This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File:                     bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier:          c0v00QoLLcTwWzFozsikfcZ5Sk0tNlTIEH5DA2KbRG0=
Subject key identifier:   EB:0A:AA:FE:8C:CA:7D:1E:43:FC:F2:05:AC:48:F2:F7:24:89:A6:DE
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       13EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number:          13C4
Signing time:             Sat 06 Dec 2025 16:31:08 +0000
Manifest this update:     Sat 06 Dec 2025 16:31:08 +0000
Manifest next update:     Sat 13 Dec 2025 16:31:08 +0000
Files and hashes:         1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: J8pQj+wy0rfK8frMVeKRYOLOJFtjLpiUdOfNMW0MeHw=)
                          2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: UjuTxiRAP/X58Z72XiuqvHNz63YuSaMMCGvUPVkyPaA=)
                          3: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: DcZGy4PWZzTwOUNtpL1rLlMb1gqaFihjq3bAlb0Tfo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5103 (0x13ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Dec  6 16:31:08 2025 GMT
            Not After : Dec 13 16:31:08 2025 GMT
        Subject: CN=69345a4c-7e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:6f:66:ea:c4:34:50:60:24:37:ec:5f:9b:
                    0b:e9:5e:41:0e:5e:7a:50:66:00:c7:a0:12:82:48:
                    bf:59:a4:0c:66:e2:f1:25:44:e5:86:4d:f0:5f:97:
                    40:d6:92:b6:67:40:b2:1f:c8:15:d3:5e:0d:ba:9f:
                    2b:33:d3:0c:1f:23:1f:53:01:66:90:c3:f5:1e:40:
                    dc:57:71:b8:bf:a9:3f:dc:78:dd:1b:38:51:23:ed:
                    5f:e1:3d:e8:f6:ab:5b:91:27:08:41:cb:f1:32:90:
                    80:36:56:15:50:6d:f7:b3:5a:54:f4:6c:69:7c:45:
                    c4:2a:2c:a8:00:71:7a:d9:d2:34:d8:2f:c4:30:74:
                    aa:96:a9:c4:a7:7e:8b:f4:b6:42:bf:27:0e:5d:1b:
                    2e:4e:c0:92:51:14:83:7a:4f:1e:53:e8:9a:3d:10:
                    97:ac:e4:e5:1d:39:fa:f5:5f:3e:9e:65:8d:cb:d1:
                    06:eb:50:2e:a3:5f:5d:f3:d8:37:62:fa:48:ea:54:
                    a1:90:7d:8e:74:60:77:e3:f3:c6:dd:bc:51:3d:b1:
                    a0:f3:cf:4e:99:c1:a9:44:f3:d8:29:e0:1d:b7:86:
                    31:06:c7:43:cf:8d:90:45:d9:ae:7a:66:ad:74:75:
                    0f:04:21:ea:12:d9:59:53:98:3e:7b:91:0e:87:e0:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0A:AA:FE:8C:CA:7D:1E:43:FC:F2:05:AC:48:F2:F7:24:89:A6:DE
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:90:42:96:78:42:41:09:eb:6a:ea:81:02:1d:ba:84:ed:f5:
         4b:7a:f3:2f:15:2d:c7:da:7f:2c:b4:6b:f7:a1:fb:4a:2f:d1:
         ca:12:4a:c4:2f:4e:05:26:5b:22:75:d4:3a:20:03:34:ff:00:
         08:2b:d6:74:89:c8:f9:98:41:9d:5f:6a:d4:80:eb:80:8a:82:
         90:52:1a:b3:43:e2:ec:5a:39:85:87:93:26:a9:05:9a:ec:97:
         ab:5c:b8:9c:3f:c5:db:b7:f0:16:b5:f3:21:3e:30:01:4f:1a:
         c7:ba:c8:c4:9d:a7:92:9b:ce:53:c6:f6:b6:06:42:38:0a:55:
         e5:64:32:62:33:c9:23:77:df:10:b5:df:0d:3f:f5:5a:72:1c:
         dd:9c:0d:3e:01:a4:fc:db:d4:fe:d2:84:3e:1d:3d:68:6a:2c:
         13:d6:20:56:75:53:2d:e1:d1:e8:4b:d2:89:17:a7:dd:b7:88:
         b6:11:9d:bb:78:7e:76:6e:7b:4f:22:5d:31:70:fa:93:6e:f0:
         31:a8:7e:37:07:84:9f:ca:1e:32:e0:58:81:65:ed:95:80:bf:
         b4:a9:16:8f:74:9d:a4:75:66:e9:f4:ed:f4:0f:4a:1d:d9:b3:
         72:6b:f3:30:4b:c1:ac:ce:a3:c3:3c:12:64:f6:c8:17:d3:30:
         16:74:5e:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG
MDNBNjA1QzMwHhcNMjUxMjA2MTYzMTA4WhcNMjUxMjEzMTYzMTA4WjAYMRYwFAYD
VQQDEw02OTM0NWE0Yy03ZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5zpvZurENFBgJDfsX5sL6V5BDl56UGYAx6ASgki/WaQMZuLxJUTlhk3wX5dA
1pK2Z0CyH8gV014Nup8rM9MMHyMfUwFmkMP1HkDcV3G4v6k/3HjdGzhRI+1f4T3o
9qtbkScIQcvxMpCANlYVUG33s1pU9GxpfEXEKiyoAHF62dI02C/EMHSqlqnEp36L
9LZCvycOXRsuTsCSURSDek8eU+iaPRCXrOTlHTn69V8+nmWNy9EG61Auo19d89g3
YvpI6lShkH2OdGB34/PG3bxRPbGg889OmcGpRPPYKeAdt4YxBsdDz42QRdmuemat
dHUPBCHqEtlZU5g+e5EOh+B9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsKqv6M
yn0eQ/zyBaxI8vckiabeMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3
NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm
TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTkEKWeEJBCetq6oECHbqE7fVLevMvFS3H2n8stGv3oftKL9HKEkrE
L04FJlsiddQ6IAM0/wAIK9Z0icj5mEGdX2rUgOuAioKQUhqzQ+LsWjmFh5MmqQWa
7JerXLicP8Xbt/AWtfMhPjABTxrHusjEnaeSm85Txva2BkI4ClXlZDJiM8kjd98Q
td8NP/VachzdnA0+AaT829T+0oQ+HT1oaiwT1iBWdVMt4dHoS9KJF6fdt4i2EZ27
eH52bntPIl0xcPqTbvAxqH43B4Sfyh4y4FiBZe2VgL+0qRaPdJ2kdWbp9O30D0od
2bNya/MwS8GszqPDPBJk9sgX0zAWdF4p
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:27 2025 by rpki-client