This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
File:                     S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json)
Hash identifier:          bsb7hCsCKINJcN/3QBvAE7iaMkW8H37pACdFsg6UqiY=
Subject key identifier:   58:ED:FB:CD:6C:90:D6:30:89:E0:62:36:41:E3:10:DE:A6:F8:5C:32
Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
Certificate issuer:       /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Certificate serial:       0398
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
Manifest number:          0390
Signing time:             Thu 04 Dec 2025 23:13:05 +0000
Manifest this update:     Thu 04 Dec 2025 23:13:04 +0000
Manifest next update:     Thu 11 Dec 2025 23:13:04 +0000
Files and hashes:         1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: T2lNzySfeN+ytXNMWo9DysKDlEpyo24CVo7YbfEgppA=)
                          2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: yEbc6F9bHI0IpI/Ljg73yL3b8qnvoYUzAxWD62rFx2U=)
                          3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: b/WM2XRqJxBELFgBognptBOHT/qHpjt428YJO43uOQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl
                          rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
        Validity
            Not Before: Dec  4 23:13:04 2025 GMT
            Not After : Dec 11 23:13:04 2025 GMT
        Subject: CN=69321581-0380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:c4:82:2d:d2:79:13:9f:a0:fb:84:09:03:
                    31:f8:3d:18:65:9c:58:7d:48:73:3e:66:f0:83:fb:
                    af:dc:b7:05:c1:7c:1c:4d:d1:e2:00:83:10:a2:98:
                    2e:0b:c5:47:ff:05:69:2c:bf:e8:01:25:57:6f:26:
                    67:b5:16:63:0e:87:93:ee:60:60:7a:1e:49:dd:4b:
                    04:9f:cb:dc:5e:32:57:36:20:eb:8d:75:76:ea:d3:
                    4f:a2:96:9b:c4:36:79:88:ba:2b:e9:49:92:63:71:
                    8c:76:70:04:4b:de:99:63:68:45:23:08:a3:a3:33:
                    8d:ab:17:0f:89:1d:83:81:13:03:c4:96:3c:68:a7:
                    96:b7:bc:ac:da:63:25:07:54:fa:a9:25:9e:1f:0d:
                    e5:cf:4f:1e:83:7a:38:a3:4f:bd:20:d3:7d:63:2c:
                    f7:ff:2e:0a:34:db:0d:37:67:15:51:ba:d2:40:08:
                    d9:95:8e:5d:ed:71:e7:dd:41:1d:df:aa:b0:06:d9:
                    ba:17:b1:8d:17:f6:3d:5d:8d:79:72:32:55:b7:4e:
                    5a:f2:df:0f:02:3e:9b:f6:5a:28:e5:2f:96:69:1a:
                    ab:02:67:d0:6d:ba:9a:ab:a9:57:39:25:5e:4c:35:
                    d3:c6:0c:f1:fd:a1:48:c1:91:ec:98:b7:34:a7:a9:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:FB:CD:6C:90:D6:30:89:E0:62:36:41:E3:10:DE:A6:F8:5C:32
            X509v3 Authority Key Identifier:
                keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:ba:85:5b:25:74:b3:bc:c3:74:67:97:13:f9:3c:35:8e:
         20:6e:c2:6c:32:48:29:d9:15:8b:ca:ce:14:f9:4d:15:3d:4f:
         40:c8:4c:fd:b4:e5:80:2b:e3:e0:44:93:f7:56:93:17:bd:fe:
         d6:93:7c:45:36:62:80:c4:dd:67:8c:74:2a:e9:dd:11:ba:72:
         38:49:87:16:d8:cc:d8:38:d4:2a:35:ab:47:c0:08:54:46:82:
         ff:29:e7:2d:90:a0:fa:fb:8a:90:ae:d7:fb:1a:55:97:55:af:
         37:ab:5a:b7:c4:01:00:75:72:e9:84:0c:74:09:f3:ae:4d:4e:
         10:6a:26:1d:a0:ad:11:10:08:a0:7a:4b:e4:a0:be:bc:2e:c9:
         7b:54:b1:a6:7e:59:08:9b:06:65:1f:8e:53:9c:14:1b:48:f0:
         63:06:6b:54:25:00:ee:3f:03:a9:ff:12:95:64:1d:8d:be:cd:
         6a:ec:df:cf:41:75:ef:b1:f1:cb:80:a7:ef:b0:c6:ee:1b:56:
         56:9b:33:95:25:d0:87:32:58:b6:ee:ef:9b:6a:82:1d:f5:72:
         34:c0:7d:95:13:ef:62:c9:51:e5:ac:8e:b1:5c:d8:dc:85:2a:
         01:40:73:e5:ea:bd:77:12:53:1c:dc:63:55:88:4b:8a:83:21:
         8a:b9:a9:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx
OEQ3RUQzRDkwHhcNMjUxMjA0MjMxMzA0WhcNMjUxMjExMjMxMzA0WjAYMRYwFAYD
VQQDEw02OTMyMTU4MS0wMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhzEgi3SeROfoPuECQMx+D0YZZxYfUhzPmbwg/uv3LcFwXwcTdHiAIMQopgu
C8VH/wVpLL/oASVXbyZntRZjDoeT7mBgeh5J3UsEn8vcXjJXNiDrjXV26tNPopab
xDZ5iLor6UmSY3GMdnAES96ZY2hFIwijozONqxcPiR2DgRMDxJY8aKeWt7ys2mMl
B1T6qSWeHw3lz08eg3o4o0+9INN9Yyz3/y4KNNsNN2cVUbrSQAjZlY5d7XHn3UEd
36qwBtm6F7GNF/Y9XY15cjJVt05a8t8PAj6b9loo5S+WaRqrAmfQbbqaq6lXOSVe
TDXTxgzx/aFIwZHsmLc0p6nPtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjt+81s
kNYwieBiNkHjEN6m+FwyMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2
MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx
bFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAF+rqFWyV0s7zDdGeXE/k8NY4gbsJsMkgp2RWLys4U+U0VPU9AyEz9
tOWAK+PgRJP3VpMXvf7Wk3xFNmKAxN1njHQq6d0RunI4SYcW2MzYONQqNatHwAhU
RoL/KectkKD6+4qQrtf7GlWXVa83q1q3xAEAdXLphAx0CfOuTU4QaiYdoK0REAig
ekvkoL68Lsl7VLGmflkImwZlH45TnBQbSPBjBmtUJQDuPwOp/xKVZB2Nvs1q7N/P
QXXvsfHLgKfvsMbuG1ZWmzOVJdCHMli27u+baoId9XI0wH2VE+9iyVHlrI6xXNjc
hSoBQHPl6r13ElMc3GNViEuKgyGKuanL
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:12:32 2025 by rpki-client