This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
File:                     UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json)
Hash identifier:          b7VOQohPbsE09caiCmTXNJGy0U30CizFgqtgQUREKw4=
Subject key identifier:   78:30:5E:EA:EA:F2:D8:69:82:E4:EA:95:6F:F3:7D:DB:FB:B9:83:F1
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Certificate issuer:       /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
Manifest number:          01A1
Signing time:             Fri 05 Dec 2025 01:33:23 +0000
Manifest this update:     Fri 05 Dec 2025 01:33:22 +0000
Manifest next update:     Fri 12 Dec 2025 01:33:22 +0000
Files and hashes:         1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: eeQ4LHOC3an372iPL0ogmibPgYkPWzl8dnA6GBlvtsU=)
                          2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: prpO02sdaGxa9omiI4KP6Jj37m9PViRORA2hf2czA64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
                          rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
        Validity
            Not Before: Dec  5 01:33:22 2025 GMT
            Not After : Dec 12 01:33:22 2025 GMT
        Subject: CN=69323663-7e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:2a:3b:42:14:63:d3:05:84:02:4a:61:2a:
                    e4:a1:5b:b0:57:24:06:54:8f:4e:cd:1e:3a:26:d5:
                    04:6a:0b:1a:75:76:57:00:29:0f:95:d3:05:da:6f:
                    ea:98:f8:6d:e8:e8:41:b3:6c:fc:c4:39:d1:31:f0:
                    5c:71:17:fc:ad:13:ee:1d:e4:cb:08:d2:be:94:26:
                    63:36:b2:35:87:01:8c:aa:e4:24:b4:cf:ab:f0:15:
                    21:7d:22:52:83:85:b7:46:ef:84:cf:2e:b7:90:85:
                    bb:79:cc:1a:d5:82:29:f4:ed:22:47:01:84:81:6c:
                    e3:e3:5e:6d:a8:65:30:a1:f7:67:b2:c2:13:ba:c8:
                    78:f4:9d:1a:1e:3e:83:0a:cf:8e:0f:9e:72:86:16:
                    39:74:f7:78:37:dc:55:5c:52:bd:85:58:af:bf:0a:
                    1f:2d:2d:79:16:1e:39:05:e9:05:89:fd:f6:7e:7f:
                    ee:e2:1b:1a:8c:f2:16:9f:a7:cc:8e:14:18:f3:88:
                    b1:ef:b3:fa:6a:91:e5:38:f4:1d:cc:83:22:2e:ea:
                    8b:3f:53:72:37:d5:82:f1:1c:c3:70:b4:ee:e9:ac:
                    f3:59:d1:db:3f:5e:6d:d6:31:bc:c6:b0:bb:9c:59:
                    ef:44:c8:57:bc:57:51:e5:0d:28:41:66:e2:c7:f2:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:5E:EA:EA:F2:D8:69:82:E4:EA:95:6F:F3:7D:DB:FB:B9:83:F1
            X509v3 Authority Key Identifier:
                keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:97:3c:ed:b9:15:37:03:ea:8a:a7:c2:ae:0e:4b:46:ae:25:
         7b:8c:30:01:ef:5f:cb:7c:cd:e5:31:ea:17:98:50:bc:06:a0:
         16:62:a0:3c:30:02:f5:7d:3b:1b:7f:74:a9:2a:a6:73:63:04:
         c9:e0:1a:b9:1f:ff:e7:4f:3f:96:9c:17:46:43:88:5c:94:9e:
         80:fc:00:e8:5c:63:22:70:dc:e6:5b:b8:8a:d9:8f:e3:4b:86:
         d5:6c:f0:53:e9:36:c6:bb:b9:45:1e:52:56:10:10:97:a0:08:
         44:bb:96:90:50:ab:00:85:e9:0f:99:a8:be:10:ed:9b:1f:83:
         3d:37:fe:3c:00:46:b4:cb:fd:4d:6b:c1:a8:9d:86:0d:1a:53:
         df:65:3f:de:91:a2:e0:ad:34:f0:d1:f0:35:89:05:9e:44:a1:
         aa:05:e9:4b:44:76:e1:d4:80:89:8e:52:52:a4:36:3f:ea:04:
         68:90:ce:e2:26:cb:96:36:a4:67:bf:cf:a8:b6:bd:53:21:7c:
         5f:ba:4f:94:93:70:f5:21:47:ca:be:ad:85:89:83:3d:9e:e4:
         44:97:a9:08:e6:cc:8a:9a:0d:2f:3b:fb:29:6d:dc:ae:34:5e:
         7c:c8:6c:ac:13:21:42:80:d8:97:1f:34:ca:83:ba:07:03:ef:
         a2:f2:ce:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx
MEQ1Q0NDQUUwHhcNMjUxMjA1MDEzMzIyWhcNMjUxMjEyMDEzMzIyWjAYMRYwFAYD
VQQDEw02OTMyMzY2My03ZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2sQqO0IUY9MFhAJKYSrkoVuwVyQGVI9OzR46JtUEagsadXZXACkPldMF2m/q
mPht6OhBs2z8xDnRMfBccRf8rRPuHeTLCNK+lCZjNrI1hwGMquQktM+r8BUhfSJS
g4W3Ru+Ezy63kIW7ecwa1YIp9O0iRwGEgWzj415tqGUwofdnssITush49J0aHj6D
Cs+OD55yhhY5dPd4N9xVXFK9hVivvwofLS15Fh45BekFif32fn/u4hsajPIWn6fM
jhQY84ix77P6apHlOPQdzIMiLuqLP1NyN9WC8RzDcLTu6azzWdHbP15t1jG8xrC7
nFnvRMhXvFdR5Q0oQWbix/LLKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgwXurq
8thpguTqlW/zfdv7uYPxMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0
N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1
MjI2VExxaUdpZHdRMWN6SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBlzztuRU3A+qKp8KuDktGriV7jDAB71/LfM3lMeoXmFC8BqAWYqA8
MAL1fTsbf3SpKqZzYwTJ4Bq5H//nTz+WnBdGQ4hclJ6A/ADoXGMicNzmW7iK2Y/j
S4bVbPBT6TbGu7lFHlJWEBCXoAhEu5aQUKsAhekPmai+EO2bH4M9N/48AEa0y/1N
a8GonYYNGlPfZT/ekaLgrTTw0fA1iQWeRKGqBelLRHbh1ICJjlJSpDY/6gRokM7i
JsuWNqRnv8+otr1TIXxfuk+Uk3D1IUfKvq2FiYM9nuREl6kI5syKmg0vO/spbdyu
NF58yGysEyFCgNiXHzTKg7oHA++i8s71
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:31 2025 by rpki-client