This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File:                     B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier:          Lsm04GOA1v/SddiKRu2WJCKjPTBnMbzwFVjJBde6w8c=
Subject key identifier:   98:D6:EB:AD:0E:02:C8:47:B7:8A:26:25:E4:9D:FE:76:A5:D8:E4:59
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       4FD6F2142E70B40B6707976B055098FDD215D9A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number:          06A1
Signing time:             Sat 06 Dec 2025 19:26:30 +0000
Manifest this update:     Sat 06 Dec 2025 19:21:30 +0000
Manifest next update:     Sun 07 Dec 2025 19:43:30 +0000
Files and hashes:         1: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: ZoLzi5Xd5utb1AI63IXWGz+aVO82OnCDuPInrqLocDM=)
                          2: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
                          3: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
                          4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
                          5: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
                          6: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=)
                          7: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: 39i/GzcCnu/c4KG0BR9NEa4ijHr5VG//gK64fYnWvCA=)
                          8: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d6:f2:14:2e:70:b4:0b:67:07:97:6b:05:50:98:fd:d2:15:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Dec  6 19:21:30 2025 GMT
            Not After : Dec  7 19:43:30 2025 GMT
        Subject: CN=98D6EBAD0E02C847B78A2625E49DFE76A5D8E459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:69:94:5a:4d:e4:49:dd:2d:0f:1e:3a:63:
                    8a:19:78:4a:bc:7f:b8:e7:36:67:4b:ff:fa:f4:3c:
                    c0:3c:0b:8e:38:75:b5:f5:f5:88:ef:02:76:82:25:
                    39:9f:2c:fb:74:90:d5:b0:32:e2:d0:44:46:25:91:
                    fa:b7:48:b7:6b:9e:8d:8c:15:6f:b7:22:34:43:97:
                    e4:8e:30:1c:d0:e6:20:f7:21:a8:27:f9:a9:4c:fe:
                    28:27:88:46:24:cd:52:9b:c1:e8:ab:58:c8:46:2f:
                    c5:cc:52:39:a5:60:6b:55:f4:ad:87:a6:9e:df:d9:
                    27:d1:ae:76:85:50:b9:98:99:ab:80:34:92:93:91:
                    d3:e0:1c:fa:19:19:aa:f5:ad:2f:89:5c:f0:6d:ea:
                    60:ee:a9:a7:ca:70:18:aa:b3:23:4d:bf:29:e7:bd:
                    2a:33:bd:9d:dc:2c:50:6c:2d:e5:32:28:a5:53:75:
                    31:c6:5d:7e:17:34:df:cb:b6:db:07:b3:9a:2a:9f:
                    d3:9c:bb:71:22:e2:42:9f:bf:0e:d4:2c:9e:b3:e6:
                    df:37:30:f1:cc:75:27:be:c3:31:64:7c:2a:94:87:
                    80:52:33:c6:b9:d3:fc:b7:31:4c:05:3f:47:55:11:
                    77:47:70:d7:85:30:7f:fc:96:da:5b:72:c3:32:18:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:EB:AD:0E:02:C8:47:B7:8A:26:25:E4:9D:FE:76:A5:D8:E4:59
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:dc:7d:0a:80:f5:83:be:dd:9f:de:4d:47:b0:cd:de:71:dc:
         2c:1d:c6:08:e4:83:f5:d4:7d:a8:c1:91:54:75:67:ae:18:04:
         9e:da:ee:a6:b6:60:53:39:ed:2d:37:ea:1b:1c:da:11:c6:cb:
         c6:ad:eb:07:13:96:4f:1c:a4:9c:f9:64:81:36:6e:31:1e:80:
         5d:e9:4f:7f:6a:ba:4a:6e:f3:f3:2c:b4:e4:e5:fb:24:a9:6e:
         2a:62:df:a4:c2:f8:60:40:5d:9d:10:8c:29:8c:a0:c4:d5:e0:
         0e:a3:85:43:96:2d:51:3f:56:35:c3:11:5d:0e:46:ec:14:95:
         db:df:51:c3:a1:3e:fd:8b:4c:85:2b:3d:01:76:3e:da:36:99:
         ad:77:ad:4a:6b:7c:b4:b7:86:d1:fc:2e:3d:e0:39:9e:45:e1:
         ef:25:b6:9b:fc:1b:e7:7e:bf:a0:4e:31:64:eb:4a:78:d4:0d:
         54:88:87:36:a4:59:98:ab:80:c9:dc:6e:16:4c:61:61:4b:b5:
         e8:7b:72:51:d8:cd:bb:cd:3f:e6:c0:05:47:06:57:95:54:48:
         58:7c:eb:19:cc:56:2a:50:e5:51:bd:20:a6:c3:db:ac:fa:5a:
         26:34:99:de:fd:9b:e9:2b:14:3d:ae:99:66:bd:a1:60:7c:c3:
         20:53:10:b1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUT9byFC5wtAtnB5drBVCY/dIV2aAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3
RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI1MTIwNjE5MjEzMFoX
DTI1MTIwNzE5NDMzMFowMzExMC8GA1UEAxMoOThENkVCQUQwRTAyQzg0N0I3OEEy
NjI1RTQ5REZFNzZBNUQ4RTQ1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvCaZRaTeRJ3S0PHjpjihl4Srx/uOc2Z0v/+vQ8wDwLjjh1tfX1iO8CdoIl
OZ8s+3SQ1bAy4tBERiWR+rdIt2uejYwVb7ciNEOX5I4wHNDmIPchqCf5qUz+KCeI
RiTNUpvB6KtYyEYvxcxSOaVga1X0rYemnt/ZJ9GudoVQuZiZq4A0kpOR0+Ac+hkZ
qvWtL4lc8G3qYO6pp8pwGKqzI02/Kee9KjO9ndwsUGwt5TIopVN1McZdfhc038u2
2wezmiqf05y7cSLiQp+/DtQsnrPm3zcw8cx1J77DMWR8KpSHgFIzxrnT/LcxTAU/
R1URd0dw14Uwf/yW2ltywzIYBLkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSY1uut
DgLIR7eKJiXknf52pdjkWTAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb
bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5
OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5
VUo0OUtYQjhYNFcxOXIyMjguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvMy9CMThGOTg5OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZG
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAk9x9CoD1g77dn95NR7DN3nHcLB3GCOSD9dR9qMGRVHVnrhgE
ntruprZgUzntLTfqGxzaEcbLxq3rBxOWTxyknPlkgTZuMR6AXelPf2q6Sm7z8yy0
5OX7JKluKmLfpML4YEBdnRCMKYygxNXgDqOFQ5YtUT9WNcMRXQ5G7BSV299Rw6E+
/YtMhSs9AXY+2jaZrXetSmt8tLeG0fwuPeA5nkXh7yW2m/wb536/oE4xZOtKeNQN
VIiHNqRZmKuAydxuFkxhYUu16HtyUdjNu80/5sAFRwZXlVRIWHzrGcxWKlDlUb0g
psPbrPpaJjSZ3v2b6SsUPa6ZZr2hYHzDIFMQsQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:25:56 2025 by rpki-client