This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          VEyRXhb5L/f7y/GKcsKtPi6a1WmQlgcDelFPeVgLUVo=
Subject key identifier:   A5:4B:DF:F0:F6:65:32:30:A5:35:B5:4B:F2:6F:B1:07:0A:2D:48:42
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          0197
Signing time:             Fri 05 Dec 2025 01:40:46 +0000
Manifest this update:     Fri 05 Dec 2025 01:40:46 +0000
Manifest next update:     Fri 12 Dec 2025 01:40:46 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: 3Yw+Gzw+1NSjGH01l2UXxhz6zW5gYk+kYwMKaWznors=)
                          2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=)
                          3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Dec  5 01:40:46 2025 GMT
            Not After : Dec 12 01:40:46 2025 GMT
        Subject: CN=6932381e-0a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:0d:71:21:db:f3:94:ef:f9:87:8f:c2:13:
                    3c:d9:cf:4a:88:26:c3:ef:ba:03:7c:09:f3:17:d6:
                    81:fe:88:96:9a:9a:82:c5:cf:64:8e:34:57:4c:b4:
                    57:b2:6f:06:a9:b2:ce:51:f0:45:af:98:88:36:34:
                    f2:3f:cd:81:9e:62:ca:15:ee:59:51:95:19:1e:74:
                    68:2c:39:33:6b:1a:49:34:41:d2:b6:7c:b3:3b:86:
                    4e:40:f7:62:8e:b7:2c:f3:10:9b:27:28:b8:3b:d1:
                    1a:e9:93:9f:ce:96:de:b0:6a:72:4d:53:32:cd:fb:
                    dd:7a:6b:67:6f:08:4e:77:4b:ed:5d:b2:e7:da:1a:
                    fb:0f:ad:c5:a6:fb:79:f4:c9:f4:71:4b:17:d6:2a:
                    d4:52:3e:d2:bc:51:ae:f8:24:8f:92:c4:a7:86:9b:
                    d8:12:fa:87:9b:bb:04:af:7f:5c:68:a9:ad:12:6f:
                    11:c0:b6:68:42:7e:0a:46:94:0f:7f:92:05:32:d4:
                    b3:79:15:dc:47:ef:d2:eb:c5:21:52:27:ec:ae:a4:
                    2b:4e:4b:60:1f:b7:60:e0:73:49:a0:6d:73:f7:4e:
                    35:36:ab:47:9e:ca:6f:38:86:d2:75:00:e7:75:44:
                    e0:80:ac:ff:45:15:fc:21:11:22:a0:8a:0a:1e:13:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:DF:F0:F6:65:32:30:A5:35:B5:4B:F2:6F:B1:07:0A:2D:48:42
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c2:6b:12:e6:5d:08:32:58:2f:6d:57:56:60:44:82:2b:f0:
         7d:67:bf:49:90:f6:7e:bd:61:2f:05:6c:d8:45:ae:84:99:80:
         12:a7:0c:cc:99:63:ef:e1:9f:78:f9:5a:60:59:56:c0:76:df:
         9e:57:8e:d6:ef:20:e6:cb:aa:ea:b7:da:6f:a1:86:6e:e4:59:
         95:7d:62:3b:d1:4f:9f:79:c3:99:c3:a9:07:f0:50:47:e0:08:
         85:8d:ad:61:6d:24:dd:d3:8f:37:10:e9:19:77:5b:e0:28:60:
         25:b2:4d:05:09:ca:eb:61:f8:f3:80:9e:9a:61:6e:a6:7d:b3:
         eb:b2:c1:16:11:8d:78:56:ee:67:88:ee:61:02:e0:83:74:bc:
         b5:ed:5b:9b:1f:27:79:b2:47:97:47:9e:16:f5:85:76:8e:a7:
         31:1a:74:f1:cc:54:37:19:11:0f:9c:63:f5:16:68:16:aa:b2:
         15:2f:de:88:13:36:f1:32:eb:a6:d9:dc:6d:59:bd:d7:5e:ab:
         48:d3:cd:ac:fb:4e:5f:04:09:3b:dc:22:e8:f4:eb:da:07:9f:
         42:0a:9b:1e:93:aa:1e:74:12:12:0a:85:db:bf:03:7b:5e:7d:
         83:6e:c9:80:e3:a6:31:28:b3:54:79:e6:86:72:0e:73:0d:78:
         5c:f0:7b:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1
QTc0NDA5OUQwHhcNMjUxMjA1MDE0MDQ2WhcNMjUxMjEyMDE0MDQ2WjAYMRYwFAYD
VQQDEw02OTMyMzgxZS0wYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzA0NcSHb85Tv+YePwhM82c9KiCbD77oDfAnzF9aB/oiWmpqCxc9kjjRXTLRX
sm8GqbLOUfBFr5iINjTyP82BnmLKFe5ZUZUZHnRoLDkzaxpJNEHStnyzO4ZOQPdi
jrcs8xCbJyi4O9Ea6ZOfzpbesGpyTVMyzfvdemtnbwhOd0vtXbLn2hr7D63Fpvt5
9Mn0cUsX1irUUj7SvFGu+CSPksSnhpvYEvqHm7sEr39caKmtEm8RwLZoQn4KRpQP
f5IFMtSzeRXcR+/S68UhUifsrqQrTktgH7dg4HNJoG1z9041NqtHnspvOIbSdQDn
dUTggKz/RRX8IREioIoKHhO4yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVL3/D2
ZTIwpTW1S/JvsQcKLUhCMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3
MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu
NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7wmsS5l0IMlgvbVdWYESCK/B9Z79JkPZ+vWEvBWzYRa6EmYASpwzM
mWPv4Z94+VpgWVbAdt+eV47W7yDmy6rqt9pvoYZu5FmVfWI70U+fecOZw6kH8FBH
4AiFja1hbSTd0483EOkZd1vgKGAlsk0FCcrrYfjzgJ6aYW6mfbPrssEWEY14Vu5n
iO5hAuCDdLy17VubHyd5skeXR54W9YV2jqcxGnTxzFQ3GREPnGP1FmgWqrIVL96I
EzbxMuum2dxtWb3XXqtI082s+05fBAk73CLo9OvaB59CCpsek6oedBISCoXbvwN7
Xn2DbsmA46YxKLNUeeaGcg5zDXhc8Hu3
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:05:19 2025 by rpki-client