This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
File:                     6D_PTG_I1087arQlYG4rx3RtZkA.mft (raw, json)
Hash identifier:          TNTF6nZYbfuXiC/0xAZ3WhkaJIu6hYQyHnpqoBQ7M6I=
Subject key identifier:   F1:E8:C8:6A:7B:58:F5:C7:40:71:55:F2:9E:D4:58:FD:12:57:76:6D
Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40
Certificate issuer:       /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640
Certificate serial:       090F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
Manifest number:          08F7
Signing time:             Mon 22 Dec 2025 19:47:31 +0000
Manifest this update:     Mon 22 Dec 2025 19:47:31 +0000
Manifest next update:     Mon 29 Dec 2025 19:47:31 +0000
Files and hashes:         1: 6D_PTG_I1087arQlYG4rx3RtZkA.crl (hash: bR8gquO6VCTmQtkNLj45AcOPblZqWpeUYVJlaYqL2bk=)
                          2: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (hash: 4CecagCQt3OdfoRN6HOLa8I8WYd1LJl1W27o83DA8qE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9A5, serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640
        Validity
            Not Before: Dec 22 19:47:31 2025 GMT
            Not After : Dec 29 19:47:31 2025 GMT
        Subject: CN=6949a053-fec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:83:26:48:0c:0c:fb:02:9c:ba:86:ad:5c:
                    68:5f:5f:6c:cd:c8:6e:64:da:82:55:e8:b8:b9:73:
                    8a:0b:7e:51:e9:c1:02:45:e8:53:05:83:76:d2:b8:
                    bd:ff:b4:9b:1f:47:88:69:70:f1:83:da:3b:0c:88:
                    2c:5f:06:94:8e:b9:53:d5:63:08:80:e6:cb:07:79:
                    5d:11:4f:df:74:db:cb:4e:47:18:2a:44:65:bd:38:
                    b9:ea:3d:66:c9:21:3d:a6:38:4c:0f:35:fa:72:3a:
                    42:89:d9:d0:de:32:02:5e:02:90:e3:2f:5b:fa:39:
                    f8:88:fd:a4:b9:7b:48:ed:fb:1a:a5:52:af:f2:09:
                    aa:8f:89:bc:cc:ec:bb:b4:19:7d:d0:0d:59:6b:7b:
                    e7:4a:78:9b:e6:a1:79:63:6a:7e:2b:62:b9:bb:b9:
                    39:86:3b:ca:c9:89:07:10:0e:6f:c1:21:34:73:37:
                    21:a0:7d:1b:a8:c1:03:28:ab:15:be:de:98:c5:93:
                    02:fe:51:78:90:a5:fa:71:7b:b6:04:aa:78:f4:b8:
                    75:52:af:9c:88:94:48:de:fc:63:b1:79:22:bc:d5:
                    49:f9:8c:b4:8c:d3:14:c6:e9:3a:16:dc:ee:3b:14:
                    ac:93:c3:fc:0d:8c:50:34:1f:e5:eb:00:00:3d:2c:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:C8:6A:7B:58:F5:C7:40:71:55:F2:9E:D4:58:FD:12:57:76:6D
            X509v3 Authority Key Identifier:
                keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a3:76:9c:17:fe:ea:36:14:1a:5e:a7:5e:6d:16:cd:1d:a4:
         50:42:78:f8:68:07:f4:4c:78:f6:cf:42:66:2b:2b:06:f2:84:
         82:48:bc:fc:9a:8b:75:f5:60:c8:fa:b6:f7:95:7c:9b:9a:d8:
         47:03:8d:2e:a2:d2:38:d6:5c:6f:64:f9:cc:ab:0e:91:e6:32:
         37:0b:26:94:0e:ef:e2:d1:b4:ad:9b:21:f3:c8:8c:60:d9:f3:
         78:ca:52:68:ea:e7:76:3f:4f:f8:aa:6e:ac:fd:28:49:dc:3d:
         36:60:ef:0f:7e:80:e5:08:c4:a6:6f:63:c6:fb:b3:7c:24:18:
         14:27:42:45:c3:cd:30:24:0a:c9:e9:ce:31:69:31:f1:bb:f0:
         a2:35:4e:c0:50:21:02:c2:51:6b:95:af:83:84:97:69:52:81:
         ca:02:34:70:bd:f5:0f:f0:76:57:fc:8f:91:4e:38:b0:6b:ed:
         04:ea:8b:62:44:48:49:65:36:af:6f:b9:c5:18:5a:44:7e:29:
         d9:c4:4d:d7:77:ad:df:54:ef:f2:25:e0:09:4e:52:b1:b6:b0:
         3b:75:79:84:c9:6c:bf:40:f2:aa:4d:68:f4:10:fb:79:0e:c7:
         a4:c9:65:e5:d6:f4:0e:35:c7:2f:73:14:fb:06:48:60:78:dd:
         5e:47:79:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3
NzQ2RDY2NDAwHhcNMjUxMjIyMTk0NzMxWhcNMjUxMjI5MTk0NzMxWjAYMRYwFAYD
VQQDDA02OTQ5YTA1My1mZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcWDJkgMDPsCnLqGrVxoX19szchuZNqCVei4uXOKC35R6cECRehTBYN20ri9
/7SbH0eIaXDxg9o7DIgsXwaUjrlT1WMIgObLB3ldEU/fdNvLTkcYKkRlvTi56j1m
ySE9pjhMDzX6cjpCidnQ3jICXgKQ4y9b+jn4iP2kuXtI7fsapVKv8gmqj4m8zOy7
tBl90A1Za3vnSnib5qF5Y2p+K2K5u7k5hjvKyYkHEA5vwSE0czchoH0bqMEDKKsV
vt6YxZMC/lF4kKX6cXu2BKp49Lh1Uq+ciJRI3vxjsXkivNVJ+Yy0jNMUxuk6Ftzu
OxSsk8P8DYxQNB/l6wAAPSx76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHoyGp7
WPXHQHFV8p7UWP0SV3ZtMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0
RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzlBNS8wRTgyQzJFQ0M0RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEw
ODdhclFsWUc0cngzUnRaa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBto3acF/7qNhQaXqdebRbNHaRQQnj4aAf0THj2z0JmKysG8oSCSLz8
mot19WDI+rb3lXybmthHA40uotI41lxvZPnMqw6R5jI3CyaUDu/i0bStmyHzyIxg
2fN4ylJo6ud2P0/4qm6s/ShJ3D02YO8PfoDlCMSmb2PG+7N8JBgUJ0JFw80wJArJ
6c4xaTHxu/CiNU7AUCECwlFrla+DhJdpUoHKAjRwvfUP8HZX/I+RTjiwa+0E6oti
REhJZTavb7nFGFpEfinZxE3Xd63fVO/yJeAJTlKxtrA7dXmEyWy/QPKqTWj0EPt5
DsekyWXl1vQONccvcxT7BkhgeN1eR3ny
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:01:40 2025 by rpki-client