This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          XDzlcNkHE8/Yc9I+0S0LrjRkjP4Y5Ha73+AxWrXcb/o=
Subject key identifier:   FD:45:2B:99:C4:80:63:26:49:E0:4D:BC:F2:A1:34:A0:58:CF:CC:F3
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       041C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          040C
Signing time:             Sat 06 Dec 2025 23:05:04 +0000
Manifest this update:     Sat 06 Dec 2025 23:05:04 +0000
Manifest next update:     Sat 13 Dec 2025 23:05:04 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: o5oT+ySK1kVOm83yDEA9t75To54lAl8kFzW1Mk+9wow=)
                          2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: FoCE53zxIc9RGDT20cSl66HA963RFqLllbD6isI2Eks=)
                          3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: 8EZQM/G5p946FK5IAxG3P6xewk8qoFsvyNghIhRO4OU=)
                          4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: LDUnyOdS9OamILyV+DlZlg+xzQGvjMOiRA/W3kxK9fM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Dec  6 23:05:04 2025 GMT
            Not After : Dec 13 23:05:04 2025 GMT
        Subject: CN=6934b6a0-4752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:b3:6f:58:96:a9:77:3f:f2:84:e8:95:47:
                    09:18:b3:39:d1:a0:7f:ad:0e:cb:57:3e:b7:a7:4c:
                    63:2f:14:3f:66:ce:76:85:ad:8c:92:c6:f2:39:38:
                    bd:2c:f7:1b:03:86:61:11:8f:fd:70:98:ee:fd:87:
                    cd:c7:5a:e4:54:af:3b:a5:9c:37:fe:2a:46:25:a7:
                    88:ca:98:b9:a2:4b:3d:15:5b:8e:44:fb:6c:ba:c0:
                    eb:34:57:5a:57:cf:b5:47:a7:e7:fa:72:3c:44:c6:
                    4f:78:50:82:cf:56:6f:86:f9:fe:0e:0d:a9:e7:24:
                    41:21:dc:3a:21:43:5c:be:74:44:7a:6a:44:1b:1b:
                    1f:63:71:71:e5:22:45:58:61:0e:43:bd:1f:51:c1:
                    f7:d2:6c:37:b9:50:c8:be:0a:71:a5:3b:d1:31:51:
                    ab:fb:5c:a8:24:56:91:47:2d:ba:89:f2:65:67:3a:
                    b6:69:d9:b3:3c:c9:e8:37:20:bc:68:a0:b7:40:ac:
                    9e:a7:55:50:2e:a6:47:ab:ee:73:c7:85:9d:7a:ed:
                    60:02:30:b6:a0:3b:bc:fa:fa:9c:58:98:a3:0b:17:
                    e7:a5:fc:40:bb:78:87:ee:44:f3:4c:5e:d8:e8:1b:
                    f6:91:75:ea:0a:52:b2:fe:e1:6b:a2:fd:e0:19:a3:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:45:2B:99:C4:80:63:26:49:E0:4D:BC:F2:A1:34:A0:58:CF:CC:F3
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:52:8c:b5:61:e8:d5:fa:10:f3:ba:fc:6f:d4:97:69:82:c9:
         24:0f:e5:8e:f8:f7:55:12:d5:eb:96:ef:7f:1c:1c:5f:db:27:
         01:1e:01:67:bd:b0:56:01:43:72:95:57:7a:5b:a6:51:da:f1:
         ee:73:17:0f:bc:0c:03:77:e1:59:65:b7:22:c9:ca:93:49:be:
         81:42:fc:03:bb:62:7c:1a:06:60:f3:dc:10:ae:54:de:e2:b5:
         97:5d:75:b8:70:0d:95:61:bd:13:55:95:54:e5:00:dc:52:0f:
         74:b2:44:49:ce:6e:2a:ca:53:b2:55:13:d3:bf:10:54:5f:06:
         bb:33:27:5e:50:58:21:9f:65:cf:1e:a6:b3:33:10:d2:2f:62:
         63:63:b0:33:6e:d5:af:e9:22:f7:8c:99:9c:88:43:c2:4d:11:
         6d:fc:89:51:03:12:04:bc:50:a1:28:39:53:c8:b3:1e:ca:30:
         b7:51:fe:05:f2:eb:5e:46:54:1b:1a:c7:83:19:85:c0:37:1d:
         6b:5f:97:b6:22:f7:ae:83:59:8a:a9:ec:75:c0:d7:66:d8:9c:
         44:7d:ce:1d:6f:13:9b:f8:02:97:50:68:f3:2c:7f:11:9a:9a:
         bb:9b:9b:fe:02:27:66:8c:74:40:dd:98:f5:e0:87:34:6b:ef:
         85:74:84:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw
N0ZFQzUzRkIwHhcNMjUxMjA2MjMwNTA0WhcNMjUxMjEzMjMwNTA0WjAYMRYwFAYD
VQQDEw02OTM0YjZhMC00NzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFezb1iWqXc/8oTolUcJGLM50aB/rQ7LVz63p0xjLxQ/Zs52ha2MksbyOTi9
LPcbA4ZhEY/9cJju/YfNx1rkVK87pZw3/ipGJaeIypi5oks9FVuORPtsusDrNFda
V8+1R6fn+nI8RMZPeFCCz1Zvhvn+Dg2p5yRBIdw6IUNcvnREempEGxsfY3Fx5SJF
WGEOQ70fUcH30mw3uVDIvgpxpTvRMVGr+1yoJFaRRy26ifJlZzq2admzPMnoNyC8
aKC3QKyep1VQLqZHq+5zx4Wdeu1gAjC2oDu8+vqcWJijCxfnpfxAu3iH7kTzTF7Y
6Bv2kXXqClKy/uFrov3gGaPJdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1FK5nE
gGMmSeBNvPKhNKBYz8zzMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2
MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy
QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWUoy1YejV+hDzuvxv1JdpgskkD+WO+PdVEtXrlu9/HBxf2ycBHgFn
vbBWAUNylVd6W6ZR2vHucxcPvAwDd+FZZbciycqTSb6BQvwDu2J8GgZg89wQrlTe
4rWXXXW4cA2VYb0TVZVU5QDcUg90skRJzm4qylOyVRPTvxBUXwa7MydeUFghn2XP
HqazMxDSL2JjY7AzbtWv6SL3jJmciEPCTRFt/IlRAxIEvFChKDlTyLMeyjC3Uf4F
8uteRlQbGseDGYXANx1rX5e2Iveug1mKqex1wNdm2JxEfc4dbxOb+AKXUGjzLH8R
mpq7m5v+AidmjHRA3Zj14Ic0a++FdIS8
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:48:03 2025 by rpki-client