This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File:                     ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier:          GoFtMYckdx3zItWGmJcwPsuLDWg/fSWn4Z0ZKxibFT0=
Subject key identifier:   7E:A2:E7:E5:92:16:A1:1B:09:9B:77:6C:3D:B7:E3:02:88:F0:FE:A9
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer:       /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial:       0910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number:          0908
Signing time:             Sat 06 Dec 2025 19:28:30 +0000
Manifest this update:     Sat 06 Dec 2025 19:28:29 +0000
Manifest next update:     Sat 13 Dec 2025 19:28:29 +0000
Files and hashes:         1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: 1+kbIK42eqJQoEhdsOm+qq4YFqerFGWrlHxjkhZYAUE=)
                          2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: Pjk7KOVj7H3BoAMc7NRiJiAFk/4ChSG9JZtPBtMlKPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
        Validity
            Not Before: Dec  6 19:28:29 2025 GMT
            Not After : Dec 13 19:28:29 2025 GMT
        Subject: CN=693483de-653d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:b1:09:9e:a2:f0:7b:e6:d8:18:cd:1e:a4:
                    fe:1c:94:57:7f:16:90:e8:bc:71:c9:25:91:ea:52:
                    47:95:35:79:ba:fa:31:fd:e7:fa:21:18:5b:d8:b6:
                    8e:84:1f:dd:17:f8:e7:a9:c4:c8:18:02:53:81:fa:
                    4f:6e:8b:a2:e5:b7:40:dc:50:79:92:01:9e:e3:21:
                    26:01:68:a0:7d:89:53:57:02:7a:65:28:29:7f:26:
                    e4:e5:4b:3c:d0:a5:02:b4:3a:9f:44:8d:81:c6:ad:
                    a6:0d:30:52:f1:75:c1:66:9d:87:80:15:1b:ac:f3:
                    d4:14:07:4e:3f:de:83:13:9c:f0:75:c6:be:ce:2a:
                    c0:3f:1c:e4:27:7f:b5:78:ce:8c:b7:3a:01:b1:53:
                    e4:86:6f:fe:17:58:62:29:72:f8:a1:3a:e6:ce:4f:
                    ee:15:71:dc:58:8e:e1:ce:8e:02:f5:b4:68:06:b8:
                    b0:a6:bc:e8:d1:90:69:55:89:8b:cf:47:ea:88:6e:
                    b6:9c:8c:f1:4e:b7:df:4b:21:f4:34:7a:55:ea:45:
                    03:4b:3d:60:a1:74:19:bb:7e:7c:cc:50:a0:6a:b0:
                    e7:63:37:dd:62:75:80:e1:25:90:1b:98:9e:ce:f2:
                    be:e0:ef:f4:1e:84:44:c2:2f:6f:e2:b5:67:64:92:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A2:E7:E5:92:16:A1:1B:09:9B:77:6C:3D:B7:E3:02:88:F0:FE:A9
            X509v3 Authority Key Identifier:
                keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:ef:c1:a9:5b:4a:14:7d:5a:14:12:ae:16:c5:13:bb:e2:
         22:8b:83:a7:73:a6:e2:b5:65:b3:da:cd:08:48:2a:3f:89:03:
         d8:a4:82:45:31:9a:0c:6a:c5:93:da:99:86:a7:b5:11:34:52:
         c1:f3:c2:aa:0e:41:e8:8e:cc:b1:2b:e7:07:ed:ee:5f:1b:03:
         7e:c4:ca:6c:d6:58:31:50:ac:7f:a5:9d:97:3f:8e:0f:1b:02:
         8f:63:83:de:a1:1c:7a:d6:23:9d:2f:fa:77:05:4d:96:08:d6:
         f4:eb:51:14:58:db:1c:48:e7:de:2e:83:32:ea:ba:a9:e0:ec:
         96:58:35:23:63:5e:15:76:e5:05:4b:62:ca:12:cc:25:e5:b3:
         1e:d8:48:0a:6e:e3:2f:a7:e9:9f:51:c4:8d:47:9d:53:40:18:
         de:ce:2e:99:6e:0b:4c:71:bc:70:98:60:f5:99:3a:0f:09:7d:
         b3:4b:a0:7b:c0:98:64:5f:4a:38:1b:28:43:75:b2:b0:23:25:
         3b:9b:d6:92:24:54:2c:ea:00:8c:c5:41:5f:b2:b4:c4:e2:47:
         9d:21:08:e8:d4:dc:87:5f:e9:7a:aa:5d:2b:d5:5e:6c:0d:91:
         56:2e:88:24:d1:47:93:4c:3c:d5:de:bf:1f:42:73:9e:ca:02:
         8d:3f:64:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB
M0I3NUE2RDMwHhcNMjUxMjA2MTkyODI5WhcNMjUxMjEzMTkyODI5WjAYMRYwFAYD
VQQDEw02OTM0ODNkZS02NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQmxCZ6i8Hvm2BjNHqT+HJRXfxaQ6LxxySWR6lJHlTV5uvox/ef6IRhb2LaO
hB/dF/jnqcTIGAJTgfpPboui5bdA3FB5kgGe4yEmAWigfYlTVwJ6ZSgpfybk5Us8
0KUCtDqfRI2Bxq2mDTBS8XXBZp2HgBUbrPPUFAdOP96DE5zwdca+zirAPxzkJ3+1
eM6MtzoBsVPkhm/+F1hiKXL4oTrmzk/uFXHcWI7hzo4C9bRoBriwprzo0ZBpVYmL
z0fqiG62nIzxTrffSyH0NHpV6kUDSz1goXQZu358zFCgarDnYzfdYnWA4SWQG5ie
zvK+4O/0HoREwi9v4rVnZJI8+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6i5+WS
FqEbCZt3bD234wKI8P6pMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB
ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4
ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqc+/BqVtKFH1aFBKuFsUTu+Iii4Onc6bitWWz2s0ISCo/iQPYpIJF
MZoMasWT2pmGp7URNFLB88KqDkHojsyxK+cH7e5fGwN+xMps1lgxUKx/pZ2XP44P
GwKPY4PeoRx61iOdL/p3BU2WCNb061EUWNscSOfeLoMy6rqp4OyWWDUjY14VduUF
S2LKEswl5bMe2EgKbuMvp+mfUcSNR51TQBjezi6ZbgtMcbxwmGD1mToPCX2zS6B7
wJhkX0o4GyhDdbKwIyU7m9aSJFQs6gCMxUFfsrTE4kedIQjo1NyHX+l6ql0r1V5s
DZFWLogk0UeTTDzV3r8fQnOeygKNP2Rn
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:44 2025 by rpki-client