This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          TRu/DNrcoXjBNKQG6dJiGvKeNooYvSYQqyvDJwEgSN4=
Subject key identifier:   5A:EC:E0:28:55:C8:84:D8:28:87:2C:75:91:4C:A7:3C:D6:92:1D:EB
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          018B
Signing time:             Fri 05 Dec 2025 01:49:59 +0000
Manifest this update:     Fri 05 Dec 2025 01:49:58 +0000
Manifest next update:     Fri 12 Dec 2025 01:49:58 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: uYJJRxvFLgeHZXv1YCNNQ6fDcKfk50n5znPKq3BtGj8=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 7KfiMIrqCDMway6OtiafKLI6sq8wx9tSGpkCPK/N/Zw=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: 4FhZ7+hXM4fh2uS07kN1jQREapXxM7SUussBWKhZnjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Dec  5 01:49:58 2025 GMT
            Not After : Dec 12 01:49:58 2025 GMT
        Subject: CN=69323a47-c4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:9e:0d:50:8e:5c:f2:2f:4a:8c:19:2c:f9:
                    b3:df:d4:85:99:42:4b:38:ca:d5:c1:d2:70:ae:87:
                    67:1e:c5:10:00:f5:56:cc:19:17:d9:ca:24:73:4b:
                    d3:85:ef:9e:11:be:60:b1:7a:65:7c:40:4b:44:1f:
                    30:26:ff:56:34:5f:9f:e3:ef:18:86:43:91:99:79:
                    83:9c:c8:c3:eb:30:6f:8d:d0:5a:f1:57:19:1b:5b:
                    e7:a6:fc:7c:ad:00:d7:a8:4f:95:49:d1:20:c9:68:
                    9f:7e:cf:55:d8:cc:8e:49:46:f2:ae:8f:c1:b4:ee:
                    8f:05:56:27:94:61:d8:bc:bf:30:59:a3:c3:d4:85:
                    0c:68:4c:8a:60:e4:8c:c8:da:25:31:e4:4f:55:4f:
                    23:aa:2f:f1:dd:11:ab:1c:14:c7:d0:a4:38:9b:17:
                    63:fd:54:36:7f:46:6d:16:ed:59:13:88:65:6a:6b:
                    f9:33:cd:94:24:45:14:ec:1e:e5:e6:6a:6c:fc:b8:
                    78:49:54:93:75:eb:e1:57:a9:d9:ac:15:71:99:37:
                    f7:bb:66:69:14:dc:ce:73:c2:0e:43:3c:0d:88:7a:
                    f0:2f:5c:e5:ef:ff:2b:1b:09:71:eb:51:b2:54:11:
                    d6:cb:72:fe:35:b5:ee:da:76:71:2c:b8:9c:fc:90:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:E0:28:55:C8:84:D8:28:87:2C:75:91:4C:A7:3C:D6:92:1D:EB
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:a1:2a:b4:bc:bc:cb:03:72:9d:ce:0b:e9:2e:d5:72:75:
         c1:0a:48:94:dd:4f:0f:b9:94:4c:2f:ed:d6:ac:fd:ce:1b:2f:
         74:67:9b:8c:ec:ed:99:8f:18:9d:ca:b8:ba:63:aa:fa:41:87:
         67:c4:ac:10:7a:db:14:a8:0e:85:07:97:39:91:a5:7b:fb:62:
         ed:af:7f:b2:11:b9:d1:9c:0a:1d:56:3e:3c:77:12:41:73:79:
         36:d9:29:6e:4d:73:c7:27:e5:71:3b:60:fa:ba:38:41:21:c0:
         4d:6f:59:9a:21:3e:f3:9f:1d:0c:10:aa:84:be:89:2e:40:0a:
         3d:79:8c:80:d5:9e:e4:09:35:56:3f:79:98:76:0c:34:bd:d1:
         b7:e6:b2:b4:f2:d7:35:81:02:09:ce:bb:84:0a:88:74:cc:36:
         9e:b8:c9:3c:84:c9:90:d1:94:93:21:6e:35:88:1d:c5:86:55:
         f4:34:50:c6:a6:06:8c:da:82:97:a9:c8:f3:b3:54:af:c4:84:
         f8:41:d9:94:e5:55:de:37:54:16:2c:b9:05:78:02:bb:b8:e0:
         6c:cc:ca:fa:e2:0e:80:1e:62:77:f3:e5:fb:cf:89:b6:df:49:
         59:cc:cd:bf:5a:7e:42:2f:2f:29:f1:9e:39:8b:a9:a0:3d:d0:
         45:97:c0:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2
MUZEQkVBMzIwHhcNMjUxMjA1MDE0OTU4WhcNMjUxMjEyMDE0OTU4WjAYMRYwFAYD
VQQDEw02OTMyM2E0Ny1jNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqieDVCOXPIvSowZLPmz39SFmUJLOMrVwdJwrodnHsUQAPVWzBkX2cokc0vT
he+eEb5gsXplfEBLRB8wJv9WNF+f4+8YhkORmXmDnMjD6zBvjdBa8VcZG1vnpvx8
rQDXqE+VSdEgyWiffs9V2MyOSUbyro/BtO6PBVYnlGHYvL8wWaPD1IUMaEyKYOSM
yNolMeRPVU8jqi/x3RGrHBTH0KQ4mxdj/VQ2f0ZtFu1ZE4hlamv5M82UJEUU7B7l
5mps/Lh4SVSTdevhV6nZrBVxmTf3u2ZpFNzOc8IOQzwNiHrwL1zl7/8rGwlx61Gy
VBHWy3L+NbXu2nZxLLic/JAOAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrs4ChV
yITYKIcsdZFMpzzWkh3rMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF
MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3
TDhkNjlnX01FcDVoX2I2akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYAKEqtLy8ywNync4L6S7VcnXBCkiU3U8PuZRML+3WrP3OGy90Z5uM
7O2Zjxidyri6Y6r6QYdnxKwQetsUqA6FB5c5kaV7+2Ltr3+yEbnRnAodVj48dxJB
c3k22SluTXPHJ+VxO2D6ujhBIcBNb1maIT7znx0MEKqEvokuQAo9eYyA1Z7kCTVW
P3mYdgw0vdG35rK08tc1gQIJzruECoh0zDaeuMk8hMmQ0ZSTIW41iB3FhlX0NFDG
pgaM2oKXqcjzs1SvxIT4QdmU5VXeN1QWLLkFeAK7uOBszMr64g6AHmJ38+X7z4m2
30lZzM2/Wn5CLy8p8Z45i6mgPdBFl8CR
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:46 2025 by rpki-client