This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File:                     DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier:          oJtHJ0mxJL2T8ZMGGEnzokHs+WAsu6KvA/dzkMr/73A=
Subject key identifier:   87:6F:DE:01:6E:F4:16:8A:A5:21:30:87:C8:53:B1:AA:17:32:2E:42
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer:       /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number:          0225
Signing time:             Fri 05 Dec 2025 00:26:28 +0000
Manifest this update:     Fri 05 Dec 2025 00:26:28 +0000
Manifest next update:     Fri 12 Dec 2025 00:26:28 +0000
Files and hashes:         1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: a96vR/h1tZYGdM5+R2YP30sm6RX7KRDfVfYngPeMJv8=)
                          2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 4u5QNoJcEGBkXy8XRMZ846SeZinFB+3AOCkdTLg5xUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
                          rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
        Validity
            Not Before: Dec  5 00:26:28 2025 GMT
            Not After : Dec 12 00:26:28 2025 GMT
        Subject: CN=693226b4-680c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:2e:40:ac:0d:44:66:22:bd:f1:57:28:17:
                    37:76:70:d5:fc:25:e0:a9:f1:d3:b0:4b:4a:c1:54:
                    c9:44:fa:eb:d5:55:1a:32:ac:1f:3d:d8:a3:28:80:
                    25:2a:6e:86:dd:93:98:47:42:60:4f:e0:39:39:09:
                    10:65:53:35:1c:95:1d:a9:ab:bd:02:5f:e3:25:ff:
                    c5:b2:29:b0:bb:c8:9d:a3:2a:2f:ba:5a:3e:f4:42:
                    b6:61:5c:3d:fe:2f:20:87:bf:6f:90:c5:d3:8e:4a:
                    10:fe:6c:13:14:a4:87:60:26:ec:01:12:90:d3:8f:
                    3e:b4:1c:50:b1:16:f0:37:b9:e1:c4:a3:46:4a:96:
                    0e:7e:0b:d8:f6:43:ce:c1:30:1f:e5:50:84:6a:0d:
                    c2:a3:1f:b1:71:07:80:8c:b5:9d:5e:0f:00:7c:19:
                    bd:80:21:3b:c4:19:04:5e:31:bc:64:6c:9f:16:d0:
                    f1:8c:4d:18:3f:79:f5:1e:dd:f9:e8:28:e3:30:70:
                    76:30:7a:37:28:bc:80:4c:24:b1:51:93:5f:d8:5e:
                    6f:38:24:ea:f2:d5:0e:8a:e7:e5:8c:b8:47:30:e3:
                    65:be:43:cf:6a:bc:75:e7:7e:d5:03:aa:6e:0f:c0:
                    e3:ac:54:18:62:31:19:2f:04:04:12:6a:ad:5e:01:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6F:DE:01:6E:F4:16:8A:A5:21:30:87:C8:53:B1:AA:17:32:2E:42
            X509v3 Authority Key Identifier:
                keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:84:80:4b:a1:83:99:f6:e3:87:41:e5:25:d8:b7:b5:97:6a:
         df:01:ab:ff:fe:4b:fc:81:0f:a9:73:c4:0e:fa:15:e9:b1:f9:
         51:f0:ff:e2:3a:3b:00:a0:60:cf:98:29:f3:90:37:cf:1c:0f:
         9b:b7:e8:30:f5:3f:46:1f:b5:5d:dd:5e:d9:ad:31:5e:95:bb:
         b8:78:d8:cc:68:11:d6:14:c8:25:bd:2a:67:e9:34:01:0f:30:
         11:d8:ee:83:83:ab:a6:e5:08:71:dc:c7:34:21:bb:53:95:03:
         01:a0:eb:a9:18:27:31:4a:59:35:28:90:d0:78:48:51:11:4f:
         b2:b6:93:e2:b8:67:8f:7f:75:28:ec:97:d2:1e:d5:e2:2e:e6:
         59:a1:dd:45:a9:16:d8:08:84:6f:32:bf:17:37:23:33:92:4a:
         ae:38:4d:46:ee:c0:1a:43:a0:08:90:a4:77:39:6a:3e:83:74:
         c9:35:16:d6:ba:41:a3:2d:52:8e:18:44:17:1f:a0:99:99:54:
         42:fe:cb:8a:23:1d:c9:cf:bd:20:52:a9:9e:19:25:1b:5c:9b:
         37:d9:b0:72:7c:e8:87:f7:2d:7c:46:ca:95:34:b9:17:92:b8:
         39:61:c4:e7:98:55:de:6d:df:14:68:9a:88:0c:b0:0d:96:92:
         f0:46:7c:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG
NEE4OTVDRTkwHhcNMjUxMjA1MDAyNjI4WhcNMjUxMjEyMDAyNjI4WjAYMRYwFAYD
VQQDEw02OTMyMjZiNC02ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTAuQKwNRGYivfFXKBc3dnDV/CXgqfHTsEtKwVTJRPrr1VUaMqwfPdijKIAl
Km6G3ZOYR0JgT+A5OQkQZVM1HJUdqau9Al/jJf/Fsimwu8idoyovulo+9EK2YVw9
/i8gh79vkMXTjkoQ/mwTFKSHYCbsARKQ048+tBxQsRbwN7nhxKNGSpYOfgvY9kPO
wTAf5VCEag3Cox+xcQeAjLWdXg8AfBm9gCE7xBkEXjG8ZGyfFtDxjE0YP3n1Ht35
6CjjMHB2MHo3KLyATCSxUZNf2F5vOCTq8tUOiufljLhHMONlvkPParx1537VA6pu
D8DjrFQYYjEZLwQEEmqtXgGsBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdv3gFu
9BaKpSEwh8hTsaoXMi5CMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD
MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE
eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnhIBLoYOZ9uOHQeUl2Le1l2rfAav//kv8gQ+pc8QO+hXpsflR8P/i
OjsAoGDPmCnzkDfPHA+bt+gw9T9GH7Vd3V7ZrTFelbu4eNjMaBHWFMglvSpn6TQB
DzAR2O6Dg6um5Qhx3Mc0IbtTlQMBoOupGCcxSlk1KJDQeEhREU+ytpPiuGePf3Uo
7JfSHtXiLuZZod1FqRbYCIRvMr8XNyMzkkquOE1G7sAaQ6AIkKR3OWo+g3TJNRbW
ukGjLVKOGEQXH6CZmVRC/suKIx3Jz70gUqmeGSUbXJs32bByfOiH9y18RsqVNLkX
krg5YcTnmFXebd8UaJqIDLANlpLwRnz0
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:18 2025 by rpki-client