This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File:                     mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier:          LfTd8F4Nv0DDBLPT88ko5SiLfYOHJl7wmrzVNmu8lxM=
Subject key identifier:   4B:67:4A:18:00:C4:23:1F:9E:04:AD:A6:6F:E1:39:67:FA:25:44:AC
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer:       /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number:          057E
Signing time:             Sat 06 Dec 2025 22:05:43 +0000
Manifest this update:     Sat 06 Dec 2025 22:05:42 +0000
Manifest next update:     Sat 13 Dec 2025 22:05:42 +0000
Files and hashes:         1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: bCSE6pqg5E3TPMnvP46ti8cD/sZp7C4W290gk8qWGkk=)
                          2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
                          rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
        Validity
            Not Before: Dec  6 22:05:42 2025 GMT
            Not After : Dec 13 22:05:42 2025 GMT
        Subject: CN=6934a8b6-9c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:f8:51:cf:d1:87:50:6b:b0:ca:60:e3:b6:
                    63:81:35:8a:18:43:9c:d6:99:60:f4:c3:6f:c5:a1:
                    a8:9a:b4:f7:56:de:7e:61:41:76:76:a6:d1:21:7c:
                    08:29:5e:32:c9:30:55:3d:2d:35:c5:d0:78:92:eb:
                    f9:7e:6a:5d:04:9b:73:7c:5a:21:01:23:7f:1a:e4:
                    82:f5:6d:ea:ad:4a:1f:03:9c:b0:e3:0a:5d:ca:fa:
                    f4:3c:d1:47:bf:7d:d6:44:28:d6:4b:9e:51:4c:40:
                    6c:cb:32:ed:87:a5:60:be:f4:a4:85:7d:48:39:b6:
                    ae:5c:1f:71:15:f7:d2:42:5a:b5:91:3d:f4:b2:f5:
                    73:73:1d:6a:a7:6e:a4:8a:e2:c8:27:ca:29:c8:b6:
                    69:c6:f7:a7:5e:87:c6:d0:1b:d0:74:74:ab:ad:5d:
                    6a:f0:b8:a0:b6:1d:6b:13:9c:1d:4d:b9:fa:b2:c5:
                    08:d1:ac:60:ef:a1:ce:2a:e8:c8:e2:37:b8:c7:6a:
                    ad:9c:b9:bb:7d:03:81:8f:8d:36:6b:89:f6:3a:89:
                    36:53:be:23:98:b2:93:0a:3d:9f:7e:4f:1b:56:f0:
                    79:47:90:b7:eb:39:37:f4:00:c9:2c:ea:df:f9:3b:
                    d5:8d:0e:d2:d6:35:b3:73:e8:30:d7:49:39:fc:3a:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:4A:18:00:C4:23:1F:9E:04:AD:A6:6F:E1:39:67:FA:25:44:AC
            X509v3 Authority Key Identifier:
                keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:33:4d:db:f0:e7:7e:47:5b:3f:44:f8:29:0c:36:29:bb:
         8d:09:fb:25:47:4d:82:a2:3b:ba:7f:3f:70:e6:36:04:da:bd:
         00:b3:62:1d:de:1f:90:eb:33:d9:b2:ae:ba:a8:75:c7:a7:b3:
         ad:74:b9:9e:dd:29:b7:3a:da:b1:fe:12:3c:1d:dc:15:53:7d:
         35:d2:62:0d:d5:7a:f1:7c:ec:16:78:2a:ac:9a:fe:e2:ad:03:
         2d:f0:bb:dd:79:e9:80:42:1d:b9:0e:a3:fd:bc:08:02:81:4e:
         97:35:22:8d:7c:05:48:a3:bf:ce:59:22:ce:a2:5e:03:85:59:
         67:30:78:0e:09:9f:61:ea:c3:ad:56:19:40:01:60:88:f4:49:
         66:72:7e:52:12:00:c4:8f:02:4e:a5:0b:59:db:a4:15:66:65:
         c6:c8:5e:b9:f5:46:b1:ea:1e:ac:91:c6:34:81:e9:0d:19:80:
         51:84:56:8a:2c:2e:34:94:bd:65:a7:9d:fe:25:a2:28:18:10:
         a7:1f:56:de:2e:52:74:91:d2:6c:bc:5f:76:32:c1:ef:06:d1:
         65:32:98:2c:dd:4b:be:05:31:76:50:12:ed:69:26:0e:8d:3e:
         2e:e7:0f:e9:42:5a:26:68:5d:42:9e:a1:3c:22:52:67:c3:8a:
         44:d6:3b:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD
NzZFMDEyMDkwHhcNMjUxMjA2MjIwNTQyWhcNMjUxMjEzMjIwNTQyWjAYMRYwFAYD
VQQDEw02OTM0YThiNi05YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rX4Uc/Rh1BrsMpg47ZjgTWKGEOc1plg9MNvxaGomrT3Vt5+YUF2dqbRIXwI
KV4yyTBVPS01xdB4kuv5fmpdBJtzfFohASN/GuSC9W3qrUofA5yw4wpdyvr0PNFH
v33WRCjWS55RTEBsyzLth6VgvvSkhX1IObauXB9xFffSQlq1kT30svVzcx1qp26k
iuLIJ8opyLZpxvenXofG0BvQdHSrrV1q8Ligth1rE5wdTbn6ssUI0axg76HOKujI
4je4x2qtnLm7fQOBj402a4n2Ook2U74jmLKTCj2ffk8bVvB5R5C36zk39ADJLOrf
+TvVjQ7S1jWzc+gw10k5/Dr79QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtnShgA
xCMfngStpm/hOWf6JUSsMB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx
QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEQyQS8yRDJGODI2NjAxQjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9Z
QXBxTjFDZ1ZYWmZIYmdFZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAD8zNN2/DnfkdbP0T4KQw2KbuNCfslR02Coju6fz9w5jYE2r0As2Id
3h+Q6zPZsq66qHXHp7OtdLme3Sm3Otqx/hI8HdwVU3010mIN1XrxfOwWeCqsmv7i
rQMt8LvdeemAQh25DqP9vAgCgU6XNSKNfAVIo7/OWSLOol4DhVlnMHgOCZ9h6sOt
VhlAAWCI9Elmcn5SEgDEjwJOpQtZ26QVZmXGyF659Uax6h6skcY0gekNGYBRhFaK
LC40lL1lp53+JaIoGBCnH1beLlJ0kdJsvF92MsHvBtFlMpgs3Uu+BTF2UBLtaSYO
jT4u5w/pQlomaF1CnqE8IlJnw4pE1jsG
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:15 2025 by rpki-client