This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File:                     ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier:          AjvqURal72PAUgnZSK7nCgttTZfHfSP7jHD4YrodusM=
Subject key identifier:   38:9C:08:65:11:2A:0B:80:6C:52:13:8A:43:B9:20:77:1B:2F:3D:83
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer:       /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial:       08DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number:          08D3
Signing time:             Thu 04 Dec 2025 19:35:48 +0000
Manifest this update:     Thu 04 Dec 2025 19:35:48 +0000
Manifest next update:     Thu 11 Dec 2025 19:35:48 +0000
Files and hashes:         1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: kNDc1IaXksx7b/+dBdyjMP9qhc34uDlplXxTqdGg0n8=)
                          2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Zy35shBaA7kL0uiX8MFYVjG3k67WMwjlOa39yPU2npo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
                          rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
        Validity
            Not Before: Dec  4 19:35:48 2025 GMT
            Not After : Dec 11 19:35:48 2025 GMT
        Subject: CN=6931e294-06df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:9d:f2:72:d9:9e:f2:c9:da:ed:15:79:5a:
                    e1:eb:78:4b:7e:8c:fe:bb:19:18:ac:dc:49:a0:f6:
                    9b:49:0c:e7:52:7c:ea:09:cd:4f:98:51:8b:b8:a1:
                    05:5c:5a:04:63:9c:d6:44:3c:a9:26:77:8c:6a:9a:
                    1e:91:2d:56:0c:b4:f7:e7:c6:38:61:97:f2:07:23:
                    5f:55:af:1f:dc:0c:79:fe:3c:9b:2b:9c:10:56:5e:
                    84:2b:55:8d:76:c7:11:bd:7d:ce:49:52:58:7e:29:
                    df:e3:4c:6f:06:32:ad:18:e6:2b:a2:ad:bf:33:f4:
                    65:ad:c9:3f:ad:cb:f3:ff:27:f3:f9:bb:73:2b:d2:
                    81:a8:24:0f:65:83:60:4d:a5:57:52:ba:ad:e1:92:
                    c3:fe:d0:ff:b0:e5:b6:11:11:c7:81:e2:88:01:a7:
                    a7:bb:31:1d:39:25:12:b9:7f:28:64:9c:08:61:03:
                    cd:be:95:f3:3f:30:ca:ee:15:9b:92:2d:a9:f3:c6:
                    7b:ab:df:08:62:43:c1:2f:3d:09:95:31:37:89:09:
                    dd:1a:59:b5:5b:ce:ee:b7:85:18:22:93:6a:cd:0a:
                    7d:ac:0a:69:56:4c:17:49:a0:4b:dc:04:ea:1a:a9:
                    5a:83:72:4d:78:21:af:0b:38:a7:d3:ce:f6:9e:0d:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:08:65:11:2A:0B:80:6C:52:13:8A:43:B9:20:77:1B:2F:3D:83
            X509v3 Authority Key Identifier:
                keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:43:8f:53:6a:6f:4f:b1:f3:df:3b:8c:5d:64:76:31:22:bc:
         49:50:d4:a2:9f:9e:e0:bd:02:29:21:bd:a5:09:fb:91:60:03:
         2e:e5:fb:24:a5:40:dd:6c:f6:1c:c5:d6:9d:11:19:b7:a5:19:
         b4:57:ed:4f:54:40:df:23:43:c9:22:09:75:d9:2d:d2:69:04:
         9a:83:25:36:98:f8:72:61:85:2c:64:36:44:e2:c3:59:8a:1c:
         78:3a:4d:db:f1:b4:24:b2:32:f3:15:15:f9:40:1d:e9:a7:d4:
         fe:be:a0:1c:d3:ce:dc:6e:2e:f2:dd:ba:c6:5d:d2:7c:83:b7:
         a8:57:0c:cf:6f:17:32:26:39:6c:53:38:8f:ec:a6:db:a0:ab:
         93:a3:02:64:c2:2a:a3:1f:62:a5:e5:42:e8:c2:ea:f6:a0:dc:
         ac:df:7b:ce:b3:64:a6:3a:66:06:66:f5:ec:13:00:87:34:9d:
         52:85:e2:79:b8:49:96:f9:73:75:55:ed:0e:cd:c8:31:95:19:
         20:46:04:be:ad:73:eb:84:52:c0:e1:31:6b:4d:73:5e:40:d3:
         ca:30:8d:7a:59:5b:cf:aa:dd:18:69:24:4c:0c:81:13:8a:f6:
         26:f9:df:4d:39:7c:3b:4c:b9:62:19:08:fc:16:fc:e4:c7:4b:
         e4:3c:1b:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1
RDc0ODhEMjEwHhcNMjUxMjA0MTkzNTQ4WhcNMjUxMjExMTkzNTQ4WjAYMRYwFAYD
VQQDEw02OTMxZTI5NC0wNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2Cd8nLZnvLJ2u0VeVrh63hLfoz+uxkYrNxJoPabSQznUnzqCc1PmFGLuKEF
XFoEY5zWRDypJneMapoekS1WDLT358Y4YZfyByNfVa8f3Ax5/jybK5wQVl6EK1WN
dscRvX3OSVJYfinf40xvBjKtGOYroq2/M/Rlrck/rcvz/yfz+btzK9KBqCQPZYNg
TaVXUrqt4ZLD/tD/sOW2ERHHgeKIAaenuzEdOSUSuX8oZJwIYQPNvpXzPzDK7hWb
ki2p88Z7q98IYkPBLz0JlTE3iQndGlm1W87ut4UYIpNqzQp9rAppVkwXSaBL3ATq
Gqlag3JNeCGvCzin0872ng2KiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDicCGUR
KguAbFITikO5IHcbLz2DMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0
MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM
RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgQ49Tam9PsfPfO4xdZHYxIrxJUNSin57gvQIpIb2lCfuRYAMu5fsk
pUDdbPYcxdadERm3pRm0V+1PVEDfI0PJIgl12S3SaQSagyU2mPhyYYUsZDZE4sNZ
ihx4Ok3b8bQksjLzFRX5QB3pp9T+vqAc087cbi7y3brGXdJ8g7eoVwzPbxcyJjls
UziP7KbboKuTowJkwiqjH2Kl5ULowur2oNys33vOs2SmOmYGZvXsEwCHNJ1SheJ5
uEmW+XN1Ve0OzcgxlRkgRgS+rXPrhFLA4TFrTXNeQNPKMI16WVvPqt0YaSRMDIET
ivYm+d9NOXw7TLliGQj8Fvzkx0vkPBt2
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:24:24 2025 by rpki-client