This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          xsoHbM0BznSbp9hTH7hhn0LcwSno4tfyiEgkmI/Gtms=
Subject key identifier:   14:52:A2:41:DF:C9:73:03:54:DC:DE:67:DF:7B:33:CC:13:D4:C1:84
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       090C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          0901
Signing time:             Sat 06 Dec 2025 19:30:11 +0000
Manifest this update:     Sat 06 Dec 2025 19:30:10 +0000
Manifest next update:     Sat 13 Dec 2025 19:30:10 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: 6HNEWRQjXHBwUtyiGc65JROW8tBQ686yL7Qx7Bkxt44=)
                          2: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE=)
                          3: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: TswTJHvENAD1Dt3sWcM8Wd5gmJihOCWr1zQhNFNqIck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Dec  6 19:30:10 2025 GMT
            Not After : Dec 13 19:30:10 2025 GMT
        Subject: CN=69348443-00c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:a3:04:51:e5:8c:42:71:1f:00:e2:3a:c2:
                    0e:92:76:38:7c:7a:c7:9b:7d:79:95:12:98:f8:92:
                    47:79:d0:cb:4d:06:83:13:90:27:f1:ed:ba:c9:4e:
                    37:93:4f:3b:8d:54:dc:74:d6:28:de:71:23:ad:5b:
                    d3:70:f3:7c:e4:4e:7c:33:87:c9:d4:16:d2:17:97:
                    43:4a:24:af:17:a3:d0:c8:34:b8:c9:d9:58:46:84:
                    e3:59:19:8b:97:65:0f:23:99:d2:81:11:7f:f6:a6:
                    da:11:87:9c:af:39:23:44:16:19:bc:3c:19:d8:bb:
                    56:f0:a5:e8:a2:71:71:e0:13:4e:d0:0c:d6:11:c6:
                    ab:94:30:40:e6:76:6b:11:3b:e1:90:ae:d7:a7:e8:
                    7b:a4:ff:4d:23:71:0c:e6:91:8c:5d:f6:9c:6a:04:
                    3e:87:04:f5:be:bf:68:8b:14:a1:0d:b4:17:ea:7b:
                    62:c3:2e:fd:7b:0b:14:67:56:e3:53:93:4f:73:28:
                    d4:e5:56:43:87:38:39:5c:df:51:7b:15:58:3e:5a:
                    e8:4f:92:6d:05:ce:74:26:fb:ac:a0:8e:ce:0b:1f:
                    5f:d4:90:1b:af:3e:4b:6e:a0:06:e4:0b:b1:d4:34:
                    53:21:28:06:50:dd:be:63:2e:a7:40:26:65:2a:86:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:A2:41:DF:C9:73:03:54:DC:DE:67:DF:7B:33:CC:13:D4:C1:84
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:12:6a:82:ae:08:1a:39:ab:e1:08:e0:fb:9e:bf:52:04:
         9e:81:96:e3:02:ca:8f:7b:1d:87:7a:fb:ed:9a:c1:97:f9:bd:
         a1:e0:3c:60:b5:62:5c:9b:29:39:6b:29:5c:ee:cd:0e:3d:ec:
         f5:d7:de:27:22:c5:2d:04:22:6d:e2:83:be:4e:0c:65:de:5d:
         22:9e:51:c2:bc:71:35:41:5c:a1:8c:6d:a3:d9:7c:19:17:f0:
         eb:4a:8c:e4:dd:77:45:ba:eb:a9:cc:02:f6:e9:46:b7:ae:8b:
         44:d1:7f:4a:24:ae:01:d3:fb:e5:c0:ce:f9:69:19:db:25:8e:
         77:1f:6d:88:70:a9:a6:d9:de:44:76:3f:30:b8:1e:3d:0f:26:
         a6:86:3c:41:a2:d9:56:ab:4c:92:e3:e1:8a:18:79:80:62:49:
         88:54:8a:74:f3:2d:e6:8d:e6:68:18:af:2e:7c:9b:84:cc:5e:
         cb:1a:5d:5f:36:1d:d6:88:51:40:53:91:1b:f2:4b:35:b9:1b:
         c5:3d:1e:b6:88:b9:37:bc:7f:65:75:17:80:2a:34:b3:91:d8:
         32:e5:8a:a1:3d:a4:27:03:35:ad:64:f1:ec:d4:a7:99:50:6f:
         29:d5:50:0d:b1:ae:c7:94:d4:a4:bf:ec:20:f4:4e:c0:98:00:
         37:49:ad:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE
NDdEMENCQTQwHhcNMjUxMjA2MTkzMDEwWhcNMjUxMjEzMTkzMDEwWjAYMRYwFAYD
VQQDEw02OTM0ODQ0My0wMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3qjBFHljEJxHwDiOsIOknY4fHrHm315lRKY+JJHedDLTQaDE5An8e26yU43
k087jVTcdNYo3nEjrVvTcPN85E58M4fJ1BbSF5dDSiSvF6PQyDS4ydlYRoTjWRmL
l2UPI5nSgRF/9qbaEYecrzkjRBYZvDwZ2LtW8KXoonFx4BNO0AzWEcarlDBA5nZr
ETvhkK7Xp+h7pP9NI3EM5pGMXfacagQ+hwT1vr9oixShDbQX6ntiwy79ewsUZ1bj
U5NPcyjU5VZDhzg5XN9RexVYPlroT5JtBc50JvusoI7OCx9f1JAbrz5LbqAG5Aux
1DRTISgGUN2+Yy6nQCZlKoaKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRSokHf
yXMDVNzeZ997M8wT1MGEMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD
NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP
S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6BBJqgq4IGjmr4Qjg+56/UgSegZbjAsqPex2HevvtmsGX+b2h4Dxg
tWJcmyk5aylc7s0OPez1194nIsUtBCJt4oO+Tgxl3l0inlHCvHE1QVyhjG2j2XwZ
F/DrSozk3XdFuuupzAL26Ua3rotE0X9KJK4B0/vlwM75aRnbJY53H22IcKmm2d5E
dj8wuB49DyamhjxBotlWq0yS4+GKGHmAYkmIVIp08y3mjeZoGK8ufJuEzF7LGl1f
Nh3WiFFAU5Eb8ks1uRvFPR62iLk3vH9ldReAKjSzkdgy5YqhPaQnAzWtZPHs1KeZ
UG8p1VANsa7HlNSkv+wg9E7AmAA3Sa0F
-----END CERTIFICATE-----
Generated at Sun Dec 7 13:27:40 2025 by rpki-client