This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File:                     72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier:          j1ecPr65GzQ5voUDjO7iBss2jHf6JhY4YRhL+q1KUw8=
Subject key identifier:   63:70:09:42:76:37:89:04:96:3B:30:9B:07:7D:21:79:D0:55:72:66
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer:       /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial:       3516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number:          3509
Signing time:             Sat 06 Dec 2025 14:54:03 +0000
Manifest this update:     Sat 06 Dec 2025 14:54:02 +0000
Manifest next update:     Sat 13 Dec 2025 14:54:02 +0000
Files and hashes:         1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: C2L4JamWsdsmH49C2ekFYqw8+OSSR9w5W8rwLRbGJGs=)
                          2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: v6QDKHGNgQsriG4lPK9GtQgpf0BZUi9e8DtrdXFAk8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
        Validity
            Not Before: Dec  6 14:54:02 2025 GMT
            Not After : Dec 13 14:54:02 2025 GMT
        Subject: CN=6934438a-0583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:e7:e4:22:14:6e:ba:cf:4a:48:bf:fc:5d:
                    36:bb:a8:ea:7b:c6:c5:e2:f5:af:4d:6a:3c:da:6d:
                    51:ba:d3:58:32:61:01:0b:03:08:7b:ed:b3:53:27:
                    4a:16:57:72:23:b2:b2:b0:04:38:2b:98:98:80:d9:
                    3a:10:83:5f:3b:60:72:6f:f5:77:7a:66:53:a0:36:
                    ef:6e:e1:3e:40:78:98:07:d0:40:b2:6b:b3:3e:17:
                    a1:d8:0c:0f:aa:53:7a:e3:f5:b0:ed:77:61:94:f2:
                    ea:13:4f:bb:76:fa:d6:c0:a0:26:52:3d:79:5a:45:
                    20:4d:ed:28:86:a7:a5:aa:0e:64:f5:69:83:9e:82:
                    83:35:0f:85:f3:72:0d:fe:11:2c:4d:46:a7:e0:95:
                    6d:2f:b5:35:16:48:6e:d3:1b:3c:30:00:d4:3b:c5:
                    ba:31:91:bf:84:85:3b:bd:36:da:97:3d:8a:43:5e:
                    93:30:b7:cb:ea:e1:c6:76:e3:42:e0:e9:a2:ca:2a:
                    1f:45:7b:4b:8a:79:60:fd:20:ee:64:df:22:ed:fb:
                    b4:51:df:c9:1c:59:2e:df:8c:90:3a:19:d4:3b:b7:
                    ac:9e:72:55:0d:49:ef:d4:28:35:93:69:b1:64:ad:
                    78:3c:57:a6:dd:23:75:96:73:72:59:ea:ad:b5:79:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:09:42:76:37:89:04:96:3B:30:9B:07:7D:21:79:D0:55:72:66
            X509v3 Authority Key Identifier:
                keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:00:49:fc:5b:07:0a:66:35:62:4c:e9:e5:78:ac:3c:6b:04:
         f5:94:0a:e6:43:36:17:52:8a:bd:73:49:a7:4d:49:da:5e:b9:
         f0:fb:79:0c:1a:9f:4a:69:55:69:48:7a:82:a5:3e:f0:cf:5a:
         0c:90:77:40:b8:0f:a3:8a:a2:24:44:aa:28:15:0e:5a:84:6c:
         63:ee:9b:6c:05:3d:5b:0b:94:09:67:fb:8f:c5:65:1d:bb:9f:
         36:ba:95:64:87:a9:13:bf:e0:9a:68:43:31:c3:d3:97:e1:d6:
         0e:7b:c8:de:3e:04:b1:42:e3:ee:be:e6:8b:2f:df:b1:00:d7:
         b7:cb:8a:2a:ba:12:86:bc:a6:59:53:88:60:07:44:07:02:cc:
         13:e2:52:94:22:d2:62:07:fe:d4:1d:f3:0a:0c:82:d7:83:35:
         3e:21:08:8a:05:25:5b:8c:ad:f5:81:e6:42:ff:f3:3e:24:5c:
         e8:b0:3a:4a:be:48:12:1d:2b:ed:78:43:bf:4d:36:45:7d:35:
         da:52:98:01:2f:89:6a:bc:8a:9c:e6:b3:83:bf:93:9b:36:cf:
         73:d2:53:77:15:d7:a6:82:f4:b0:89:1e:a0:70:c3:c9:de:ba:
         f8:43:97:43:12:49:7f:43:3d:76:8c:f5:18:0a:03:c9:28:cc:
         03:fb:5a:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2
QzQ4OEREMTUwHhcNMjUxMjA2MTQ1NDAyWhcNMjUxMjEzMTQ1NDAyWjAYMRYwFAYD
VQQDEw02OTM0NDM4YS0wNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+3n5CIUbrrPSki//F02u6jqe8bF4vWvTWo82m1RutNYMmEBCwMIe+2zUydK
FldyI7KysAQ4K5iYgNk6EINfO2Byb/V3emZToDbvbuE+QHiYB9BAsmuzPheh2AwP
qlN64/Ww7XdhlPLqE0+7dvrWwKAmUj15WkUgTe0ohqelqg5k9WmDnoKDNQ+F83IN
/hEsTUan4JVtL7U1Fkhu0xs8MADUO8W6MZG/hIU7vTbalz2KQ16TMLfL6uHGduNC
4OmiyiofRXtLinlg/SDuZN8i7fu0Ud/JHFku34yQOhnUO7esnnJVDUnv1Cg1k2mx
ZK14PFem3SN1lnNyWeqttXm94QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNwCUJ2
N4kEljswmwd9IXnQVXJmMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE
OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew
VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDNAEn8WwcKZjViTOnleKw8awT1lArmQzYXUoq9c0mnTUnaXrnw+3kM
Gp9KaVVpSHqCpT7wz1oMkHdAuA+jiqIkRKooFQ5ahGxj7ptsBT1bC5QJZ/uPxWUd
u582upVkh6kTv+CaaEMxw9OX4dYOe8jePgSxQuPuvuaLL9+xANe3y4oquhKGvKZZ
U4hgB0QHAswT4lKUItJiB/7UHfMKDILXgzU+IQiKBSVbjK31geZC//M+JFzosDpK
vkgSHSvteEO/TTZFfTXaUpgBL4lqvIqc5rODv5ObNs9z0lN3FdemgvSwiR6gcMPJ
3rr4Q5dDEkl/Qz12jPUYCgPJKMwD+1oV
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:54 2025 by rpki-client