This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
File:                     gaOMiwlmciXuBPc67PoJWQ0fQUw.mft (raw, json)
Hash identifier:          wWrDhjYZyEOM8wVcIVEWhdo4JS3DvuiP4ruYSTi6BFc=
Subject key identifier:   E3:BB:4E:19:3A:66:3E:1C:64:F3:38:AA:EC:B8:54:02:42:2E:6B:50
Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C
Certificate issuer:       /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
Manifest number:          0316
Signing time:             Thu 04 Dec 2025 23:31:54 +0000
Manifest this update:     Thu 04 Dec 2025 23:31:53 +0000
Manifest next update:     Thu 11 Dec 2025 23:31:53 +0000
Files and hashes:         1: gaOMiwlmciXuBPc67PoJWQ0fQUw.crl (hash: 0+dRtgcV0i9IhsByzMGdoAiVf6MqgpdnCGJyJJAK+Wo=)
                          2: 3785A958EF4711EF906AD167C4F9AE02.roa (hash: Xop4pF7LmPiWj4qFmNK9jXxRuc+SVOdI5Rsywj/dhPQ=)
                          3: 464B4494F7D911EF8EA69265C4F9AE02.roa (hash: kw7ZHY1axLvj55a+YPxHpHPEy1diN3j6tF6SRdvVlY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE35F, serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
        Validity
            Not Before: Dec  4 23:31:53 2025 GMT
            Not After : Dec 11 23:31:53 2025 GMT
        Subject: CN=693219e9-ae47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:09:99:2f:9a:68:21:71:e1:d8:26:ed:ec:
                    53:34:dc:e4:ad:db:f4:2f:9f:03:0e:43:5d:54:85:
                    fa:40:f8:b5:68:12:5a:34:4b:a4:73:c8:f8:5b:53:
                    cc:83:66:d7:e3:ea:25:ff:04:e8:c1:ea:73:67:ed:
                    4a:89:cd:59:38:da:8b:2b:4a:42:57:11:d5:92:85:
                    b5:81:01:de:02:4f:74:74:d0:ad:0f:4b:9f:4b:a9:
                    87:a0:34:02:3c:59:17:da:8f:69:e0:44:6e:69:7b:
                    c8:27:d6:94:df:78:6f:f6:d9:a8:85:ae:71:2d:a2:
                    87:d9:d5:73:66:dd:a3:60:6f:8f:12:d3:cf:6e:fd:
                    7e:db:09:a3:c5:07:f0:1e:de:73:d8:f1:f8:bf:53:
                    16:08:6c:0e:d4:fc:91:05:63:88:d4:e5:a8:1f:cd:
                    84:a3:b6:84:ea:53:0c:e2:be:a1:59:c6:6c:6d:1f:
                    58:85:2c:09:be:54:12:56:b8:f8:81:fb:1f:c2:2e:
                    d5:55:ea:4f:a2:df:95:1f:d5:22:bc:c8:5b:88:84:
                    f3:eb:d0:fb:c6:97:f4:07:44:4a:83:fc:77:e8:c7:
                    af:8a:45:d7:ec:c7:9f:32:ac:f8:6e:eb:b5:8f:c3:
                    06:d3:60:dc:2d:be:50:9f:80:c6:04:a6:2f:a9:63:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:4E:19:3A:66:3E:1C:64:F3:38:AA:EC:B8:54:02:42:2E:6B:50
            X509v3 Authority Key Identifier:
                keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:d2:4b:29:6b:f8:e8:95:16:9c:1e:58:4b:ed:eb:99:c5:
         a7:33:44:18:55:ef:dc:9f:66:b7:67:76:ab:89:b2:7f:46:79:
         73:af:5f:d6:b0:ab:f5:db:5e:06:a3:63:2a:cf:8b:74:6a:79:
         fc:fb:1f:59:fb:70:63:d5:9b:53:cd:04:0a:a3:b4:9e:c4:22:
         da:0c:60:94:20:8a:45:f7:0a:f4:49:24:62:77:a6:18:d9:4e:
         d6:9a:20:4d:8e:04:94:68:37:8c:b7:bd:64:16:3f:e2:43:af:
         01:c4:5e:92:bf:85:07:96:7a:ee:8d:14:d4:17:08:49:a3:03:
         a2:18:bd:dc:f1:bc:a0:3a:d4:d8:b9:0d:b8:6a:fd:a2:f2:b7:
         23:d0:c6:e5:51:22:92:bb:71:72:c5:48:fc:0c:00:99:a0:45:
         aa:51:5b:99:3f:90:43:e2:ef:fa:6d:26:5a:80:a5:a7:7a:e4:
         9c:33:0a:19:b1:04:7e:3b:e9:a9:56:89:ea:8f:1b:7b:1f:70:
         26:5d:ca:6f:1c:02:2f:c3:32:e3:6d:a2:d5:52:70:86:6a:07:
         3a:5a:b3:25:d6:14:e6:db:39:5c:89:5e:54:43:95:28:c6:33:
         81:6e:23:ac:1f:5b:a2:13:b9:65:3f:a2:9b:cb:4b:84:57:3e:
         e7:6d:95:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzNUYxMTAvBgNVBAUTKDgxQTM4QzhCMDk2NjcyMjVFRTA0RjczQUVDRkEwOTU5
MEQxRjQxNEMwHhcNMjUxMjA0MjMzMTUzWhcNMjUxMjExMjMzMTUzWjAYMRYwFAYD
VQQDEw02OTMyMTllOS1hZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyegJmS+aaCFx4dgm7exTNNzkrdv0L58DDkNdVIX6QPi1aBJaNEukc8j4W1PM
g2bX4+ol/wTowepzZ+1Kic1ZONqLK0pCVxHVkoW1gQHeAk90dNCtD0ufS6mHoDQC
PFkX2o9p4ERuaXvIJ9aU33hv9tmoha5xLaKH2dVzZt2jYG+PEtPPbv1+2wmjxQfw
Ht5z2PH4v1MWCGwO1PyRBWOI1OWoH82Eo7aE6lMM4r6hWcZsbR9YhSwJvlQSVrj4
gfsfwi7VVepPot+VH9UivMhbiITz69D7xpf0B0RKg/x36MevikXX7MefMqz4buu1
j8MG02DcLb5Qn4DGBKYvqWPjdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO7Thk6
Zj4cZPM4quy4VAJCLmtQMB8GA1UdIwQYMBaAFIGjjIsJZnIl7gT3Ouz6CVkNH0FM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM1Ri9FQzM0NzQyQ0Y5
MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNpWHVCUGM2N1BvSldRMGZR
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dhT01pd2xtY2lYdUJQYzY3UG9KV1EwZlFVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTM1Ri9FQzM0NzQyQ0Y5MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNp
WHVCUGM2N1BvSldRMGZRVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBL3NJLKWv46JUWnB5YS+3rmcWnM0QYVe/cn2a3Z3aribJ/Rnlzr1/W
sKv1214Go2Mqz4t0ann8+x9Z+3Bj1ZtTzQQKo7SexCLaDGCUIIpF9wr0SSRid6YY
2U7WmiBNjgSUaDeMt71kFj/iQ68BxF6Sv4UHlnrujRTUFwhJowOiGL3c8bygOtTY
uQ24av2i8rcj0MblUSKSu3FyxUj8DACZoEWqUVuZP5BD4u/6bSZagKWneuScMwoZ
sQR+O+mpVonqjxt7H3AmXcpvHAIvwzLjbaLVUnCGagc6WrMl1hTm2zlciV5UQ5Uo
xjOBbiOsH1uiE7llP6Kby0uEVz7nbZWj
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:20:57 2025 by rpki-client