This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          hlaWwdday2GRXR6qVqJPkLfU2Ja9FkrrSfG+2vSZMe4=
Subject key identifier:   85:8F:BA:EC:E9:EE:C8:78:A7:65:04:35:A2:35:D6:2B:16:C0:41:B5
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       06A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          068C
Signing time:             Sat 06 Dec 2025 21:26:34 +0000
Manifest this update:     Sat 06 Dec 2025 21:26:33 +0000
Manifest next update:     Sat 13 Dec 2025 21:26:33 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: dNFMD5+gSn9JAu8xYjbU8/RuZ9QzBWB2tRCPnu+HJsU=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: gznbpzQsXm6xdg/ldBzHxBtH3yLXVXqXYnLIiSuqeug=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: 5xwHH4/f23qWAT+TboZC+tRvenA32AbWJXTfPPug25w=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: t68ri8+sG+PCgnACutRhiIQMtoo2iXpsz04+S32xy6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Dec  6 21:26:33 2025 GMT
            Not After : Dec 13 21:26:33 2025 GMT
        Subject: CN=69349f8a-4fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:ac:90:61:44:a6:3f:ae:31:21:96:ae:31:
                    e3:e8:32:61:bf:33:10:c6:49:ba:26:90:1d:ac:7e:
                    d1:88:db:0d:83:9e:53:c8:58:2c:03:8e:05:fe:ce:
                    34:0b:df:f5:e9:f5:38:5b:52:82:bf:48:bc:97:1e:
                    0e:67:78:7d:b9:42:48:e6:e5:98:ec:e4:83:fc:b8:
                    eb:a7:ac:ff:7c:32:f9:ec:15:01:6c:b0:8d:ab:fd:
                    78:ed:2d:6b:d8:67:20:b6:63:e1:40:43:0d:94:6f:
                    02:fe:79:05:ca:74:17:2e:f1:1b:ff:d1:e6:0d:b7:
                    ae:2c:d3:56:34:af:d8:d2:4f:cc:d8:a1:6f:06:07:
                    7a:4e:23:2d:1a:25:da:94:c7:82:68:21:d0:7e:7a:
                    8f:2e:44:c9:1e:03:d3:e9:42:1b:c4:c5:b1:0a:87:
                    4e:0a:30:93:20:84:41:1d:73:0c:34:28:13:e2:be:
                    5b:21:51:0c:c6:04:fa:fc:97:9b:85:a5:a8:77:cf:
                    f0:a1:10:45:9a:1c:54:b6:ab:52:7c:d8:62:21:7b:
                    e9:da:d9:3a:c8:f5:83:a0:4a:ac:99:d5:fe:1d:eb:
                    af:4b:c8:72:63:b9:ff:01:6f:b5:41:f4:2f:dc:1d:
                    1a:3c:83:f9:15:1d:6b:1d:68:bb:96:77:bc:08:23:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:BA:EC:E9:EE:C8:78:A7:65:04:35:A2:35:D6:2B:16:C0:41:B5
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:af:51:de:a4:c4:77:a1:5a:02:eb:9c:27:36:16:1d:0b:
         39:14:09:32:a8:c7:1e:57:4d:c3:42:e8:28:e7:1f:02:49:80:
         c5:b3:9c:d2:1d:01:3c:bd:80:50:62:e5:9d:3c:55:dd:e4:9c:
         b7:a6:79:4a:ff:3c:b0:a8:ac:69:56:2e:3f:c1:70:cc:6a:d2:
         ee:af:a8:76:1e:23:b0:6d:17:88:b5:fe:b1:f4:f4:df:e4:8d:
         25:ef:ca:4d:c4:ec:78:0e:c2:0b:9c:2e:f3:ca:29:59:f6:40:
         04:e2:c9:36:71:75:4a:54:df:94:3a:f7:7c:a1:fa:26:6a:77:
         e5:14:9d:a3:da:f3:b1:e5:37:fa:17:9a:53:94:f6:ce:c0:03:
         fc:e1:c0:34:ee:c0:00:b2:1a:9d:2f:83:15:72:f4:0b:67:31:
         95:21:75:0e:e2:39:bd:21:73:41:90:41:3b:ea:a6:54:32:37:
         91:32:19:db:fd:dc:20:56:85:18:30:71:ea:95:06:2a:fe:7d:
         80:ea:39:62:59:9e:bb:c1:88:15:a4:10:f3:9d:dc:6c:23:18:
         be:53:7e:0e:2c:9c:b4:5c:4d:64:8b:dd:57:db:8a:95:92:de:
         5b:39:0b:85:4d:2b:ae:37:29:e0:73:ea:06:af:5b:1b:bf:b8:
         a9:f6:ab:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjUxMjA2MjEyNjMzWhcNMjUxMjEzMjEyNjMzWjAYMRYwFAYD
VQQDEw02OTM0OWY4YS00ZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3LyskGFEpj+uMSGWrjHj6DJhvzMQxkm6JpAdrH7RiNsNg55TyFgsA44F/s40
C9/16fU4W1KCv0i8lx4OZ3h9uUJI5uWY7OSD/Ljrp6z/fDL57BUBbLCNq/147S1r
2GcgtmPhQEMNlG8C/nkFynQXLvEb/9HmDbeuLNNWNK/Y0k/M2KFvBgd6TiMtGiXa
lMeCaCHQfnqPLkTJHgPT6UIbxMWxCodOCjCTIIRBHXMMNCgT4r5bIVEMxgT6/Jeb
haWod8/woRBFmhxUtqtSfNhiIXvp2tk6yPWDoEqsmdX+HeuvS8hyY7n/AW+1QfQv
3B0aPIP5FR1rHWi7lne8CCPb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWPuuzp
7sh4p2UENaI11isWwEG1MB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCj6K9R3qTEd6FaAuucJzYWHQs5FAkyqMceV03DQugo5x8CSYDFs5zS
HQE8vYBQYuWdPFXd5Jy3pnlK/zywqKxpVi4/wXDMatLur6h2HiOwbReItf6x9PTf
5I0l78pNxOx4DsILnC7zyilZ9kAE4sk2cXVKVN+UOvd8ofomanflFJ2j2vOx5Tf6
F5pTlPbOwAP84cA07sAAshqdL4MVcvQLZzGVIXUO4jm9IXNBkEE76qZUMjeRMhnb
/dwgVoUYMHHqlQYq/n2A6jliWZ67wYgVpBDzndxsIxi+U34OLJy0XE1ki91X24qV
kt5bOQuFTSuuNyngc+oGr1sbv7ip9qsI
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:56 2025 by rpki-client