This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
File:                     a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json)
Hash identifier:          GElKkPdsOdG+Z1gFgQ7D/4xi/2lcAXgblkAR1vEw8hE=
Subject key identifier:   5E:A3:BF:67:04:E3:A4:61:F8:96:78:6B:11:21:37:C1:90:F5:C2:11
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0C02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
Manifest number:          0BF2
Signing time:             Thu 04 Dec 2025 18:14:56 +0000
Manifest this update:     Thu 04 Dec 2025 18:14:55 +0000
Manifest next update:     Thu 11 Dec 2025 18:14:55 +0000
Files and hashes:         1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: DWQ1XWKueJbMGNq2Gf0SvoVRvZU8Tz/MnQFZw8XJR78=)
                          2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: grbiOnNT4HexnC/sHPr+ane3hv5G2MrvJSuDFjqq4cw=)
                          3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: kM0eJOttkAmAKUXww4+UBlGfe6qFTWP0OPGWDyV7zBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
                          rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3074 (0xc02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: Dec  4 18:14:55 2025 GMT
            Not After : Dec 11 18:14:55 2025 GMT
        Subject: CN=6931cf9f-92de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:87:f8:50:f9:05:ad:84:91:e1:3f:13:13:
                    09:53:c5:ec:51:e4:a5:eb:fa:df:25:55:64:54:22:
                    9b:7c:a1:72:95:04:b3:6d:4d:cc:e4:6b:e2:33:79:
                    fc:48:b3:a7:81:a9:7e:25:97:70:a3:0f:07:af:b0:
                    2c:ea:63:a8:b5:03:15:db:10:ff:9c:a2:19:6f:64:
                    36:a8:1f:12:c8:36:84:65:71:fa:44:95:8e:3c:a4:
                    65:e8:3c:6b:e1:6a:ec:a0:9e:f0:31:5f:f3:fb:40:
                    47:7d:26:86:97:a5:fa:32:3b:6c:64:1f:c5:83:7d:
                    95:c1:62:b4:75:4c:28:3a:5e:04:d3:4f:d2:6e:88:
                    f0:5a:1f:b7:48:c5:d8:ef:8a:d6:12:b9:ec:6a:dc:
                    8b:e1:a7:a9:b9:89:e2:1f:ac:ee:8d:64:d2:8b:80:
                    cf:2e:a5:96:00:8f:64:7d:b2:4a:e0:e4:80:c9:92:
                    07:76:e4:ec:8d:2c:dd:c9:ab:55:55:ac:17:b4:3e:
                    a6:78:7d:7a:b8:22:e7:53:a0:fc:2a:6c:34:72:2f:
                    f7:d5:f9:18:29:11:f1:f5:56:dc:11:ea:10:c6:ec:
                    ca:55:3f:88:f7:b6:f6:11:f6:15:35:e4:1d:6e:85:
                    38:8a:ff:46:eb:f7:6e:28:80:a4:95:2b:0f:13:ec:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:BF:67:04:E3:A4:61:F8:96:78:6B:11:21:37:C1:90:F5:C2:11
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:e9:42:66:75:fb:2a:18:05:4f:67:af:18:8d:79:60:75:ac:
         76:d1:be:99:0d:0a:08:d5:07:28:a6:1b:db:51:e9:d1:92:07:
         1f:f7:aa:e8:a0:92:11:99:d8:51:07:a6:72:61:63:37:1b:3f:
         eb:09:e0:10:d4:13:47:f7:44:cc:0a:55:b9:9e:96:ec:18:7a:
         2d:76:70:46:f9:ec:3a:07:49:c8:f4:35:25:2f:a9:4d:83:47:
         bd:0b:ee:17:7b:a7:34:1f:9c:3b:54:08:67:ac:ce:ca:8d:f5:
         ab:25:a8:fd:c2:77:28:a4:97:30:87:cf:58:db:2c:f9:15:f4:
         9a:16:01:cd:55:46:2b:1e:cf:6e:cc:ba:e2:fc:35:9b:72:5a:
         f3:b0:b5:ca:f2:71:11:bf:c9:c7:0d:7c:5d:5e:36:ef:c5:d1:
         66:83:1c:09:76:85:34:5e:59:d2:61:0a:ca:f3:35:68:73:31:
         41:27:e8:93:1e:13:aa:7f:55:5f:ca:ef:90:b4:e4:47:f6:66:
         9a:54:c3:5e:97:53:08:36:30:a7:82:b1:69:e5:16:8b:3d:bb:
         44:41:09:7b:25:4c:3a:dd:16:cf:8d:10:8a:93:bf:aa:0c:77:
         bc:be:6a:f3:90:c7:e4:aa:28:61:ee:07:ba:41:b9:52:9e:d2:
         ac:4a:a2:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy
Q0NBQkU5M0EwHhcNMjUxMjA0MTgxNDU1WhcNMjUxMjExMTgxNDU1WjAYMRYwFAYD
VQQDEw02OTMxY2Y5Zi05MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZ+H+FD5Ba2EkeE/ExMJU8XsUeSl6/rfJVVkVCKbfKFylQSzbU3M5GviM3n8
SLOngal+JZdwow8Hr7As6mOotQMV2xD/nKIZb2Q2qB8SyDaEZXH6RJWOPKRl6Dxr
4WrsoJ7wMV/z+0BHfSaGl6X6MjtsZB/Fg32VwWK0dUwoOl4E00/SbojwWh+3SMXY
74rWErnsatyL4aepuYniH6zujWTSi4DPLqWWAI9kfbJK4OSAyZIHduTsjSzdyatV
VawXtD6meH16uCLnU6D8Kmw0ci/31fkYKRHx9VbcEeoQxuzKVT+I97b2EfYVNeQd
boU4iv9G6/duKICklSsPE+ztRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6jv2cE
46Rh+JZ4axEhN8GQ9cIRMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4
QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs
X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDR6UJmdfsqGAVPZ68YjXlgdax20b6ZDQoI1QcophvbUenRkgcf96ro
oJIRmdhRB6ZyYWM3Gz/rCeAQ1BNH90TMClW5npbsGHotdnBG+ew6B0nI9DUlL6lN
g0e9C+4Xe6c0H5w7VAhnrM7KjfWrJaj9wncopJcwh89Y2yz5FfSaFgHNVUYrHs9u
zLri/DWbclrzsLXK8nERv8nHDXxdXjbvxdFmgxwJdoU0XlnSYQrK8zVoczFBJ+iT
HhOqf1Vfyu+QtORH9maaVMNel1MINjCngrFp5RaLPbtEQQl7JUw63RbPjRCKk7+q
DHe8vmrzkMfkqihh7ge6QblSntKsSqIs
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:48 2025 by rpki-client