This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
File:                     8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json)
Hash identifier:          hczfrLylHj8u0/naU3a/v9xhnrS1e3XTfO+x2F+JZIM=
Subject key identifier:   4D:35:1F:6C:7D:88:25:65:B1:48:75:05:87:35:6E:C7:5D:F7:66:F2
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Certificate issuer:       /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial:       0718
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
Manifest number:          0713
Signing time:             Sat 20 Dec 2025 21:13:01 +0000
Manifest this update:     Sat 20 Dec 2025 21:13:01 +0000
Manifest next update:     Sat 27 Dec 2025 21:13:01 +0000
Files and hashes:         1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: oHYkcTJHlyXVrGFpUZxUQZP3asfg/ObjWqNm2Jrj96k=)
                          2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
                          rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
        Validity
            Not Before: Dec 20 21:13:01 2025 GMT
            Not After : Dec 27 21:13:01 2025 GMT
        Subject: CN=6947115d-1621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:f6:46:ba:38:01:49:ce:40:06:ab:b9:c8:
                    2d:11:eb:d2:80:23:99:b2:52:80:f6:d8:51:49:00:
                    4d:f2:61:e0:79:0f:a7:2e:4f:a8:c3:6b:83:b4:47:
                    75:c1:09:8a:3c:ee:b8:9b:c8:07:fb:08:fe:89:08:
                    a8:4f:35:66:33:8b:0a:9d:41:8c:df:ec:51:58:77:
                    2f:6f:3a:6a:d0:73:f7:eb:dd:04:90:da:af:42:4b:
                    e4:d4:e7:48:4f:79:44:da:ec:6f:f4:58:28:c7:09:
                    72:91:35:b0:26:e7:75:06:c5:f1:56:34:a9:59:d9:
                    51:34:34:ba:39:78:ca:e0:52:8a:d1:73:79:2d:49:
                    7a:5a:5c:b5:6d:cc:e1:5b:06:82:9a:ee:b8:77:99:
                    93:f9:ae:f2:3b:c9:6c:44:18:0c:95:5d:04:7b:8f:
                    46:84:79:2e:9a:19:cb:9e:24:61:69:0d:48:56:05:
                    24:ee:14:f1:61:8b:b5:0b:cf:ad:ca:78:b6:a4:4d:
                    fe:9d:59:bf:74:ef:1e:55:40:01:18:64:3b:bb:9c:
                    1e:91:c0:c6:4f:85:05:b2:51:ad:1d:67:86:37:35:
                    e0:79:5d:e9:9e:80:a5:b4:f1:20:be:ae:9f:33:0b:
                    ef:87:8a:fa:ec:04:b0:7f:08:ef:e9:40:fc:f3:df:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:1F:6C:7D:88:25:65:B1:48:75:05:87:35:6E:C7:5D:F7:66:F2
            X509v3 Authority Key Identifier:
                keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bf:51:22:c3:f6:7d:47:04:82:18:99:dd:75:3a:cf:0b:9f:
         76:30:9f:65:49:57:4c:77:ac:64:80:fb:f6:a3:92:0a:93:95:
         2c:69:d2:82:56:ca:4c:16:94:46:fd:a3:30:88:1c:66:e3:f5:
         d5:ca:6b:09:e3:61:48:8e:0b:a8:96:54:69:8d:ab:b9:d8:a2:
         80:d8:b6:7d:04:ee:0b:c7:a0:3d:fb:90:51:69:a4:e4:c6:77:
         a9:54:f6:b7:2c:54:28:d0:49:bd:9c:05:d5:ac:02:26:55:3d:
         d2:44:e9:4d:f7:74:85:63:b1:89:31:53:87:f6:94:3d:c6:e6:
         fe:39:3e:27:0a:82:8c:eb:4a:05:48:c5:c6:fd:8a:5f:95:a1:
         35:c6:a8:94:85:cf:a1:86:a5:90:3e:81:bd:52:ac:54:d4:82:
         cf:1b:4f:07:ae:64:e2:8b:9b:cf:2b:d1:9b:c1:35:77:93:7c:
         37:a0:3f:7a:09:91:f4:a9:fc:41:ae:e3:e6:3e:e0:0f:2f:dc:
         26:72:2a:ee:d2:b1:77:66:bd:d1:2f:a7:24:7b:1f:c4:f6:08:
         24:a4:ac:67:3b:a7:98:b3:8d:59:e0:79:fd:36:e7:70:e0:c3:
         9e:e1:cc:f0:69:af:1d:f9:bd:19:e8:f2:1d:3a:eb:cf:52:ad:
         44:31:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:20:47 2025 by rpki-client