This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          v0FmhXNOzopYP5J7gxa33M702lrkEXhOxaGKJCjWHJ0=
Subject key identifier:   74:A3:6C:F5:F2:67:6D:30:F8:92:8F:C6:E7:FA:81:31:57:2C:8E:E7
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       093B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          0935
Signing time:             Sat 06 Dec 2025 19:23:20 +0000
Manifest this update:     Sat 06 Dec 2025 19:23:19 +0000
Manifest next update:     Sat 13 Dec 2025 19:23:19 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: XQFUXZzpHpZw70vxke/Vjh7qLJ9SjWGlYVeq3plg2Ak=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: uh8Xk70gWxRTmNYaCNUAB+Hh9CL9zqsYHo9ULlX8dpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2363 (0x93b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Dec  6 19:23:19 2025 GMT
            Not After : Dec 13 19:23:19 2025 GMT
        Subject: CN=693482a7-2a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:ac:da:98:6b:b6:e9:15:d8:22:1f:ff:0c:
                    03:df:29:4a:56:63:7d:c4:eb:b7:52:3c:30:46:ed:
                    40:a5:c5:94:48:94:3e:af:42:fd:c3:46:07:79:c8:
                    3b:50:d9:f5:e9:50:e1:f8:9d:83:ef:c4:74:84:f4:
                    f2:a2:b9:b9:90:e9:b8:62:c4:cb:e1:7f:50:25:a6:
                    c0:78:61:aa:9a:62:50:f2:84:2f:ff:fc:1a:86:e6:
                    30:64:f4:dc:d0:f5:66:34:46:be:47:b4:67:1e:3a:
                    45:8c:2d:f5:5a:17:9d:68:00:10:18:bd:48:87:47:
                    1e:4d:29:ad:e6:cc:ea:68:c9:9e:da:79:18:7f:0c:
                    83:00:05:d4:fd:5c:89:e0:9c:48:8d:ca:13:74:30:
                    0b:02:b1:9d:03:6e:13:a6:21:69:a8:22:9e:15:65:
                    fa:b2:6d:2f:ed:5c:75:b8:93:32:e5:ff:fb:9f:cc:
                    b1:38:49:60:67:c6:26:44:5c:ae:33:b5:fd:e5:06:
                    c5:f2:44:31:01:e9:1d:7e:3d:07:1a:d6:59:26:3a:
                    05:1e:8d:01:e9:6a:9f:2a:8e:59:ec:7d:3c:9a:23:
                    84:f2:b2:34:95:39:67:93:a4:70:79:cc:a7:b6:9a:
                    40:4a:b9:02:dc:30:cd:93:1b:58:af:74:f6:c3:8b:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:6C:F5:F2:67:6D:30:F8:92:8F:C6:E7:FA:81:31:57:2C:8E:E7
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:78:ce:cd:67:1c:2a:d0:b5:64:93:59:5d:08:99:17:32:9c:
         5d:fa:38:52:07:3e:a1:78:05:c1:71:5f:7e:0d:61:16:8c:6a:
         e6:ea:99:45:18:e4:a7:87:cf:ec:e8:98:d5:d9:23:f9:98:79:
         5c:fc:30:a1:3f:c8:ff:15:28:59:53:7d:bd:cb:70:4f:3e:e0:
         66:5d:f6:c7:dc:b8:3f:a2:a8:8b:bb:28:1e:5f:35:c2:57:25:
         3f:03:24:c4:38:46:52:87:ed:c4:2d:d7:4b:fb:21:61:ae:9c:
         53:b3:c8:6e:63:bc:e3:37:66:bb:04:78:77:2e:0b:6d:56:c2:
         72:1b:2c:16:a3:0a:e2:b8:c6:ea:ed:38:4e:5b:77:36:d2:a7:
         6c:13:8b:c5:53:2e:6a:5b:32:85:ff:d8:c6:79:bc:8e:01:3d:
         af:a0:82:08:c7:ea:e0:40:61:7e:6e:7f:5e:25:a7:7c:92:f7:
         9e:4e:5f:06:c9:96:85:d8:b7:8f:e5:56:3a:fc:29:9d:57:4e:
         d9:57:8f:79:33:e3:66:71:a9:81:81:78:5d:f9:97:86:84:ca:
         24:a8:f0:d1:1a:aa:e4:f3:b7:57:5c:28:a9:e2:5c:e1:35:01:
         7d:44:7c:b6:67:0e:f7:4c:09:e0:b4:6e:f4:76:a5:8d:71:ea:
         38:10:33:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0
MDdDQTg5ODIwHhcNMjUxMjA2MTkyMzE5WhcNMjUxMjEzMTkyMzE5WjAYMRYwFAYD
VQQDEw02OTM0ODJhNy0yYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA30us2phrtukV2CIf/wwD3ylKVmN9xOu3UjwwRu1ApcWUSJQ+r0L9w0YHecg7
UNn16VDh+J2D78R0hPTyorm5kOm4YsTL4X9QJabAeGGqmmJQ8oQv//wahuYwZPTc
0PVmNEa+R7RnHjpFjC31WhedaAAQGL1Ih0ceTSmt5szqaMme2nkYfwyDAAXU/VyJ
4JxIjcoTdDALArGdA24TpiFpqCKeFWX6sm0v7Vx1uJMy5f/7n8yxOElgZ8YmRFyu
M7X95QbF8kQxAekdfj0HGtZZJjoFHo0B6WqfKo5Z7H08miOE8rI0lTlnk6Rwecyn
tppASrkC3DDNkxtYr3T2w4vQBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSjbPXy
Z20w+JKPxuf6gTFXLI7nMB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw
NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE
MHkyNWdNVUdKc0JBZktpWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAeM7NZxwq0LVkk1ldCJkXMpxd+jhSBz6heAXBcV9+DWEWjGrm6plF
GOSnh8/s6JjV2SP5mHlc/DChP8j/FShZU329y3BPPuBmXfbH3Lg/oqiLuygeXzXC
VyU/AyTEOEZSh+3ELddL+yFhrpxTs8huY7zjN2a7BHh3LgttVsJyGywWowriuMbq
7ThOW3c20qdsE4vFUy5qWzKF/9jGebyOAT2voIIIx+rgQGF+bn9eJad8kveeTl8G
yZaF2LeP5VY6/CmdV07ZV495M+NmcamBgXhd+ZeGhMokqPDRGqrk87dXXCip4lzh
NQF9RHy2Zw73TAngtG70dqWNceo4EDOE
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:00:36 2025 by rpki-client