This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
File:                     FTce6iqi6n2s0NdWvSmFkgHlTSU.mft (raw, json)
Hash identifier:          Gsd8PpWSG4L4fteXF1hdvUrQz4ub3rjIvpSnDDyAMTE=
Subject key identifier:   AE:76:54:D7:73:D2:89:00:AF:F1:F9:E0:F4:2D:90:84:74:FF:07:A3
Authority key identifier: 15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
Certificate issuer:       /CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
Manifest number:          078E
Signing time:             Mon 22 Dec 2025 20:49:00 +0000
Manifest this update:     Mon 22 Dec 2025 20:48:59 +0000
Manifest next update:     Mon 29 Dec 2025 20:48:59 +0000
Files and hashes:         1: FTce6iqi6n2s0NdWvSmFkgHlTSU.crl (hash: 7/5zpXljGPSDarGxRUd9jDy53DNPVPGxoMt9+34b/Qk=)
                          2: 87BCB892503311EB85660C6AC4F9AE02.roa (hash: zI+rZCciSwNhMaNAWHVSvSbX7eFw9ZW6HDJ6g7ERB6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl
                          rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911018B, serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
        Validity
            Not Before: Dec 22 20:48:59 2025 GMT
            Not After : Dec 29 20:48:59 2025 GMT
        Subject: CN=6949aebb-c6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:c8:29:dc:51:bf:a6:6a:c3:4e:57:91:88:
                    cd:00:0c:14:05:e5:14:52:52:ec:ad:f7:f3:9a:21:
                    08:f2:ae:8a:d0:f2:1e:81:fb:ed:07:51:51:89:af:
                    02:ed:3c:14:ea:f0:57:21:0f:23:15:0d:80:5f:42:
                    14:da:86:cd:4f:75:45:64:2f:f8:16:8f:86:8a:91:
                    d0:e4:bc:ef:9d:5e:f0:51:8e:49:33:62:2f:68:ca:
                    cb:78:af:8b:46:37:d1:be:8b:f3:5a:17:ff:4e:ec:
                    ae:a3:df:0b:1c:2a:da:ca:89:01:88:ac:de:07:45:
                    5b:61:a4:5b:f1:c9:6c:d6:0c:26:11:be:b6:ca:e3:
                    5e:0d:2b:d3:aa:1d:f7:67:2e:41:2a:26:6a:f1:f7:
                    87:89:29:5e:ae:11:54:48:df:9d:ed:d8:1a:38:d5:
                    86:55:e0:2c:dc:6f:5a:9e:bf:bc:e4:2c:db:1d:b2:
                    5f:e9:f7:93:1e:14:17:f4:1b:fa:8f:df:90:4b:41:
                    6d:cc:31:fd:c9:bb:26:f1:5e:60:eb:37:c9:84:99:
                    63:d1:31:ff:0b:b3:a5:36:ed:fc:c0:44:69:6a:2a:
                    fc:4a:c5:a1:e6:ff:99:59:5c:35:ce:f0:63:2f:2a:
                    49:46:6b:4b:48:80:ae:8b:25:ac:08:e7:00:e2:03:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:76:54:D7:73:D2:89:00:AF:F1:F9:E0:F4:2D:90:84:74:FF:07:A3
            X509v3 Authority Key Identifier:
                keyid:15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:ad:1a:ba:8f:af:db:39:16:c8:52:56:90:8f:e3:9c:6e:
         09:53:98:2b:b4:88:18:05:dd:5e:11:c3:42:ab:08:24:8c:04:
         30:42:e0:e9:5a:b1:ef:16:dc:db:d2:67:73:4f:c8:cc:04:9e:
         e3:8b:eb:10:96:8f:ae:a7:b8:5b:bd:a5:c1:a4:ec:bd:1f:3d:
         d6:6e:61:47:c6:1e:b9:8b:f3:25:a2:f8:6b:62:0d:2e:cb:2c:
         4c:b4:1a:c2:e4:74:88:67:4a:b1:91:63:d2:f5:7f:b5:5b:ac:
         13:30:3f:6c:e9:6f:dd:98:82:ae:da:d3:c3:c0:69:89:8a:7e:
         c6:6a:1d:4d:ac:1a:32:15:dd:72:cd:ed:fa:36:04:20:93:e8:
         ed:78:9c:80:ba:3a:41:90:61:2a:42:4d:3c:bc:b6:a1:62:b0:
         82:ba:a1:08:e9:d4:b1:e7:96:fd:f5:e7:df:0c:e3:2a:dc:96:
         bc:90:c0:34:5e:6b:b0:c0:62:69:85:59:46:99:62:4a:f8:24:
         03:b1:13:19:f7:11:dd:a3:ef:6b:d9:72:19:79:8c:16:6b:c2:
         16:1d:90:5d:bf:33:1b:ce:ee:d6:9d:a0:0a:86:65:43:7f:a3:
         08:aa:4f:aa:06:c6:fd:de:ab:4b:28:e6:29:54:f9:46:a3:d7:
         46:49:5f:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTAxOEIxMTAvBgNVBAUTKDE1MzcxRUVBMkFBMkVBN0RBQ0QwRDc1NkJEMjk4NTky
MDFFNTREMjUwHhcNMjUxMjIyMjA0ODU5WhcNMjUxMjI5MjA0ODU5WjAYMRYwFAYD
VQQDDA02OTQ5YWViYi1jNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzOnIKdxRv6Zqw05XkYjNAAwUBeUUUlLsrffzmiEI8q6K0PIegfvtB1FRia8C
7TwU6vBXIQ8jFQ2AX0IU2obNT3VFZC/4Fo+GipHQ5LzvnV7wUY5JM2IvaMrLeK+L
RjfRvovzWhf/Tuyuo98LHCrayokBiKzeB0VbYaRb8cls1gwmEb62yuNeDSvTqh33
Zy5BKiZq8feHiSlerhFUSN+d7dgaONWGVeAs3G9anr+85CzbHbJf6feTHhQX9Bv6
j9+QS0FtzDH9ybsm8V5g6zfJhJlj0TH/C7OlNu38wERpair8SsWh5v+ZWVw1zvBj
LypJRmtLSICuiyWsCOcA4gM0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK52VNdz
0okAr/H54PQtkIR0/wejMB8GA1UdIwQYMBaAFBU3Huoqoup9rNDXVr0phZIB5U0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE4Qi8zQTA2MUE1QTM1
NDIxMUVCQTUzRkZCNDhDNEY5QUUwMi9GVGNlNmlxaTZuMnMwTmRXdlNtRmtnSGxU
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZUY2U2aXFpNm4yczBOZFd2U21Ga2dIbFRTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDE4Qi8zQTA2MUE1QTM1NDIxMUVCQTUzRkZCNDhDNEY5QUUwMi9GVGNlNmlxaTZu
MnMwTmRXdlNtRmtnSGxUU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBg7K0auo+v2zkWyFJWkI/jnG4JU5grtIgYBd1eEcNCqwgkjAQwQuDp
WrHvFtzb0mdzT8jMBJ7ji+sQlo+up7hbvaXBpOy9Hz3WbmFHxh65i/MlovhrYg0u
yyxMtBrC5HSIZ0qxkWPS9X+1W6wTMD9s6W/dmIKu2tPDwGmJin7Gah1NrBoyFd1y
ze36NgQgk+jteJyAujpBkGEqQk08vLahYrCCuqEI6dSx55b99effDOMq3Ja8kMA0
XmuwwGJphVlGmWJK+CQDsRMZ9xHdo+9r2XIZeYwWa8IWHZBdvzMbzu7WnaAKhmVD
f6MIqk+qBsb93qtLKOYpVPlGo9dGSV+5
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:47 2025 by rpki-client