This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File:                     8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier:          7RWNzDZI+O3NoR30px6eefD6NxdgD+SlfNiWJudma44=
Subject key identifier:   5B:59:52:E7:E1:AA:03:59:66:68:45:BA:62:E8:52:A0:0E:04:17:E2
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer:       /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial:       0605
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number:          05EE
Signing time:             Tue 16 Dec 2025 22:25:58 +0000
Manifest this update:     Tue 16 Dec 2025 22:25:57 +0000
Manifest next update:     Tue 23 Dec 2025 22:25:57 +0000
Files and hashes:         1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: ESCEHZAoud/O2jDVBCKM+8V74EhEGAm431NCQ+fyT88=)
                          2: 660A349884C511EFB2831C16C4F9AE02.roa (hash: K5rdCvcUlROQ0BuNDtcUQ3F8rgeuD4032+cfZuPHo+g=)
                          3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: UjG7oDUQ214221eoKLkpu49JL/kh+6CSjcDdtuUyQv4=)
                          4: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: eZp28/ZhhARP0YeFheqkwTLrrVm+pDubRXIX/coSMO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 22:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
        Validity
            Not Before: Dec 16 22:25:57 2025 GMT
            Not After : Dec 23 22:25:57 2025 GMT
        Subject: CN=6941dc75-edc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:a9:b5:e7:34:f6:46:8a:25:78:e7:a6:82:
                    cb:78:68:fb:d1:ab:1e:83:3e:5e:70:29:74:02:16:
                    32:b5:77:6f:4d:8e:f4:96:6e:65:ad:86:1c:02:89:
                    01:35:4a:f2:92:5d:d8:67:67:9e:a9:67:27:a8:4d:
                    66:93:d2:1c:01:b3:c6:db:9b:54:35:2f:fb:bf:10:
                    00:b3:23:db:24:20:b2:54:90:07:af:06:3c:92:4e:
                    f1:a5:b4:be:ef:26:b2:32:af:bb:f0:90:c1:e8:c2:
                    26:4e:91:e0:bd:01:ec:87:1c:6a:7d:91:5a:38:27:
                    a7:1f:19:35:29:93:2d:be:1d:8e:7d:20:1f:9b:2a:
                    76:c4:b7:17:b8:30:1a:5d:f5:c2:bd:06:86:1a:24:
                    85:6f:bc:60:da:cd:7c:33:21:12:81:f1:e8:a4:d0:
                    f9:1d:53:4f:5d:d0:f6:f3:d6:eb:a5:3e:06:c4:6a:
                    2d:a5:4b:93:a3:78:d7:7b:d9:63:a8:37:1e:bc:54:
                    89:1e:78:d1:d2:e0:48:07:2a:d5:c0:aa:4e:d0:84:
                    45:b6:4c:c3:ac:62:5d:53:87:17:36:ac:c3:26:3c:
                    70:ee:75:47:99:4c:74:48:25:8b:ba:49:e5:d5:e7:
                    b0:ad:c3:7d:7b:4a:10:c2:cb:1f:b3:b2:f0:22:e6:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:52:E7:E1:AA:03:59:66:68:45:BA:62:E8:52:A0:0E:04:17:E2
            X509v3 Authority Key Identifier:
                keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:91:24:b7:ef:da:0c:6a:4f:f5:9d:dc:ad:eb:77:6e:b4:e4:
         e1:c1:06:c1:00:3c:15:dc:95:ac:cf:2d:14:eb:31:9b:5e:4f:
         47:2c:02:a6:e9:54:6e:0d:83:16:47:db:76:62:78:e9:d7:37:
         fb:60:d0:46:1a:a0:1d:d7:25:5b:40:bb:37:b8:ca:8f:79:91:
         18:d7:fd:ae:79:37:e6:27:57:b2:26:eb:68:d5:87:3c:67:8a:
         d0:ba:55:6c:6f:40:9a:64:5d:66:77:95:14:a6:67:4e:50:89:
         f0:98:79:12:55:cd:fc:6a:16:75:91:96:73:4c:a3:4d:4b:ae:
         14:95:d9:4b:ec:78:cd:73:5f:9a:10:ea:98:47:d6:4f:b9:fa:
         04:96:a8:3a:e9:d3:c2:b8:d6:cc:44:b1:20:a6:e4:78:ca:47:
         c9:0e:76:c8:e8:bc:43:cc:c4:d7:30:dc:b3:e0:f6:77:9a:37:
         d8:79:12:fa:13:08:67:db:64:6d:d7:b1:a4:b8:1d:a1:dd:26:
         c8:78:e7:5c:d7:bd:50:19:53:8e:41:5a:09:41:31:a8:9b:d3:
         2f:57:29:61:9b:ad:02:29:f6:23:5a:6a:6f:a2:fc:be:b9:f8:
         a3:6f:ce:48:11:7c:7c:3c:f6:ea:5a:82:ad:a0:4d:f1:ca:a3:
         d3:0a:83:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz
MzcxNzcyRUQwHhcNMjUxMjE2MjIyNTU3WhcNMjUxMjIzMjIyNTU3WjAYMRYwFAYD
VQQDDA02OTQxZGM3NS1lZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWaptec09kaKJXjnpoLLeGj70asegz5ecCl0AhYytXdvTY70lm5lrYYcAokB
NUrykl3YZ2eeqWcnqE1mk9IcAbPG25tUNS/7vxAAsyPbJCCyVJAHrwY8kk7xpbS+
7yayMq+78JDB6MImTpHgvQHshxxqfZFaOCenHxk1KZMtvh2OfSAfmyp2xLcXuDAa
XfXCvQaGGiSFb7xg2s18MyESgfHopND5HVNPXdD289brpT4GxGotpUuTo3jXe9lj
qDcevFSJHnjR0uBIByrVwKpO0IRFtkzDrGJdU4cXNqzDJjxw7nVHmUx0SCWLuknl
1eewrcN9e0oQwssfs7LwIuZa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtZUufh
qgNZZmhFumLoUqAOBBfiMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF
ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB
T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCkSS379oMak/1ndyt63dutOThwQbBADwV3JWszy0U6zGbXk9HLAKm
6VRuDYMWR9t2Ynjp1zf7YNBGGqAd1yVbQLs3uMqPeZEY1/2ueTfmJ1eyJuto1Yc8
Z4rQulVsb0CaZF1md5UUpmdOUInwmHkSVc38ahZ1kZZzTKNNS64UldlL7HjNc1+a
EOqYR9ZPufoElqg66dPCuNbMRLEgpuR4ykfJDnbI6LxDzMTXMNyz4PZ3mjfYeRL6
Ewhn22Rt17GkuB2h3SbIeOdc171QGVOOQVoJQTGom9MvVylhm60CKfYjWmpvovy+
ufijb85IEXx8PPbqWoKtoE3xyqPTCoM+
-----END CERTIFICATE-----
Generated at Thu Dec 18 09:55:08 2025 by rpki-client