This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
File:                     wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json)
Hash identifier:          Uo6TKDYo5/fTHrzH8iyHqC6BDn0TISRl4gEo4Mc67nk=
Subject key identifier:   00:B4:7B:2C:16:3E:99:73:2F:6C:D1:38:9B:13:A3:28:43:59:E3:D3
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Certificate issuer:       /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
Manifest number:          67
Signing time:             Fri 05 Dec 2025 04:52:52 +0000
Manifest this update:     Fri 05 Dec 2025 04:52:51 +0000
Manifest next update:     Fri 12 Dec 2025 04:52:51 +0000
Files and hashes:         1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: +kQFjbSUmhZ2P2ivg17bpcVdTGf240IiYA/68UKwrBY=)
                          2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
                          rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
        Validity
            Not Before: Dec  5 04:52:51 2025 GMT
            Not After : Dec 12 04:52:51 2025 GMT
        Subject: CN=69326523-43df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:5c:57:91:27:8f:45:63:88:1f:32:30:0d:
                    b7:ca:5c:ec:a3:4e:47:a2:e0:3b:98:55:5c:70:d0:
                    19:a2:fa:bb:0c:b2:05:62:7d:44:cc:bb:8c:b1:37:
                    ab:03:6d:79:e3:59:23:2a:37:14:66:e7:8a:ba:fe:
                    0f:33:f4:b8:32:df:84:8f:15:99:44:2c:ac:d0:d0:
                    be:a8:36:a8:87:1c:f9:bc:a8:c8:40:f4:82:df:5f:
                    74:c0:83:10:ca:4d:6b:03:8f:55:dc:6f:41:ab:ef:
                    06:85:e6:c2:0d:b7:05:eb:63:12:87:c6:d1:4c:e1:
                    a8:a8:db:c5:1c:22:0a:7f:d5:8e:ac:f6:72:30:ca:
                    12:70:3b:3d:34:f1:40:97:23:ed:59:c2:d1:8d:7e:
                    29:f5:2d:6f:d8:66:5b:fc:c6:93:cc:1e:d5:cd:6b:
                    c0:c3:5b:ad:a6:47:14:98:3b:25:23:e5:66:b8:7f:
                    4c:f0:bf:c8:1b:d7:6b:b6:b3:b1:9d:e5:2a:98:31:
                    c5:c5:ed:18:42:8a:c6:4f:70:27:64:8d:35:87:f6:
                    1a:e5:cf:58:e2:41:b8:8e:ef:f0:a1:d7:4e:f2:8b:
                    99:9d:32:4e:92:bb:2e:2e:bf:36:82:94:77:dc:19:
                    d8:d2:82:7a:57:28:fe:12:75:0c:71:dd:93:72:97:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:7B:2C:16:3E:99:73:2F:6C:D1:38:9B:13:A3:28:43:59:E3:D3
            X509v3 Authority Key Identifier:
                keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:07:cb:7c:ed:eb:60:6f:b1:96:e2:8f:63:c3:bf:04:1f:32:
         14:ae:ca:32:b4:00:1d:d0:00:7d:9e:5b:b6:60:ee:9a:9d:62:
         f4:21:70:3b:7f:bf:e4:94:1b:ed:4a:63:a3:af:e2:ca:c1:79:
         fa:e3:e8:ad:41:78:5b:6a:95:48:63:16:4d:82:01:b6:a2:11:
         39:41:fc:5c:5e:3e:85:e1:12:9b:73:7a:eb:1d:f1:c4:db:15:
         8c:50:6b:09:89:38:13:e5:cd:ea:03:fb:fd:0e:6c:eb:aa:89:
         cd:73:65:08:dd:b3:27:08:b4:38:64:ed:30:9f:d0:05:7b:2a:
         70:4c:79:7b:b1:d1:15:ae:6d:59:7b:90:98:bd:c3:4f:ce:dc:
         e0:7a:08:95:97:26:a7:4a:a8:21:01:e2:af:bc:6c:63:a2:9d:
         c6:7f:9c:6b:60:c8:95:13:01:09:11:b5:a6:77:e2:01:ab:e4:
         7d:c9:aa:1c:f2:33:f6:71:7e:d5:0b:64:f8:1c:b0:07:7b:20:
         e3:59:10:ad:f0:8d:c9:eb:54:17:45:8a:96:b1:40:2b:62:15:
         63:0e:2e:9b:67:b5:28:05:78:b8:62:5a:3f:27:da:09:a3:0c:
         63:aa:61:0a:04:44:12:cc:8e:81:b7:02:cd:35:d8:f0:1f:cc:
         32:41:d8:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC
NzQwRDJDRDAeFw0yNTEyMDUwNDUyNTFaFw0yNTEyMTIwNDUyNTFaMBgxFjAUBgNV
BAMTDTY5MzI2NTIzLTQzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCp8lxXkSePRWOIHzIwDbfKXOyjTkei4DuYVVxw0Bmi+rsMsgVifUTMu4yxN6sD
bXnjWSMqNxRm54q6/g8z9Lgy34SPFZlELKzQ0L6oNqiHHPm8qMhA9ILfX3TAgxDK
TWsDj1Xcb0Gr7waF5sINtwXrYxKHxtFM4aio28UcIgp/1Y6s9nIwyhJwOz008UCX
I+1ZwtGNfin1LW/YZlv8xpPMHtXNa8DDW62mRxSYOyUj5Wa4f0zwv8gb12u2s7Gd
5SqYMcXF7RhCisZPcCdkjTWH9hrlz1jiQbiO7/Ch107yi5mdMk6Suy4uvzaClHfc
GdjSgnpXKP4SdQxx3ZNylypDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUALR7LBY+
mXMvbNE4mxOjKENZ49MwHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2
ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4
MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw
QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIcHy3zt62BvsZbij2PDvwQfMhSuyjK0AB3QAH2eW7Zg7pqdYvQhcDt/
v+SUG+1KY6Ov4srBefrj6K1BeFtqlUhjFk2CAbaiETlB/FxePoXhEptzeusd8cTb
FYxQawmJOBPlzeoD+/0ObOuqic1zZQjdsycItDhk7TCf0AV7KnBMeXux0RWubVl7
kJi9w0/O3OB6CJWXJqdKqCEB4q+8bGOincZ/nGtgyJUTAQkRtaZ34gGr5H3Jqhzy
M/ZxftULZPgcsAd7IONZEK3wjcnrVBdFipaxQCtiFWMOLptntSgFeLhiWj8n2gmj
DGOqYQoERBLMjoG3As012PAfzDJB2Lw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:02:22 2025 by rpki-client