This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File:                     1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier:          kzbOHZDrpE28TqaTS6KiM7LxrPJWNODl9anU5o6n5vw=
Subject key identifier:   C6:30:94:95:BB:8A:3B:D6:AE:47:DD:4F:D6:BB:AD:A1:07:E9:E5:66
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer:       /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial:       07F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number:          07EB
Signing time:             Sat 06 Dec 2025 20:11:06 +0000
Manifest this update:     Sat 06 Dec 2025 20:11:05 +0000
Manifest next update:     Sat 13 Dec 2025 20:11:05 +0000
Files and hashes:         1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: VysqvYg5lSA8rM8mo2fPXb5O2G5G74AuC6EIAISVM7k=)
                          2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
        Validity
            Not Before: Dec  6 20:11:05 2025 GMT
            Not After : Dec 13 20:11:05 2025 GMT
        Subject: CN=69348dd9-54fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:81:a0:31:a3:b3:21:56:22:72:5e:0f:ba:
                    43:71:81:1c:45:0c:47:45:e8:7f:f9:59:94:7a:b3:
                    17:11:ce:7d:bd:87:03:45:fe:b1:2b:b2:ea:66:b7:
                    8d:dc:20:2c:a8:59:11:88:78:4a:a6:93:03:e9:ce:
                    57:d6:6a:eb:23:a7:df:52:01:b8:fd:d4:03:04:c7:
                    36:51:ee:7b:4f:26:44:e6:21:6f:f9:10:64:87:4f:
                    1d:dc:2d:1a:4f:b9:89:15:7e:46:60:ab:b2:c8:77:
                    a2:23:a0:17:44:8a:10:67:12:0c:3e:c3:7e:0b:31:
                    a6:75:69:f5:c1:e8:a6:44:29:96:20:f6:bf:a7:13:
                    85:61:05:fd:33:d2:42:09:6e:2d:15:fb:a3:f0:e9:
                    9e:28:75:c6:95:b6:04:cd:3e:4e:7d:2d:dd:b1:22:
                    de:d8:bd:65:34:49:a8:55:8c:b3:0b:39:1c:01:e5:
                    a8:8c:3a:0d:30:92:b9:63:07:1f:7e:0d:b0:8d:e9:
                    e9:28:ee:4e:f1:d5:29:d4:2a:31:ae:cc:a5:4a:3f:
                    79:49:a4:91:e5:be:c6:ce:72:1c:97:56:21:df:21:
                    5e:09:94:a3:46:c2:2d:cb:d2:bb:f3:0d:07:eb:8e:
                    9e:a2:c5:f5:6f:fe:ce:33:c0:ea:c0:53:65:f9:a9:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:94:95:BB:8A:3B:D6:AE:47:DD:4F:D6:BB:AD:A1:07:E9:E5:66
            X509v3 Authority Key Identifier:
                keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:b4:22:5e:b7:29:c0:e0:48:1b:dd:9d:09:53:84:08:5d:
         93:01:d6:c4:fc:1d:9c:eb:4d:84:58:30:23:4c:1a:12:c9:03:
         03:b4:fd:a7:d8:64:c1:fb:ba:bc:32:12:cd:00:ca:c5:59:78:
         a2:e9:c8:8c:b1:bd:d3:10:57:ca:d5:8b:82:1c:c2:45:24:bd:
         75:03:39:39:9e:62:c9:1a:d7:6f:21:fd:e9:42:e9:fb:27:67:
         58:79:78:7b:ce:dd:3d:b7:0e:26:90:81:6f:05:d7:08:69:42:
         0c:2c:60:34:08:50:5b:65:7d:88:91:92:27:83:e3:74:d0:fd:
         6a:19:91:43:1b:27:8b:4e:06:8d:eb:5e:64:fa:69:3b:74:ab:
         be:bc:d8:3b:55:6c:76:ad:24:05:19:7e:f6:53:78:d6:b9:8f:
         a1:88:89:a0:89:e0:fd:07:ea:62:2c:c4:e6:ac:86:e0:7e:a1:
         c5:0d:d6:08:55:40:06:42:f6:92:ef:cb:77:e5:6e:31:f2:fc:
         8b:dc:09:c7:b1:f7:23:89:a9:dc:3e:b7:d4:9c:94:93:d9:8d:
         0b:81:9d:e5:c5:c7:3b:26:e4:0d:b4:0e:3b:d9:38:1c:9c:ce:
         eb:d3:7c:45:84:ff:3b:97:63:f5:ac:bb:30:cc:55:e0:7f:64:
         02:3c:61:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1
Mzc1ODBBRjMwHhcNMjUxMjA2MjAxMTA1WhcNMjUxMjEzMjAxMTA1WjAYMRYwFAYD
VQQDEw02OTM0OGRkOS01NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4hSBoDGjsyFWInJeD7pDcYEcRQxHReh/+VmUerMXEc59vYcDRf6xK7LqZreN
3CAsqFkRiHhKppMD6c5X1mrrI6ffUgG4/dQDBMc2Ue57TyZE5iFv+RBkh08d3C0a
T7mJFX5GYKuyyHeiI6AXRIoQZxIMPsN+CzGmdWn1weimRCmWIPa/pxOFYQX9M9JC
CW4tFfuj8OmeKHXGlbYEzT5OfS3dsSLe2L1lNEmoVYyzCzkcAeWojDoNMJK5Ywcf
fg2wjenpKO5O8dUp1CoxrsylSj95SaSR5b7GznIcl1Yh3yFeCZSjRsIty9K78w0H
646eosX1b/7OM8DqwFNl+alRzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYwlJW7
ijvWrkfdT9a7raEH6eVmMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE
NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv
NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZK7QiXrcpwOBIG92dCVOECF2TAdbE/B2c602EWDAjTBoSyQMDtP2n
2GTB+7q8MhLNAMrFWXii6ciMsb3TEFfK1YuCHMJFJL11Azk5nmLJGtdvIf3pQun7
J2dYeXh7zt09tw4mkIFvBdcIaUIMLGA0CFBbZX2IkZIng+N00P1qGZFDGyeLTgaN
615k+mk7dKu+vNg7VWx2rSQFGX72U3jWuY+hiImgieD9B+piLMTmrIbgfqHFDdYI
VUAGQvaS78t35W4x8vyL3AnHsfcjiancPrfUnJST2Y0LgZ3lxcc7JuQNtA472Tgc
nM7r03xFhP87l2P1rLswzFXgf2QCPGGN
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:20 2025 by rpki-client