This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          8Sy0d+beFSBUnCow/KQL4dVPiEY+6cpeHDUHXTF8kcA=
Subject key identifier:   27:E6:E1:F1:BF:32:CE:C7:15:29:0F:CA:4D:80:98:29:7D:D3:CB:BD
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       0784
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          0775
Signing time:             Mon 22 Dec 2025 20:53:48 +0000
Manifest this update:     Mon 22 Dec 2025 20:53:48 +0000
Manifest next update:     Mon 29 Dec 2025 20:53:48 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: jtFuvapXqh0mNh1HOZsVrptsVsi8WuEpMGCjc2fyNhw=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: aKEDn4gwBFOr0qHCa0D/ICyIq2qd6Iu46+DUIcfdySk=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: Rw2CMDN4xPzS3sG5yg11LWQMXizRq5BPNEv+6nM9R1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Dec 22 20:53:48 2025 GMT
            Not After : Dec 29 20:53:48 2025 GMT
        Subject: CN=6949afdc-ca06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:8e:34:b4:de:d1:e1:ee:e0:3a:50:39:fd:
                    d2:7b:44:f0:14:f9:3e:34:c3:39:25:dd:a3:e6:e9:
                    64:c5:f3:2d:de:d1:44:7d:30:70:0d:5e:db:1c:41:
                    bb:84:05:e6:e4:da:b4:6a:8d:76:bd:60:9d:27:b5:
                    07:fc:38:be:0b:c6:db:dd:7d:fe:b4:35:df:b6:55:
                    aa:f6:38:a7:5e:eb:34:ab:21:48:46:32:89:ca:e6:
                    40:8d:3a:16:d4:cf:68:5b:b7:48:5a:29:37:7d:77:
                    de:c5:c8:3d:35:59:30:8a:15:a6:f6:62:b2:97:07:
                    73:85:8b:92:50:b4:64:3b:74:fa:ae:b7:9c:e8:fd:
                    eb:4f:9f:4f:a1:66:3f:39:6b:4b:32:4d:71:12:8c:
                    6d:bc:da:af:23:42:4d:48:4d:b8:e1:a3:04:eb:0b:
                    23:c4:c5:57:0c:ae:cf:2f:f5:9d:5a:aa:55:f8:5a:
                    bb:d1:57:cd:8a:5d:d0:af:8a:65:6d:61:f9:c3:3d:
                    7a:dc:fe:21:76:47:b6:d9:ef:b1:1b:10:2c:44:e3:
                    64:ab:14:91:f7:86:66:f7:c1:a2:e9:30:1c:76:fe:
                    0e:5e:d5:74:1f:88:e6:ed:64:37:c8:1a:a1:03:83:
                    89:16:61:fe:20:33:8f:cd:8d:41:7a:ca:dd:ca:74:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:E1:F1:BF:32:CE:C7:15:29:0F:CA:4D:80:98:29:7D:D3:CB:BD
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:a8:6e:6f:fb:b2:9e:ac:36:ab:47:59:b4:a2:bb:df:f1:9b:
         b7:62:c5:e5:4b:ae:83:c5:58:d5:4b:76:73:3d:71:3f:17:f6:
         97:6b:70:7c:93:80:a9:9b:c9:a2:35:88:59:5e:29:e6:57:f4:
         34:77:9a:67:89:50:1a:58:61:ff:bb:42:e1:ee:7f:1d:e6:90:
         c9:99:6d:6c:6f:36:12:c5:22:dd:b9:0d:db:10:16:2d:36:b2:
         e3:4e:02:13:98:9a:cf:f2:6e:fc:7e:cd:1c:ae:18:f2:4e:fe:
         3e:ab:e4:2d:ec:d9:51:2b:2c:33:74:e0:0e:4e:0a:7a:06:1d:
         4d:57:b3:08:7b:8c:0b:85:98:e9:61:28:d0:78:08:6f:34:c1:
         52:0c:84:39:d6:fe:05:bf:57:1f:a9:45:85:99:71:e4:5e:2c:
         ae:a1:cb:dd:7f:22:7b:87:e4:a1:77:15:ee:60:30:47:f5:82:
         54:92:4f:62:88:61:cc:33:e1:72:c5:a4:e0:39:d9:da:ed:bd:
         72:bf:80:af:57:59:41:c9:49:e1:ab:20:9d:5b:f5:c6:3a:d4:
         b2:da:20:ea:dc:e3:39:bd:01:b0:aa:b7:1c:6c:03:8a:e3:a9:
         f7:5f:34:d7:b9:cf:0f:bf:8f:cb:59:b2:03:c4:d9:45:48:e1:
         69:90:91:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz
RkU4NzY4ODMwHhcNMjUxMjIyMjA1MzQ4WhcNMjUxMjI5MjA1MzQ4WjAYMRYwFAYD
VQQDDA02OTQ5YWZkYy1jYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIuONLTe0eHu4DpQOf3Se0TwFPk+NMM5Jd2j5ulkxfMt3tFEfTBwDV7bHEG7
hAXm5Nq0ao12vWCdJ7UH/Di+C8bb3X3+tDXftlWq9jinXus0qyFIRjKJyuZAjToW
1M9oW7dIWik3fXfexcg9NVkwihWm9mKylwdzhYuSULRkO3T6rrec6P3rT59PoWY/
OWtLMk1xEoxtvNqvI0JNSE244aME6wsjxMVXDK7PL/WdWqpV+Fq70VfNil3Qr4pl
bWH5wz163P4hdke22e+xGxAsRONkqxSR94Zm98Gi6TAcdv4OXtV0H4jm7WQ3yBqh
A4OJFmH+IDOPzY1BesrdynSsswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfm4fG/
Ms7HFSkPyk2AmCl908u9MB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw
MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh
LWhNenVRTll3R3NfNkhhSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDQqG5v+7KerDarR1m0orvf8Zu3YsXlS66DxVjVS3ZzPXE/F/aXa3B8
k4Cpm8miNYhZXinmV/Q0d5pniVAaWGH/u0Lh7n8d5pDJmW1sbzYSxSLduQ3bEBYt
NrLjTgITmJrP8m78fs0crhjyTv4+q+Qt7NlRKywzdOAOTgp6Bh1NV7MIe4wLhZjp
YSjQeAhvNMFSDIQ51v4Fv1cfqUWFmXHkXiyuocvdfyJ7h+ShdxXuYDBH9YJUkk9i
iGHMM+FyxaTgOdna7b1yv4CvV1lByUnhqyCdW/XGOtSy2iDq3OM5vQGwqrccbAOK
46n3XzTXuc8Pv4/LWbIDxNlFSOFpkJHn
-----END CERTIFICATE-----
Generated at Wed Dec 24 04:29:19 2025 by rpki-client