This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
File:                     1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json)
Hash identifier:          0TsZsehrCBKHJvcdQ8t22oYulsW+W38LNeW0ujBqcWs=
Subject key identifier:   BF:B6:C4:69:6F:39:0C:1B:6F:A4:9E:A4:A6:89:89:B2:C2:54:F5:05
Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
Certificate issuer:       /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
Manifest number:          01DF
Signing time:             Sun 07 Dec 2025 01:12:34 +0000
Manifest this update:     Sun 07 Dec 2025 01:12:34 +0000
Manifest next update:     Sun 14 Dec 2025 01:12:33 +0000
Files and hashes:         1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: CDPEFFIHPFw34vOEnIOyUDmJYiwh3lTtpx7RUmXs9eI=)
                          2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
        Validity
            Not Before: Dec  7 01:12:34 2025 GMT
            Not After : Dec 14 01:12:33 2025 GMT
        Subject: CN=6934d482-8429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:b8:5f:03:3f:d3:26:32:bc:07:47:dc:47:
                    0d:db:51:61:b8:fd:76:9b:66:b3:99:a2:c1:c6:75:
                    88:b1:c5:a6:69:3f:14:bc:f0:f4:4e:90:e8:5e:12:
                    a4:15:60:db:05:52:94:12:a8:d9:76:84:33:ed:78:
                    4f:79:6c:a4:1a:7b:22:7c:94:df:cf:7d:a2:9f:53:
                    f5:c7:f8:56:b7:74:73:26:27:17:f7:89:a7:6e:35:
                    40:8c:04:75:af:3d:79:5b:81:6b:34:83:1b:d3:ea:
                    54:54:56:f5:d6:94:e5:42:2a:7a:b5:b1:4b:60:44:
                    d4:df:b5:c6:85:34:62:24:56:e7:53:64:62:25:74:
                    80:8f:44:ec:22:5b:cd:2a:23:0d:c8:04:98:9e:57:
                    3f:a1:db:46:b8:9e:39:52:d3:77:dc:31:87:33:c1:
                    e9:7c:c2:de:e2:3e:07:40:8d:75:0b:6d:08:2a:c0:
                    a1:99:96:d6:8b:7e:c6:d1:18:c3:73:63:71:b8:b7:
                    63:ba:71:44:20:59:15:4f:af:0e:63:b6:a8:4a:af:
                    40:83:8b:13:ab:b5:0d:ad:87:f3:eb:c8:25:d6:8d:
                    4c:f6:88:d3:11:74:33:59:7b:bf:58:d9:a9:d9:34:
                    8e:91:b1:6e:a7:fc:3b:d7:b0:cc:e5:c5:e5:c2:02:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:C4:69:6F:39:0C:1B:6F:A4:9E:A4:A6:89:89:B2:C2:54:F5:05
            X509v3 Authority Key Identifier:
                keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:b4:37:1d:dc:11:1e:6c:93:6b:d5:a4:f5:7a:fe:9b:fa:
         cd:ce:67:9e:ed:05:5d:e6:7b:38:02:f4:5f:c1:04:46:72:b6:
         5a:db:51:0a:38:5e:e0:8c:a8:c4:4d:c9:60:ac:22:91:21:a7:
         91:f8:3a:01:1d:e3:12:0a:6b:99:5c:06:d5:d5:99:8f:8b:0c:
         7e:51:5e:e8:11:73:19:c4:15:b9:55:d4:97:76:44:2e:48:58:
         42:18:4f:2b:6c:90:d2:70:6c:74:34:64:eb:9f:19:00:83:be:
         eb:6a:30:8f:67:bb:dc:10:b5:70:4d:8a:da:bf:f3:65:9c:b2:
         40:e4:0a:86:8f:27:00:ba:7b:cb:09:2d:5a:26:3a:0e:6c:63:
         03:6b:d5:fb:2d:cb:a4:c0:a0:3b:bb:92:25:27:25:65:0e:f3:
         2e:69:9f:b9:b1:23:b2:90:83:cb:4a:b6:83:11:2b:c2:e4:43:
         57:0b:24:62:3e:5a:66:19:4a:38:ed:6a:f0:bf:97:3b:1a:ce:
         e5:8c:8a:73:b8:c1:73:1e:85:ed:ec:84:ab:9a:82:0b:de:88:
         49:59:0d:4f:d2:ec:44:70:7e:f1:06:52:0c:62:5f:94:ca:47:
         59:83:6d:db:ae:80:c9:d1:fb:75:77:22:df:fe:f6:70:4d:0a:
         d7:b7:f6:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC
OUUxRkYxMDQwHhcNMjUxMjA3MDExMjM0WhcNMjUxMjE0MDExMjMzWjAYMRYwFAYD
VQQDEw02OTM0ZDQ4Mi04NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzO+4XwM/0yYyvAdH3EcN21FhuP12m2azmaLBxnWIscWmaT8UvPD0TpDoXhKk
FWDbBVKUEqjZdoQz7XhPeWykGnsifJTfz32in1P1x/hWt3RzJicX94mnbjVAjAR1
rz15W4FrNIMb0+pUVFb11pTlQip6tbFLYETU37XGhTRiJFbnU2RiJXSAj0TsIlvN
KiMNyASYnlc/odtGuJ45UtN33DGHM8HpfMLe4j4HQI11C20IKsChmZbWi37G0RjD
c2NxuLdjunFEIFkVT68OY7aoSq9Ag4sTq7UNrYfz68gl1o1M9ojTEXQzWXu/WNmp
2TSOkbFup/w717DM5cXlwgJbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+2xGlv
OQwbb6SepKaJibLCVPUFMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2
M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2
cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCejLQ3HdwRHmyTa9Wk9Xr+m/rNzmee7QVd5ns4AvRfwQRGcrZa21EK
OF7gjKjETclgrCKRIaeR+DoBHeMSCmuZXAbV1ZmPiwx+UV7oEXMZxBW5VdSXdkQu
SFhCGE8rbJDScGx0NGTrnxkAg77rajCPZ7vcELVwTYrav/NlnLJA5AqGjycAunvL
CS1aJjoObGMDa9X7LcukwKA7u5IlJyVlDvMuaZ+5sSOykIPLSraDESvC5ENXCyRi
PlpmGUo47Wrwv5c7Gs7ljIpzuMFzHoXt7ISrmoIL3ohJWQ1P0uxEcH7xBlIMYl+U
ykdZg23broDJ0ft1dyLf/vZwTQrXt/Yi
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:59:30 2025 by rpki-client