This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File:                     whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier:          fxwm8UbT69rJsvk5cwAbrzq/3Py2MSynyCIdg11VzqU=
Subject key identifier:   64:BB:04:4A:F3:9E:57:70:CB:21:D9:85:3B:20:2F:1B:A4:CA:57:EE
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number:          0158
Signing time:             Fri 05 Dec 2025 02:17:33 +0000
Manifest this update:     Fri 05 Dec 2025 02:17:33 +0000
Manifest next update:     Fri 12 Dec 2025 02:17:33 +0000
Files and hashes:         1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: 5et9Orq/qqfvvn4I2/4jR1txn0L4xo2ui/hifQiJhlQ=)
                          2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
        Validity
            Not Before: Dec  5 02:17:33 2025 GMT
            Not After : Dec 12 02:17:33 2025 GMT
        Subject: CN=693240bd-bfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:6c:dd:4b:a4:85:86:46:62:a4:ed:03:5b:
                    ee:d4:35:91:05:7f:cc:0f:10:d0:68:f1:16:46:f5:
                    f9:4e:70:63:9f:2e:a5:87:83:72:48:d0:0a:b2:a1:
                    2d:be:39:e3:86:11:d6:dc:97:32:be:c4:be:92:68:
                    0b:83:9a:86:02:3b:2e:9b:0b:62:fb:75:5a:27:df:
                    05:07:10:d4:3a:6e:a0:c9:92:9c:5a:e3:1d:50:07:
                    b3:d6:96:97:2a:bd:3a:05:f3:0b:87:4f:70:af:e4:
                    f5:9c:77:86:da:0d:5b:06:0c:b9:fe:4b:19:3f:ec:
                    00:1a:cc:d1:39:23:d9:5f:cf:cd:bf:14:37:86:93:
                    0d:9f:7e:72:48:24:0f:ff:6a:fa:d8:d7:80:20:6f:
                    0e:d7:2c:6c:9a:a1:94:73:78:56:50:df:d6:95:75:
                    78:72:b1:e5:fd:3b:4f:98:2e:8e:64:84:2b:e3:59:
                    e1:9d:d6:85:2b:8c:2d:0a:f7:9b:d7:03:75:c4:8b:
                    32:55:ba:cf:b7:62:26:ba:fa:be:d2:4e:b3:8d:82:
                    f1:f2:0c:31:f0:26:f6:26:6d:31:c1:34:61:c1:8d:
                    ad:68:47:0d:21:fc:29:76:aa:b7:bf:96:d7:17:21:
                    44:69:22:28:02:43:e0:e3:0e:05:82:a1:3d:2b:6b:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BB:04:4A:F3:9E:57:70:CB:21:D9:85:3B:20:2F:1B:A4:CA:57:EE
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:ff:07:f0:f5:53:4d:e8:08:18:80:8a:ce:04:9f:0a:e8:
         d7:a3:44:63:06:bd:49:27:11:ca:f4:26:7b:bc:1b:b8:7c:01:
         3a:2f:42:3c:80:5d:25:12:f8:2b:c3:78:0b:fe:1a:41:3e:dc:
         62:f4:f8:d5:87:4a:74:b4:ac:8a:c2:bf:4e:48:8e:ae:8d:c3:
         e8:a4:8c:52:da:ba:20:1b:e3:c0:d5:20:1e:df:64:12:49:38:
         d4:44:39:9c:ef:fe:ae:b6:1e:4f:1b:95:8c:04:c8:2e:fe:0d:
         0d:ab:29:9b:89:72:fb:cb:b9:63:12:a2:5b:e9:e3:d6:6d:21:
         8d:a0:9f:d2:00:20:d0:e6:72:b0:c8:99:b6:2c:54:ab:04:fd:
         fd:4f:00:77:7b:6c:7f:df:ba:4e:c4:42:5f:ed:d0:cf:fa:1b:
         b7:26:53:7c:6e:6f:39:5c:22:93:ea:c4:64:0e:8c:83:8a:13:
         8c:ea:a5:95:c5:2b:8c:e4:30:27:20:8b:d7:88:da:38:3c:e6:
         7c:d1:b3:45:86:c3:94:c4:df:f7:70:49:bd:6c:84:cb:f0:c4:
         35:09:20:b5:9d:a2:3f:7d:d7:ad:28:3f:bb:ff:88:19:7d:02:
         2b:d8:60:e0:11:b9:b6:18:47:65:e6:d9:71:ab:ab:c8:53:80:
         df:03:6d:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5
MDY0ODlDQzYwHhcNMjUxMjA1MDIxNzMzWhcNMjUxMjEyMDIxNzMzWjAYMRYwFAYD
VQQDEw02OTMyNDBiZC1iZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsd5s3UukhYZGYqTtA1vu1DWRBX/MDxDQaPEWRvX5TnBjny6lh4NySNAKsqEt
vjnjhhHW3JcyvsS+kmgLg5qGAjsumwti+3VaJ98FBxDUOm6gyZKcWuMdUAez1paX
Kr06BfMLh09wr+T1nHeG2g1bBgy5/ksZP+wAGszROSPZX8/NvxQ3hpMNn35ySCQP
/2r62NeAIG8O1yxsmqGUc3hWUN/WlXV4crHl/TtPmC6OZIQr41nhndaFK4wtCveb
1wN1xIsyVbrPt2Imuvq+0k6zjYLx8gwx8Cb2Jm0xwTRhwY2taEcNIfwpdqq3v5bX
FyFEaSIoAkPg4w4FgqE9K2ty2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGS7BErz
nldwyyHZhTsgLxukylfuMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0
NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4
aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAL/8H8PVTTegIGICKzgSfCujXo0RjBr1JJxHK9CZ7vBu4fAE6L0I8
gF0lEvgrw3gL/hpBPtxi9PjVh0p0tKyKwr9OSI6ujcPopIxS2rogG+PA1SAe32QS
STjURDmc7/6uth5PG5WMBMgu/g0NqymbiXL7y7ljEqJb6ePWbSGNoJ/SACDQ5nKw
yJm2LFSrBP39TwB3e2x/37pOxEJf7dDP+hu3JlN8bm85XCKT6sRkDoyDihOM6qWV
xSuM5DAnIIvXiNo4POZ80bNFhsOUxN/3cEm9bITL8MQ1CSC1naI/fdetKD+7/4gZ
fQIr2GDgEbm2GEdl5tlxq6vIU4DfA21a
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:57 2025 by rpki-client