This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File:                     0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier:          8yfiOnA+40HgHhUF8P8NGzQVO1GoqBQD3546v9Bsz7c=
Subject key identifier:   51:47:B1:0B:F8:7A:F7:24:CB:73:42:7B:98:F5:DD:11:97:3B:04:EB
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer:       /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number:          0105
Signing time:             Fri 05 Dec 2025 03:05:51 +0000
Manifest this update:     Fri 05 Dec 2025 03:05:50 +0000
Manifest next update:     Fri 12 Dec 2025 03:05:50 +0000
Files and hashes:         1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: TFF6gTXYn7lvasHA4mvuCSX964+OyHmPlW5aJvRvvIU=)
                          2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
        Validity
            Not Before: Dec  5 03:05:50 2025 GMT
            Not After : Dec 12 03:05:50 2025 GMT
        Subject: CN=69324c0f-071b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:66:b6:91:1d:c2:f7:d1:85:e8:08:2d:22:
                    77:db:01:b7:03:43:ed:08:4e:88:b7:16:7b:3f:bb:
                    82:cd:cd:4d:2b:85:84:a6:01:00:cf:9b:2d:83:cf:
                    7e:1c:de:d2:0b:23:12:f9:76:b0:1f:cb:07:70:24:
                    55:37:54:d5:5a:51:03:46:d7:26:89:9f:54:00:64:
                    0c:ca:fc:53:fb:2f:03:f6:ff:10:0e:58:2c:7f:90:
                    d0:a9:9d:ee:93:48:c3:1d:b1:5f:64:75:d2:b4:94:
                    f7:69:78:07:c8:e5:a3:3b:f1:e4:72:27:7d:e5:31:
                    16:35:57:eb:11:f5:0b:95:2f:96:1b:70:31:b4:93:
                    c5:1b:93:41:6f:36:c4:63:0d:a2:c4:58:c8:d7:98:
                    c4:e1:51:91:fe:41:65:a5:8e:9e:dd:3e:5a:ac:9d:
                    aa:a0:d8:bb:05:a4:f9:e4:b4:80:d2:7c:c7:3a:1c:
                    4a:2b:dd:d6:09:6a:e5:f5:69:99:f4:f1:d1:a3:03:
                    a7:c2:e4:5f:03:7b:fa:64:21:9f:fc:f1:56:4a:89:
                    e7:2c:6a:6d:8b:6f:6b:4e:7a:05:df:25:37:b7:73:
                    81:54:33:fb:bc:a9:be:c1:2d:3c:04:64:7b:a5:08:
                    6b:95:40:46:5d:70:51:06:57:73:55:16:03:3d:e7:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:47:B1:0B:F8:7A:F7:24:CB:73:42:7B:98:F5:DD:11:97:3B:04:EB
            X509v3 Authority Key Identifier:
                keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:d4:45:e5:ca:a8:fd:9b:38:fe:a4:c8:0f:61:3b:30:2c:
         c5:58:18:6c:7f:ea:55:a9:10:6b:df:96:e9:12:9e:54:0c:f2:
         9f:01:90:f4:2f:bd:68:e4:03:6b:fc:b9:7e:e5:36:d1:f0:ed:
         26:05:fc:6a:6f:9b:a6:d3:48:fd:35:39:59:67:ab:80:f3:f2:
         d0:5c:f4:3e:3d:94:dd:bd:1a:3d:00:aa:8b:86:9f:03:bf:1d:
         f4:c7:95:43:92:98:b9:6b:ee:b9:12:16:90:34:08:f0:ef:06:
         e3:aa:4d:20:49:51:a6:0d:1f:aa:87:83:3e:31:51:3e:f6:bc:
         7f:9c:0d:c6:db:5a:73:65:5e:82:b9:79:be:dd:2a:d8:7d:41:
         ad:38:22:27:b1:36:57:fc:e4:7d:72:a3:52:b8:ff:f8:73:d1:
         d1:af:5c:7d:e6:48:3f:07:bf:14:7f:74:15:36:1a:21:40:9e:
         c6:17:d8:a1:5b:9e:0a:66:1c:0a:12:4b:28:c2:5d:22:01:da:
         d8:ab:0c:a3:72:79:42:7b:03:a3:96:7e:6e:b7:dd:37:17:e7:
         51:b3:78:fb:be:71:00:09:74:b4:4f:66:f1:ee:3d:af:5d:f0:
         10:da:4f:89:2b:f2:cf:96:f9:be:f8:d1:14:d1:06:e4:5d:e9:
         2a:aa:e1:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2
NEI5RDYyNjEwHhcNMjUxMjA1MDMwNTUwWhcNMjUxMjEyMDMwNTUwWjAYMRYwFAYD
VQQDEw02OTMyNGMwZi0wNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6IlmtpEdwvfRhegILSJ32wG3A0PtCE6ItxZ7P7uCzc1NK4WEpgEAz5stg89+
HN7SCyMS+XawH8sHcCRVN1TVWlEDRtcmiZ9UAGQMyvxT+y8D9v8QDlgsf5DQqZ3u
k0jDHbFfZHXStJT3aXgHyOWjO/Hkcid95TEWNVfrEfULlS+WG3AxtJPFG5NBbzbE
Yw2ixFjI15jE4VGR/kFlpY6e3T5arJ2qoNi7BaT55LSA0nzHOhxKK93WCWrl9WmZ
9PHRowOnwuRfA3v6ZCGf/PFWSonnLGpti29rTnoF3yU3t3OBVDP7vKm+wS08BGR7
pQhrlUBGXXBRBldzVRYDPefjpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFHsQv4
evcky3NCe5j13RGXOwTrMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz
MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2
NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUydRF5cqo/Zs4/qTID2E7MCzFWBhsf+pVqRBr35bpEp5UDPKfAZD0
L71o5ANr/Ll+5TbR8O0mBfxqb5um00j9NTlZZ6uA8/LQXPQ+PZTdvRo9AKqLhp8D
vx30x5VDkpi5a+65EhaQNAjw7wbjqk0gSVGmDR+qh4M+MVE+9rx/nA3G21pzZV6C
uXm+3SrYfUGtOCInsTZX/OR9cqNSuP/4c9HRr1x95kg/B78Uf3QVNhohQJ7GF9ih
W54KZhwKEksowl0iAdrYqwyjcnlCewOjln5ut903F+dRs3j7vnEACXS0T2bx7j2v
XfAQ2k+JK/LPlvm++NEU0QbkXekqquGa
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:33 2025 by rpki-client