This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          CAyWMnUb4tuhuYcuU7ecZHc1nBCBvIIykWNiuriBtMU=
Subject key identifier:   A8:C5:F8:0B:B2:E8:64:40:BB:CE:00:C3:0D:8A:90:B4:BE:CC:8A:A7
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       1736892A410A3731FC9ED68DFB9CE87C3A9549C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          03D4
Signing time:             Sat 06 Dec 2025 07:35:19 +0000
Manifest this update:     Sat 06 Dec 2025 07:30:19 +0000
Manifest next update:     Sun 07 Dec 2025 08:47:19 +0000
Files and hashes:         1: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
                          2: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: z4cgiTLBFCzuAxlYJ8b4cZYk4csVyCgChVk+HRe6nkc=)
                          3: 3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa (hash: G2Zoq8FyHmareWmxTdUUlZYsXury5Z4QqjB48I3Qp9c=)
                          4: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: iePGe9T2LA42zdlsMC0OBhMqCfwBJ5LDY/yEOVKS4Ac=)
                          5: 3130332e3233382e3133302e302f32342d3234203d3e2039333034.roa (hash: VxvWKIapnz/NHAaRWVjdN31at45PwCfti5amyZ3Xs/Y=)
                          6: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
                          7: 34332e3235352e38312e302f32342d3234203d3e20313531393634.roa (hash: 4e0hnp+mBksFQSBkEEMhLS8Zc6XMB5AlAB7ew9DvGO8=)
                          8: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: R06pByin/m/phSrNQN6fLr1e43axG1JDp2GOwtmPcDQ=)
                          9: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: 6TVtRjMo6NdmFhAHDl8M0r+4lRhfrCtY1qBQoykIxG0=)
                          10: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
                          11: 3130332e3233382e3133312e302f32342d3234203d3e2039333034.roa (hash: xJHD6oJOmKsdm6y2bTs9H7Pd88grt6jIjKGTOKL3muY=)
                          12: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
                          13: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: 3XBxA+HuJWdSueJFSLvSDWfHwlrm0e9fb9EGVWHwsCU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:36:89:2a:41:0a:37:31:fc:9e:d6:8d:fb:9c:e8:7c:3a:95:49:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Dec  6 07:30:19 2025 GMT
            Not After : Dec  7 08:47:19 2025 GMT
        Subject: CN=A8C5F80BB2E86440BBCE00C30D8A90B4BECC8AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:5c:71:cc:aa:41:70:d5:3d:b5:41:32:aa:
                    4f:f4:ae:6a:62:72:ce:6e:a0:00:1d:03:8b:8b:1c:
                    97:90:04:af:19:40:ee:95:8f:47:90:36:c7:a3:56:
                    03:7a:d7:41:ab:c9:62:b2:41:e3:7e:12:da:93:58:
                    cd:9f:e0:11:f1:71:45:40:5f:43:2b:28:40:8c:8d:
                    8f:fc:cc:bc:49:24:c0:e4:f6:d9:2a:b4:ba:30:4b:
                    74:f2:6d:f8:35:8b:ee:28:13:ae:ae:a6:70:9b:36:
                    00:ff:76:a4:48:9b:8f:41:96:d9:cf:59:92:e6:ea:
                    22:6b:b9:7f:d3:ea:51:d4:ec:80:32:35:7c:00:6b:
                    6b:b2:af:f6:3d:99:b9:70:ec:f6:a9:83:82:ee:93:
                    9a:7e:31:2a:10:8a:50:79:60:56:74:4d:f7:d4:45:
                    8f:9b:03:f2:ac:b4:b9:4f:70:ca:b3:27:e3:db:68:
                    1d:2e:cb:b4:0a:e0:53:36:92:c0:b2:c0:5c:6b:dd:
                    a9:64:47:e2:2c:94:1e:83:37:47:8a:8e:96:94:df:
                    9d:58:8a:a7:17:55:81:70:9a:11:fc:a0:c3:23:ac:
                    d6:ca:cc:b9:7a:e1:4a:01:60:8d:0e:ab:a0:1e:25:
                    ce:cd:b0:24:3c:ca:06:0d:4b:e3:8d:a6:8c:49:2e:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C5:F8:0B:B2:E8:64:40:BB:CE:00:C3:0D:8A:90:B4:BE:CC:8A:A7
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:42:d2:18:17:50:37:2b:66:18:a5:b5:43:7b:f7:fa:71:0e:
         8a:51:1e:63:5a:90:85:2b:96:a0:40:97:4e:ba:1a:c2:71:5d:
         91:b3:7e:be:95:8d:b4:52:3f:83:19:ec:57:7c:e9:d8:a8:2b:
         2a:4e:55:c8:6e:5e:be:9b:dd:0a:db:52:21:80:27:2c:de:bf:
         38:1e:15:bf:89:af:d5:a0:e8:5e:2a:49:9f:ea:06:a7:b8:07:
         23:4a:25:67:b2:8f:77:5e:4b:df:ee:29:ea:7b:d4:d0:89:e8:
         6f:36:43:48:3b:72:97:ce:ee:3a:3b:44:0e:ac:61:3b:9e:d8:
         d9:f6:25:b9:16:4e:83:cd:82:04:a1:4b:48:36:29:8a:67:61:
         b7:45:2d:5b:71:9e:3f:d2:87:3d:ce:66:f1:bb:59:b3:cd:d1:
         82:e4:01:a0:6b:42:6c:29:28:2e:dc:d5:7e:8b:8c:6a:31:1d:
         3c:02:1a:de:3f:ca:76:f2:bd:a9:32:3b:6f:69:72:5a:08:de:
         0f:3c:15:f7:04:2d:67:e9:63:27:95:29:78:ec:1b:55:bd:4c:
         3d:f4:d1:d4:63:e1:cd:a7:93:31:92:65:b8:c3:84:d7:23:8e:
         7b:84:1d:08:a2:64:24:ee:e7:59:c3:b4:d8:f0:c5:b6:ea:1b:
         bc:d6:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:18 2025 by rpki-client