This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File:                     bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier:          7vEfMIMJxZ43tto9KzKd6wv8Dr3TrrSLdpYr2iHXv8A=
Subject key identifier:   95:6C:A3:54:5B:63:38:A5:4E:5C:13:A9:0F:7B:77:E1:B4:F3:25:B6
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       0A9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number:          0A7A
Signing time:             Sat 06 Dec 2025 18:51:16 +0000
Manifest this update:     Sat 06 Dec 2025 18:51:15 +0000
Manifest next update:     Sat 13 Dec 2025 18:51:15 +0000
Files and hashes:         1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: AEKqL4diHeBPSOrosYCmdgxZ2l3pA3lZ319O3CdGvms=)
                          2: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: yu7Gzab+ZfqH+4m4+3KIWb8qWAN7g8OtQCUYR4Hw6Qw=)
                          3: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: R50vxZrWUTgOZOulbAeHkJh7/C1wukAfa8pX0j0danc=)
                          4: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: uBoNIMKOZ7mdZtPmDt522sQeNo1Hui8N7OHysFbsQzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2715 (0xa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: Dec  6 18:51:15 2025 GMT
            Not After : Dec 13 18:51:15 2025 GMT
        Subject: CN=69347b24-b239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:c7:43:7d:35:ba:1c:a8:16:b8:67:b7:94:
                    c5:56:e4:14:d1:1a:45:ed:bb:ea:f2:d3:df:28:a7:
                    d1:82:98:5b:c6:ae:1d:8d:a1:c1:a6:f8:32:68:74:
                    36:51:4b:bf:f3:19:b4:8a:e2:24:16:fd:cc:3a:63:
                    78:c6:9f:fd:a4:db:a1:db:82:db:88:d1:57:18:69:
                    c9:28:35:cf:02:15:21:30:ae:3a:fd:48:d3:a0:2b:
                    28:73:17:84:cc:cd:de:8e:52:be:42:e3:1f:e7:f4:
                    d5:cc:e9:51:82:d4:0d:fc:b7:12:65:75:09:25:b1:
                    7a:55:9b:27:21:15:65:38:2e:cc:01:1c:08:a5:d2:
                    f0:18:08:10:25:59:5b:40:09:83:4a:a2:4e:19:20:
                    67:78:e7:65:bd:91:8b:ca:32:b3:aa:fd:6e:07:00:
                    80:8b:3e:16:00:69:5c:34:57:96:be:e4:cf:37:0d:
                    b1:56:6a:f6:29:40:71:28:50:12:2a:89:c6:a1:24:
                    56:2d:1d:63:56:b2:9f:46:73:13:fb:2e:dd:6f:29:
                    b8:20:7e:54:a3:2e:cf:92:65:18:c4:6a:7b:10:ac:
                    db:29:f1:f2:7f:53:32:8e:19:85:c1:e9:24:59:f6:
                    46:e7:b8:6c:1b:3e:e0:a3:75:12:bf:40:c9:8a:e8:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6C:A3:54:5B:63:38:A5:4E:5C:13:A9:0F:7B:77:E1:B4:F3:25:B6
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2f:46:4a:97:24:71:dc:35:38:d7:d5:29:f0:fb:2f:08:a5:
         ea:f5:bd:b9:84:bb:2b:98:08:2e:4f:5d:7c:5d:87:99:04:79:
         03:9b:bc:43:21:34:ef:ba:8e:7b:f1:9d:85:3f:13:6b:57:03:
         c9:6f:0e:c7:78:25:e7:fc:f5:81:a4:19:30:09:46:b9:7a:0c:
         54:5e:90:ac:a9:82:67:cb:93:58:8a:36:ed:01:2a:ae:c4:17:
         45:84:c4:ea:b2:df:a1:a8:68:88:48:ac:91:96:cb:f2:cc:13:
         c4:76:ab:1f:15:18:f9:ab:3c:e0:73:44:0e:1f:74:13:62:74:
         40:ef:f4:0d:6d:53:f3:52:b8:a5:f5:d5:fc:47:df:cd:77:67:
         49:1e:3a:af:74:2b:40:ec:73:f6:91:2a:89:4e:cf:bf:46:f2:
         a8:59:e9:c8:91:ef:6e:d6:d1:54:d2:2a:2a:1f:9a:9c:e7:2e:
         c4:05:09:f7:5f:b6:e3:3f:f0:63:6c:f2:48:5e:85:22:06:55:
         a1:d9:de:9d:1b:98:cd:8d:69:5b:5d:f1:21:3d:37:11:a4:c1:
         89:8e:0c:ba:b6:ca:48:7c:e3:1d:d0:18:35:2b:36:82:fe:53:
         d2:95:3c:02:b0:48:21:3a:93:db:0d:07:b1:8f:00:31:7c:61:
         9a:b4:f9:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4
MkNGNkE1QjMwHhcNMjUxMjA2MTg1MTE1WhcNMjUxMjEzMTg1MTE1WjAYMRYwFAYD
VQQDEw02OTM0N2IyNC1iMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQbHQ301uhyoFrhnt5TFVuQU0RpF7bvq8tPfKKfRgphbxq4djaHBpvgyaHQ2
UUu/8xm0iuIkFv3MOmN4xp/9pNuh24LbiNFXGGnJKDXPAhUhMK46/UjToCsocxeE
zM3ejlK+QuMf5/TVzOlRgtQN/LcSZXUJJbF6VZsnIRVlOC7MARwIpdLwGAgQJVlb
QAmDSqJOGSBneOdlvZGLyjKzqv1uBwCAiz4WAGlcNFeWvuTPNw2xVmr2KUBxKFAS
KonGoSRWLR1jVrKfRnMT+y7dbym4IH5Uoy7PkmUYxGp7EKzbKfHyf1MyjhmFwekk
WfZG57hsGz7go3USv0DJiuinrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVso1Rb
YzilTlwTqQ97d+G08yW2MB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz
QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzM0Qy9BNzMyMzVFQzczQzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2
TXRQSTI3ODZ6RUNDejJwYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfL0ZKlyRx3DU419Up8PsvCKXq9b25hLsrmAguT118XYeZBHkDm7xD
ITTvuo578Z2FPxNrVwPJbw7HeCXn/PWBpBkwCUa5egxUXpCsqYJny5NYijbtASqu
xBdFhMTqst+hqGiISKyRlsvyzBPEdqsfFRj5qzzgc0QOH3QTYnRA7/QNbVPzUril
9dX8R9/Nd2dJHjqvdCtA7HP2kSqJTs+/RvKoWenIke9u1tFU0ioqH5qc5y7EBQn3
X7bjP/BjbPJIXoUiBlWh2d6dG5jNjWlbXfEhPTcRpMGJjgy6tspIfOMd0Bg1KzaC
/lPSlTwCsEghOpPbDQexjwAxfGGatPk+
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:13:30 2025 by rpki-client