This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          srtFmfaGEDPv4qP4u6SjwCQTWxSVtiNOfZiMXlqnDF8=
Subject key identifier:   FD:77:5C:AF:84:B6:24:40:E0:03:0A:00:37:94:13:85:77:D3:A4:F9
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       08BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          08AE
Signing time:             Sat 06 Dec 2025 19:39:31 +0000
Manifest this update:     Sat 06 Dec 2025 19:39:31 +0000
Manifest next update:     Sat 13 Dec 2025 19:39:31 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: igrAZfj03ZCIndtaPsNUvKvni5N7pyhPAvIUkJ5eWMs=)
                          2: 097FE948B5D411F0B0C6A940C4F9AE02.roa (hash: KP2R1m2iHAsNa4Z3YCVwK/8wK6Mg0zZi0OmDMYURiVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Dec  6 19:39:31 2025 GMT
            Not After : Dec 13 19:39:31 2025 GMT
        Subject: CN=69348673-ac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:1c:2d:e4:52:da:98:1e:ac:3e:a9:16:1c:
                    56:d8:e1:66:fa:27:a4:19:08:c4:ee:f9:0d:5b:4d:
                    71:5b:1d:d3:3f:88:03:b6:a8:ba:c9:90:c8:2c:33:
                    30:cd:9b:8a:ed:8b:bd:ae:f6:9a:99:6a:77:15:1c:
                    0d:e9:f8:55:91:54:ed:79:df:c0:d9:a2:2c:b3:a6:
                    bc:39:de:87:48:e9:a1:12:4f:aa:6a:40:43:f5:c9:
                    bf:4c:b7:fb:40:d3:14:f5:b0:9e:53:b2:4c:b3:31:
                    80:39:12:86:50:eb:95:41:89:85:fa:99:50:07:5f:
                    5d:0d:eb:24:42:06:02:ec:e2:4a:61:e1:76:b8:17:
                    fa:bb:18:d3:a3:a2:73:7a:d0:03:4d:61:36:55:a4:
                    cf:ea:ed:24:fb:86:e4:bb:3d:6f:f4:6a:2e:c6:b2:
                    5a:c2:52:af:11:cf:27:23:db:f4:9b:29:c5:70:b8:
                    a2:3d:13:00:d5:3a:cc:8d:fb:61:d3:e7:0b:b6:8c:
                    58:9e:98:36:da:1f:1a:2c:d6:80:3a:05:bd:b5:09:
                    48:fe:2e:5a:d5:27:50:6f:37:7a:38:c4:41:0c:28:
                    ee:f8:ff:e8:5b:1d:56:c6:ec:0d:3b:b1:96:88:70:
                    18:fa:b1:cf:8d:f1:d4:03:9a:8f:33:4d:19:8f:26:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:5C:AF:84:B6:24:40:E0:03:0A:00:37:94:13:85:77:D3:A4:F9
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cf:08:ef:77:6f:70:e5:47:1b:b1:6a:33:42:49:7e:4f:c8:
         de:f3:39:87:e7:f4:70:4a:d3:d8:27:fd:fc:23:b4:58:88:1f:
         08:9c:c3:20:f2:f0:ef:c7:5c:2d:bf:89:1e:f5:8b:2b:48:b4:
         0b:90:ef:3d:be:39:f9:b4:63:ab:8a:64:8c:69:ce:0e:7d:45:
         b2:ba:f4:1b:9e:cb:51:e6:95:66:40:86:a0:af:fe:c1:4b:37:
         2f:25:89:54:0d:f7:08:40:44:fe:74:27:a0:b7:43:0f:a0:f5:
         d4:cb:45:80:58:e7:6f:37:95:7e:fe:83:6f:1f:19:e1:d6:82:
         71:21:07:6f:ff:cc:a8:73:e2:44:ee:fc:5e:d5:b0:68:1a:4b:
         62:72:aa:59:f5:d4:95:ca:6c:5b:9f:6f:e1:24:80:8d:45:87:
         ce:17:8e:dc:0f:49:42:4b:22:a1:70:b4:d8:d7:8d:cc:49:d5:
         d4:f6:05:4d:43:09:ef:a1:c2:cf:a4:93:76:aa:09:96:0f:41:
         e1:0b:b4:48:6a:b2:a4:b0:98:71:f3:f1:52:57:15:04:c7:3f:
         3e:b4:94:1c:23:ec:62:54:3a:0b:06:30:50:00:68:fb:dc:34:
         c8:19:a5:b6:44:b2:47:86:6c:1a:4e:fb:f6:d8:20:fd:5e:67:
         f4:17:36:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2
OTQyNDE2RDEwHhcNMjUxMjA2MTkzOTMxWhcNMjUxMjEzMTkzOTMxWjAYMRYwFAYD
VQQDEw02OTM0ODY3My1hYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpUcLeRS2pgerD6pFhxW2OFm+iekGQjE7vkNW01xWx3TP4gDtqi6yZDILDMw
zZuK7Yu9rvaamWp3FRwN6fhVkVTted/A2aIss6a8Od6HSOmhEk+qakBD9cm/TLf7
QNMU9bCeU7JMszGAORKGUOuVQYmF+plQB19dDeskQgYC7OJKYeF2uBf6uxjTo6Jz
etADTWE2VaTP6u0k+4bkuz1v9GouxrJawlKvEc8nI9v0mynFcLiiPRMA1TrMjfth
0+cLtoxYnpg22h8aLNaAOgW9tQlI/i5a1SdQbzd6OMRBDCju+P/oWx1WxuwNO7GW
iHAY+rHPjfHUA5qPM00ZjyYCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP13XK+E
tiRA4AMKADeUE4V306T5MB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND
OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH
M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTzwjvd29w5UcbsWozQkl+T8je8zmH5/RwStPYJ/38I7RYiB8InMMg
8vDvx1wtv4ke9YsrSLQLkO89vjn5tGOrimSMac4OfUWyuvQbnstR5pVmQIagr/7B
SzcvJYlUDfcIQET+dCegt0MPoPXUy0WAWOdvN5V+/oNvHxnh1oJxIQdv/8yoc+JE
7vxe1bBoGkticqpZ9dSVymxbn2/hJICNRYfOF47cD0lCSyKhcLTY143MSdXU9gVN
QwnvocLPpJN2qgmWD0HhC7RIarKksJhx8/FSVxUExz8+tJQcI+xiVDoLBjBQAGj7
3DTIGaW2RLJHhmwaTvv22CD9Xmf0FzbN
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:47 2025 by rpki-client