This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          pfa7B9tGjiEXhvFo6ZzGjA5qRVjNNbLGpVJ6FIVRdHk=
Subject key identifier:   CB:58:0A:84:F6:7E:20:2F:03:97:F4:2B:82:AD:B9:7A:57:9A:35:05
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          0157
Signing time:             Sat 06 Dec 2025 22:01:31 +0000
Manifest this update:     Sat 06 Dec 2025 22:01:30 +0000
Manifest next update:     Sat 13 Dec 2025 22:01:30 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: VHHNtrgqZ07I29HGBEueJTAIpFC9EPLm7XQ4wYskGa0=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: ZzX2pAU2hf9tsTLmwqMICAJ5lNGrFfo//Sr5B58TslI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Dec  6 22:01:30 2025 GMT
            Not After : Dec 13 22:01:30 2025 GMT
        Subject: CN=6934a7ba-b6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:5a:0c:25:6b:8a:b0:ab:7d:64:85:27:49:
                    26:3a:c7:c2:b6:9e:2b:8a:fb:39:a2:ee:c6:f9:3c:
                    b6:3b:59:ab:eb:fe:64:c5:66:3c:5c:bf:18:5c:7d:
                    0e:21:44:35:91:a8:51:21:66:9a:c7:8f:49:7c:73:
                    82:3d:fa:9d:3b:01:95:5f:8f:9d:7a:4f:80:6d:93:
                    03:4d:2d:49:97:e4:fd:48:c1:4b:a0:f8:0e:85:04:
                    03:9f:05:3f:85:1f:ba:36:11:13:ef:9e:e2:66:c4:
                    24:a8:18:be:fb:ff:58:25:b3:9b:6f:06:6b:88:9e:
                    a2:a5:ed:8f:ae:6a:f8:dd:be:cf:d9:db:d7:13:90:
                    3d:42:b8:ec:f8:27:eb:4c:a2:cd:78:60:fb:13:1a:
                    75:48:68:13:41:a5:c8:97:5d:ab:0c:c8:2b:34:da:
                    d7:ae:13:77:6b:00:03:93:52:7a:54:e9:1b:97:1b:
                    ab:9f:cb:24:26:a3:a6:36:b3:61:59:23:97:8d:5e:
                    f7:b2:d1:8b:07:bb:88:86:cb:ee:d9:ca:3a:b3:19:
                    83:0c:9b:5b:f6:ac:4f:e0:5a:b5:9e:9c:8a:b6:37:
                    90:42:4a:8f:0e:20:3e:c9:7a:c5:17:3f:11:bb:85:
                    97:1e:f3:d1:40:fd:6d:f9:44:f6:7f:5a:28:0e:a3:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:0A:84:F6:7E:20:2F:03:97:F4:2B:82:AD:B9:7A:57:9A:35:05
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:50:92:2f:d9:34:5d:1f:87:d9:20:dc:00:64:82:c1:f9:66:
         c6:a6:c1:7e:3a:2e:a2:1e:1e:99:a4:65:ca:04:3b:1c:44:b6:
         89:64:21:60:36:d3:9b:3d:ee:57:5b:94:5a:59:fa:15:e1:b3:
         bf:1a:fc:fd:b2:e0:4e:c7:01:d3:54:6e:9d:28:ef:99:55:b4:
         fe:0c:a0:fd:cd:61:7e:41:dd:bc:f1:ce:96:ed:0a:7e:38:18:
         a2:40:fb:05:6c:ba:de:bc:cf:ba:0c:d8:b0:41:e8:07:6c:b9:
         1a:d4:ef:71:f2:fc:73:a9:27:3f:16:d6:f4:d8:23:e3:7a:a0:
         68:65:b5:74:d8:b6:6b:2e:7c:b0:a3:10:1e:29:e1:93:d7:85:
         fe:7a:c6:b3:75:7b:4e:52:6c:a1:02:1f:75:40:21:bb:ce:54:
         36:3a:55:1a:7c:c2:f3:6c:18:76:0b:52:11:a5:22:ac:a3:8c:
         fd:a4:62:b7:3c:63:1e:62:bb:c8:c4:b0:45:80:44:cf:af:04:
         1a:82:19:6e:4f:8e:f2:d2:a1:2d:70:3c:07:20:aa:95:08:42:
         e9:06:62:67:71:9c:0b:87:75:1d:0c:37:b6:b5:03:c6:aa:92:
         b2:d1:ba:fc:0d:db:a8:54:21:70:9f:5a:d0:da:4e:40:4d:31:
         f5:40:e1:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz
RjA4Q0M4RTIwHhcNMjUxMjA2MjIwMTMwWhcNMjUxMjEzMjIwMTMwWjAYMRYwFAYD
VQQDEw02OTM0YTdiYS1iNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvchaDCVrirCrfWSFJ0kmOsfCtp4rivs5ou7G+Ty2O1mr6/5kxWY8XL8YXH0O
IUQ1kahRIWaax49JfHOCPfqdOwGVX4+dek+AbZMDTS1Jl+T9SMFLoPgOhQQDnwU/
hR+6NhET757iZsQkqBi++/9YJbObbwZriJ6ipe2Prmr43b7P2dvXE5A9Qrjs+Cfr
TKLNeGD7Exp1SGgTQaXIl12rDMgrNNrXrhN3awADk1J6VOkblxurn8skJqOmNrNh
WSOXjV73stGLB7uIhsvu2co6sxmDDJtb9qxP4Fq1npyKtjeQQkqPDiA+yXrFFz8R
u4WXHvPRQP1t+UT2f1ooDqOESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtYCoT2
fiAvA5f0K4KtuXpXmjUFMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3
OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN
bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4UJIv2TRdH4fZINwAZILB+WbGpsF+Oi6iHh6ZpGXKBDscRLaJZCFg
NtObPe5XW5RaWfoV4bO/Gvz9suBOxwHTVG6dKO+ZVbT+DKD9zWF+Qd288c6W7Qp+
OBiiQPsFbLrevM+6DNiwQegHbLka1O9x8vxzqSc/Ftb02CPjeqBoZbV02LZrLnyw
oxAeKeGT14X+esazdXtOUmyhAh91QCG7zlQ2OlUafMLzbBh2C1IRpSKso4z9pGK3
PGMeYrvIxLBFgETPrwQaghluT47y0qEtcDwHIKqVCELpBmJncZwLh3UdDDe2tQPG
qpKy0br8DduoVCFwn1rQ2k5ATTH1QOEV
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:43 2025 by rpki-client