This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File:                     ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier:          fkBiIU63rgafGruKrs2e00Ehukuvt+ryW3z7KijyR60=
Subject key identifier:   55:A9:A7:24:56:FE:F4:89:E9:F0:08:A6:28:F9:A0:26:AF:F4:02:A2
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer:       /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number:          014B
Signing time:             Fri 05 Dec 2025 02:24:38 +0000
Manifest this update:     Fri 05 Dec 2025 02:24:37 +0000
Manifest next update:     Fri 12 Dec 2025 02:24:37 +0000
Files and hashes:         1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: Hn4phOSx5W6/4uXrZvwAz9p0nm3PuwvPzxAV5FU6EKQ=)
                          2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=)
                          3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
                          rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
        Validity
            Not Before: Dec  5 02:24:37 2025 GMT
            Not After : Dec 12 02:24:37 2025 GMT
        Subject: CN=69324266-d7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:f0:69:64:d8:62:4a:d0:d1:37:73:ea:90:
                    65:6d:5b:da:3b:b6:0b:90:6b:28:fe:97:36:3e:c5:
                    b5:a0:58:3a:01:2b:0b:fe:39:ce:a2:e0:3c:2f:b5:
                    bb:f9:70:e1:ae:87:0a:8c:ac:82:d4:f5:96:55:d5:
                    93:d1:50:66:75:5a:15:1d:64:7e:1a:46:27:b0:bc:
                    91:f0:df:11:be:70:64:3a:24:46:42:97:7e:d6:ba:
                    1f:db:7a:6a:7e:d5:fb:44:29:a1:fe:31:36:af:fb:
                    33:e5:de:f8:52:b7:ef:2c:70:c8:08:b7:8e:f8:85:
                    9d:30:f0:01:28:81:00:d9:12:f0:82:6d:ac:48:b5:
                    6a:a0:6a:9b:6d:f1:fc:fe:db:30:2d:84:bd:eb:bb:
                    8b:5e:85:06:e9:34:df:22:e2:24:23:89:e9:3d:03:
                    fe:1d:2e:fb:36:1d:f7:60:89:13:37:aa:39:2a:9d:
                    1b:fc:cb:b3:8b:c5:70:95:ef:da:3b:3f:e7:46:48:
                    cd:ca:33:e8:23:97:47:d3:f1:3a:26:60:21:85:37:
                    ce:ef:95:60:90:ac:7f:4e:08:5d:75:eb:0c:52:fa:
                    c2:c1:f1:2c:fd:66:a8:61:11:62:a8:4b:e9:aa:1a:
                    ee:05:ca:bf:38:56:f2:8b:63:d7:61:d2:67:ea:10:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:A7:24:56:FE:F4:89:E9:F0:08:A6:28:F9:A0:26:AF:F4:02:A2
            X509v3 Authority Key Identifier:
                keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:d9:f9:bc:20:cb:f5:28:3f:b3:6c:98:a3:64:5b:33:32:3f:
         43:60:b0:42:23:a1:3c:3c:28:10:fb:3b:33:b0:c0:a4:ee:ee:
         c0:47:7d:7a:f7:91:7a:e0:75:08:c3:d5:c2:9d:fa:4e:48:87:
         ce:a6:c3:31:54:38:c9:53:8e:f4:8e:d7:0d:1e:9d:25:72:ea:
         13:11:df:70:4b:14:bd:78:87:d4:05:f1:6d:3f:3f:44:d9:39:
         23:c2:65:37:9f:13:d4:cd:b7:a9:78:f2:ca:04:d6:95:05:b1:
         0d:d3:66:51:53:1d:bc:ae:bc:af:54:e3:81:2d:70:22:65:42:
         86:7f:91:aa:5d:75:c9:8e:4e:d2:cf:98:10:36:c0:b6:6b:b7:
         90:a8:07:25:f0:5b:c5:9b:a2:a1:4e:c2:b4:98:10:27:54:81:
         43:87:19:1a:07:72:94:31:d1:eb:88:7c:41:d1:58:4d:b2:f8:
         95:ac:b3:0a:27:48:74:20:e3:f5:21:22:71:82:f1:55:18:d8:
         5d:dc:b4:8d:cc:d2:41:e1:5d:1b:c3:3d:3b:18:c0:de:2e:19:
         a4:cc:a2:f6:f7:3b:61:31:df:b2:69:e0:d9:88:12:e7:b3:9f:
         df:65:02:6a:4f:a9:44:c5:f8:3a:ca:64:de:20:b8:c8:b7:20:
         d5:8d:b5:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3
RDJBREI0REUwHhcNMjUxMjA1MDIyNDM3WhcNMjUxMjEyMDIyNDM3WjAYMRYwFAYD
VQQDEw02OTMyNDI2Ni1kN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyerwaWTYYkrQ0Tdz6pBlbVvaO7YLkGso/pc2PsW1oFg6ASsL/jnOouA8L7W7
+XDhrocKjKyC1PWWVdWT0VBmdVoVHWR+GkYnsLyR8N8RvnBkOiRGQpd+1rof23pq
ftX7RCmh/jE2r/sz5d74UrfvLHDICLeO+IWdMPABKIEA2RLwgm2sSLVqoGqbbfH8
/tswLYS967uLXoUG6TTfIuIkI4npPQP+HS77Nh33YIkTN6o5Kp0b/Muzi8Vwle/a
Oz/nRkjNyjPoI5dH0/E6JmAhhTfO75VgkKx/TghddesMUvrCwfEs/WaoYRFiqEvp
qhruBcq/OFbyi2PXYdJn6hD0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWppyRW
/vSJ6fAIpij5oCav9AKiMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1
QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt
d2JvXzdiVk9DSDU5S3R0TjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDX2fm8IMv1KD+zbJijZFszMj9DYLBCI6E8PCgQ+zszsMCk7u7AR316
95F64HUIw9XCnfpOSIfOpsMxVDjJU470jtcNHp0lcuoTEd9wSxS9eIfUBfFtPz9E
2TkjwmU3nxPUzbepePLKBNaVBbEN02ZRUx28rryvVOOBLXAiZUKGf5GqXXXJjk7S
z5gQNsC2a7eQqAcl8FvFm6KhTsK0mBAnVIFDhxkaB3KUMdHriHxB0VhNsviVrLMK
J0h0IOP1ISJxgvFVGNhd3LSNzNJB4V0bwz07GMDeLhmkzKL29zthMd+yaeDZiBLn
s5/fZQJqT6lExfg6ymTeILjItyDVjbVR
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:38 2025 by rpki-client