This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File:                     -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier:          J/i76X1L9GAJPUcI2qA0eGm5IiN44DFI41z7XjqoS7U=
Subject key identifier:   99:90:3E:AD:62:DC:51:07:C2:54:32:02:E9:FD:64:E3:04:60:48:3A
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer:       /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial:       12ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number:          12E2
Signing time:             Thu 04 Dec 2025 16:46:42 +0000
Manifest this update:     Thu 04 Dec 2025 16:46:41 +0000
Manifest next update:     Thu 11 Dec 2025 16:46:41 +0000
Files and hashes:         1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: rP7/r3ZLnn1oC6t/gqRRQwWexDZbkSXCmldtDN8pxB4=)
                          2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: wzeD0UFJau3nPm8wmLgS+XQyLQWoi667+2jiptFzicY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
                          rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4845 (0x12ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
        Validity
            Not Before: Dec  4 16:46:41 2025 GMT
            Not After : Dec 11 16:46:41 2025 GMT
        Subject: CN=6931baf1-9e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:fa:f4:08:d1:47:9f:b6:40:76:be:cd:b1:
                    ee:36:41:af:42:ef:59:9e:88:e0:67:33:ee:ae:4b:
                    30:87:df:c8:c9:00:e7:1d:2b:6a:2a:c2:ad:ed:e0:
                    dd:75:a4:37:ec:d5:37:37:91:ef:15:25:b7:ff:6d:
                    51:dd:a7:dc:69:bd:9c:b7:74:0e:dd:74:4a:d3:e0:
                    b4:38:97:98:d2:7a:1c:e9:0f:f9:28:9f:47:1b:4b:
                    46:4f:c0:3d:0f:05:87:b0:b2:12:4d:6d:e7:9c:db:
                    45:af:2e:0b:48:b1:7f:ff:1f:d2:66:6b:00:c3:33:
                    95:4f:ea:bd:f3:e9:02:12:33:59:8d:77:31:96:29:
                    d7:85:0d:63:e3:f8:05:49:47:7c:9c:e2:4d:0a:f2:
                    cc:c1:84:48:82:de:cb:24:7d:fc:c1:fd:42:e1:9d:
                    d4:5d:f1:8d:40:64:3b:81:df:b9:89:ad:98:f7:71:
                    37:9d:b1:10:a0:b0:55:b6:48:6a:96:1a:07:02:ad:
                    bd:f6:bf:56:ad:08:7c:2d:91:f9:58:f1:ca:be:99:
                    7d:89:61:29:cb:6b:a8:39:a1:f8:ee:97:12:62:f8:
                    02:0e:a9:4c:68:3c:0b:5d:c1:5c:70:37:15:e7:40:
                    cf:ee:f9:d4:7b:ff:59:f6:aa:23:28:d8:13:61:75:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:90:3E:AD:62:DC:51:07:C2:54:32:02:E9:FD:64:E3:04:60:48:3A
            X509v3 Authority Key Identifier:
                keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:08:69:53:22:25:43:9c:2a:58:eb:15:0b:ff:9a:be:6c:
         6a:4e:58:a8:2e:f6:3f:95:c9:cb:af:b6:a5:d4:02:08:38:e6:
         0b:49:ce:72:84:16:1f:89:ff:c0:46:7f:51:35:c5:a4:c0:fc:
         da:42:38:99:fe:1e:db:6c:6d:9e:c3:e2:0f:7c:62:0f:da:ea:
         bb:a3:c1:60:31:ba:ab:cb:ec:84:8c:5b:dc:e6:8f:f8:42:9d:
         c6:da:fa:88:a0:3b:38:66:37:a6:c3:a2:0c:84:8c:c6:b7:5e:
         fe:a4:51:ee:d6:df:84:aa:c0:3d:0a:6d:0b:2d:72:1c:d4:60:
         9f:95:02:cc:46:da:25:7c:54:f1:f7:7c:8c:88:ae:eb:f4:d2:
         22:95:fa:9d:4b:af:86:0f:d2:6e:36:b3:aa:3d:44:6e:47:55:
         45:f4:78:36:4f:4b:dc:c9:4e:88:3c:ec:2f:70:2a:73:a7:db:
         61:10:8e:2e:b2:33:7f:18:ab:57:98:a5:83:6c:52:2c:6e:dc:
         3b:a3:ff:80:f3:39:01:f1:02:06:9e:7a:7d:76:ba:c4:8d:79:
         81:14:db:3f:da:4e:45:72:ca:5a:81:85:fd:dc:90:bb:e3:bb:
         6c:d9:99:03:5a:a6:32:ec:ea:91:30:7e:09:94:a6:e4:8a:37:
         6f:b2:b1:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy
OEE2NDVGNEIwHhcNMjUxMjA0MTY0NjQxWhcNMjUxMjExMTY0NjQxWjAYMRYwFAYD
VQQDEw02OTMxYmFmMS05ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4D69AjRR5+2QHa+zbHuNkGvQu9ZnojgZzPurkswh9/IyQDnHStqKsKt7eDd
daQ37NU3N5HvFSW3/21R3afcab2ct3QO3XRK0+C0OJeY0noc6Q/5KJ9HG0tGT8A9
DwWHsLISTW3nnNtFry4LSLF//x/SZmsAwzOVT+q98+kCEjNZjXcxlinXhQ1j4/gF
SUd8nOJNCvLMwYRIgt7LJH38wf1C4Z3UXfGNQGQ7gd+5ia2Y93E3nbEQoLBVtkhq
lhoHAq299r9WrQh8LZH5WPHKvpl9iWEpy2uoOaH47pcSYvgCDqlMaDwLXcFccDcV
50DP7vnUe/9Z9qojKNgTYXWv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmQPq1i
3FEHwlQyAun9ZOMEYEg6MB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB
OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT
dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfZghpUyIlQ5wqWOsVC/+avmxqTlioLvY/lcnLr7al1AIIOOYLSc5y
hBYfif/ARn9RNcWkwPzaQjiZ/h7bbG2ew+IPfGIP2uq7o8FgMbqry+yEjFvc5o/4
Qp3G2vqIoDs4Zjemw6IMhIzGt17+pFHu1t+EqsA9Cm0LLXIc1GCflQLMRtolfFTx
93yMiK7r9NIilfqdS6+GD9JuNrOqPURuR1VF9Hg2T0vcyU6IPOwvcCpzp9thEI4u
sjN/GKtXmKWDbFIsbtw7o/+A8zkB8QIGnnp9drrEjXmBFNs/2k5FcspagYX93JC7
47ts2ZkDWqYy7OqRMH4JlKbkijdvsrE3
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:14:07 2025 by rpki-client