         36:14:53:62:2f:a0:37:9d:b7:84:78:35:59:53:4a:a7:cf:a5:
         47:6c:62:ec:09:16:00:21:6a:10:fa:b0:c5:8f:de:d9:8a:ff:
         7c:38:ef:df:bc:ef:90:51:e3:06:03:64:fe:2b:7c:0f:38:5c:
         2b:ce:af:2d:7b:ec:30:92:95:79:f4:16:20:c0:66:7b:25:35:
         8f:9b:61:8c:81:0f:14:43:61:a4:40:99:8e:11:6e:ca:25:45:
         28:fe:13:20:c8:b0:2a:34:45:ee:db:53:99:ce:21:7b:67:64:
         94:3f:db:cc:0e:36:7b:67:f0:e9:86:f1:fd:d9:b5:f7:ed:6f:
         35:ed:eb:cb:9f:ff:7e:ca:7f:55:85:c8:47:78:6b:25:74:df:
         da:3c:91:80:4b:f4:a6:0a:3f:43:c1:43:b1:d8:46:51:5d:1b:
         af:56:02:be:8d:54:e2:09:4a:fc:26:f5:bd:ae:93:90:2f:e8:
         10:12:c1:4e:53:c0:8b:cc:ba:c9:d9:39:e1:d7:00:2d:78:a1:
         3b:37:af:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0
QzAyNDIwOTEwHhcNMjUxMjA2MTYwODA4WhcNMjUxMjEzMTYwODA4WjAYMRYwFAYD
VQQDEw02OTM0NTRlOC1kMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwR0cJ/Xtl2WGQ2hyXfihoqB6ifo2kohWIAsQAiIT1zoy1iHItC14dR4F/Kgx
9its50zhBzr4/lhU652TrAjNwNXJxr5P+t8z8lprLMgCFaaXHreXpIdjEyYJoDBp
u58DmVKC9FGTXKBOhPHsFu69xfj7dUjWFyqs1Enj8e9KPnUFvqZKi6sy3xkL1NWT
iWY5jVaQw4b+Sx/wSl7IDYdM5QW+uRohSugWvi/I1+yma8Dz5ywAQTtm1KlC5Xcb
zOiuNXTP/1R2P005OpHfJyUaSrJBqabnY4RVqFS7FyVeQGbZZmZjqajMJ0igB8du
Guhc1uO4u6MHo7DablW+J6CxFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDySpBV9
ayRDrl1VOLmdt34BBe4EMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE
RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR
TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW6DL022yIvARQ5+YRLvYXfPx6ISu78rHuPUp4EJ6BghUiv6Fqn7ql
2D/2+se57pyhpoIN8MI2FFNiL6A3nbeEeDVZU0qnz6VHbGLsCRYAIWoQ+rDFj97Z
iv98OO/fvO+QUeMGA2T+K3wPOFwrzq8te+wwkpV59BYgwGZ7JTWPm2GMgQ8UQ2Gk
QJmOEW7KJUUo/hMgyLAqNEXu21OZziF7Z2SUP9vMDjZ7Z/DphvH92bX37W817evL
n/9+yn9VhchHeGsldN/aPJGAS/SmCj9DwUOx2EZRXRuvVgK+jVTiCUr8JvW9rpOQ
L+gQEsFOU8CLzLrJ2Tnh1wAteKE7N6+b
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:44 2025 by rpki-client