This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File:                     t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier:          p0Ns7XRVRR/Am0Sky8yZxb/QpgUfWEVUPnl3IhL+jVI=
Subject key identifier:   98:D1:42:44:3E:C4:26:A6:A9:DF:94:A6:15:E9:AF:42:21:8A:72:A6
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer:       /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number:          E5
Signing time:             Fri 05 Dec 2025 03:30:42 +0000
Manifest this update:     Fri 05 Dec 2025 03:30:41 +0000
Manifest next update:     Fri 12 Dec 2025 03:30:41 +0000
Files and hashes:         1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: Ji/bipliahWa4zRohZgxb0wBPRdfF9PPvbqI/Wa+MR0=)
                          2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: dg3/bJiVaiz5v44anOkDfbtlZGRX3EFlzFQApjSj5Nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
                          rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
        Validity
            Not Before: Dec  5 03:30:41 2025 GMT
            Not After : Dec 12 03:30:41 2025 GMT
        Subject: CN=693251e2-6727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:c3:85:0c:c0:51:9d:64:69:72:2f:93:f6:
                    d0:d4:4a:67:54:fb:8f:27:f6:62:eb:82:ee:36:12:
                    4e:c7:ef:7b:97:69:ad:aa:e4:f2:7e:da:48:b8:1e:
                    d9:d6:73:e4:9c:17:87:63:c2:86:d8:d7:3b:d0:8a:
                    cc:9e:3e:a3:b2:af:35:f0:c5:b3:a2:cc:2a:f5:6a:
                    ce:72:ab:e7:b2:fa:83:a7:e8:a4:65:8c:6b:b2:a0:
                    f7:e7:08:c9:12:23:88:36:73:52:f9:16:23:65:06:
                    57:31:3e:7a:bc:6d:ba:23:44:62:64:1e:45:39:8c:
                    72:a7:49:3a:7f:0e:b7:3e:c3:91:a5:bb:dc:4f:f9:
                    66:e5:81:8e:df:ee:59:f4:b0:f7:bc:87:01:04:41:
                    14:92:99:3f:5b:d1:cd:f8:56:40:74:e5:a5:f1:34:
                    a4:91:c3:16:26:65:dd:94:ac:31:b1:1c:16:33:34:
                    da:c4:ea:94:82:8c:e2:35:2a:01:d5:5d:b6:3c:01:
                    fe:5d:98:57:98:3d:8f:41:ea:d9:5f:df:45:3f:67:
                    d8:f8:44:b8:30:50:b3:95:ab:8a:96:c1:44:0c:51:
                    be:50:d3:f5:b3:7c:ba:85:27:32:56:23:6d:2c:63:
                    24:35:87:a8:70:95:0f:6c:3a:70:58:cf:11:06:39:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:42:44:3E:C4:26:A6:A9:DF:94:A6:15:E9:AF:42:21:8A:72:A6
            X509v3 Authority Key Identifier:
                keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b8:15:c7:46:1f:35:e5:bd:7b:e9:91:b1:fd:0a:7f:df:ba:
         35:39:e4:7d:8e:ee:5f:47:9e:2c:3d:9e:5c:77:56:ab:d8:6e:
         bf:d7:29:e6:ce:ca:e0:6b:75:bb:11:76:40:81:97:ae:f8:d0:
         8d:d8:6d:41:ba:af:d0:91:9c:3b:08:4e:4a:8e:d1:bb:58:76:
         38:e5:db:e8:4a:4e:fb:a1:72:9a:3f:ca:2c:02:ed:9a:c8:98:
         2c:54:ac:b4:57:67:28:70:61:55:b9:46:06:58:4b:dd:cd:1e:
         f8:bc:03:61:1e:33:60:83:1a:73:ee:55:aa:44:0a:be:63:f2:
         0c:5b:c9:87:4b:db:c0:fb:d2:b8:35:c5:80:fb:cb:ae:41:74:
         1b:02:6b:71:4a:64:70:3a:3d:20:66:73:06:69:08:c8:31:1c:
         bb:97:87:df:08:07:f0:4e:c7:db:c8:8e:e0:c4:34:c6:b9:f7:
         06:00:ca:b5:ff:6b:f4:b4:3d:b1:fc:fb:8f:06:88:81:8e:25:
         4d:dd:03:57:0d:83:95:ad:bf:53:0c:b8:30:6e:93:53:ab:f2:
         cc:30:ca:10:d1:08:70:c0:1e:f1:01:eb:de:8d:f4:8c:23:d3:
         53:40:d5:99:55:4f:6b:59:a2:35:38:b1:26:ff:4a:ce:b2:91:
         2c:0f:e4:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1MEQxMTAvBgNVBAUTKEI3Q0YwQjI3MEE3RkRCMUQ3MTdBRThCOTc5RDFFRTBG
Rjg4QkQ0NEYwHhcNMjUxMjA1MDMzMDQxWhcNMjUxMjEyMDMzMDQxWjAYMRYwFAYD
VQQDEw02OTMyNTFlMi02NzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFnDhQzAUZ1kaXIvk/bQ1EpnVPuPJ/Zi64LuNhJOx+97l2mtquTyftpIuB7Z
1nPknBeHY8KG2Nc70IrMnj6jsq818MWzoswq9WrOcqvnsvqDp+ikZYxrsqD35wjJ
EiOINnNS+RYjZQZXMT56vG26I0RiZB5FOYxyp0k6fw63PsORpbvcT/lm5YGO3+5Z
9LD3vIcBBEEUkpk/W9HN+FZAdOWl8TSkkcMWJmXdlKwxsRwWMzTaxOqUgoziNSoB
1V22PAH+XZhXmD2PQerZX99FP2fY+ES4MFCzlauKlsFEDFG+UNP1s3y6hScyViNt
LGMkNYeocJUPbDpwWM8RBjk49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjRQkQ+
xCamqd+UphXpr0IhinKmMB8GA1UdIwQYMBaAFLfPCycKf9sdcXrouXnR7g/4i9RP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FNjgyNjgzQzdC
QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi90ODhMSndwXzJ4MXhldWk1ZWRIdURfaUwx
RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Q4OExKd3BfMngxeGV1aTVlZEh1RF9pTDFFOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjUwRC9FNjgyNjgzQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi90ODhMSndwXzJ4
MXhldWk1ZWRIdURfaUwxRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxuBXHRh815b176ZGx/Qp/37o1OeR9ju5fR54sPZ5cd1ar2G6/1ynm
zsrga3W7EXZAgZeu+NCN2G1Buq/QkZw7CE5KjtG7WHY45dvoSk77oXKaP8osAu2a
yJgsVKy0V2cocGFVuUYGWEvdzR74vANhHjNggxpz7lWqRAq+Y/IMW8mHS9vA+9K4
NcWA+8uuQXQbAmtxSmRwOj0gZnMGaQjIMRy7l4ffCAfwTsfbyI7gxDTGufcGAMq1
/2v0tD2x/PuPBoiBjiVN3QNXDYOVrb9TDLgwbpNTq/LMMMoQ0QhwwB7xAevejfSM
I9NTQNWZVU9rWaI1OLEm/0rOspEsD+SH
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:24 2025 by rpki-client