This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          l/exfLx/nuTu41x+HYdpNyLWeCve99QPICvu3D47toY=
Subject key identifier:   AC:A7:45:AE:8D:8D:3A:D1:F8:DA:63:6C:73:A7:E7:E4:6C:83:51:FF
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1E80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1E62
Signing time:             Sat 06 Dec 2025 15:46:18 +0000
Manifest this update:     Sat 06 Dec 2025 15:46:18 +0000
Manifest next update:     Sat 13 Dec 2025 15:46:18 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: OHiRGIjA5vjPsqmDz4r25P0If+VRdZzfWOA0QBw7JSE=)
                          2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: EJiEnoCirWsDQY/eDttKswieD8axfAxOee0LqYEm/Qk=)
                          3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: C6lZnCUm+xSNFhUq+KN79jJBl7/zRPJh8VdBqkQbpX0=)
                          4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: BGVuJ0Wf+Uf4RgQQzyj2Cck77KLCc+rr/2VE6L1NPis=)
                          5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: wqWtD+2LXaW4MpbT7PeD5JYJic0Zu3FnuTrJZi1gdyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7808 (0x1e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Dec  6 15:46:18 2025 GMT
            Not After : Dec 13 15:46:18 2025 GMT
        Subject: CN=69344fca-57de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:47:f2:e0:77:2e:77:14:ea:66:2c:3a:35:
                    08:8d:04:83:38:04:67:36:a1:10:24:66:47:1f:b9:
                    fd:24:47:02:1c:03:7f:59:2a:78:30:04:a2:1e:e8:
                    fd:54:15:a5:e5:95:9d:38:68:07:18:32:7f:d6:b7:
                    76:4d:a8:5c:d4:5a:7c:9c:93:37:45:a8:71:89:d3:
                    36:57:17:6f:26:06:47:69:0f:86:96:1b:62:ac:5d:
                    59:00:15:f8:4c:a5:3c:1c:23:4b:f7:88:f9:ef:28:
                    79:9d:14:40:35:21:45:cf:76:1c:78:93:91:e7:bb:
                    9c:04:07:d2:ea:34:a8:9b:19:02:d7:c0:92:83:a7:
                    dd:3b:c0:c6:81:7b:ce:05:14:66:d5:04:d9:d6:18:
                    af:c7:ae:86:d8:0f:9d:05:5d:b7:91:e5:54:b9:0a:
                    62:64:8a:a7:3a:78:02:19:36:cf:05:a8:93:98:29:
                    d3:3e:76:7f:ff:7f:76:38:0c:c9:69:cd:e0:96:21:
                    ba:2a:90:4d:12:8f:e4:78:aa:e7:61:c2:d0:84:37:
                    30:8f:00:c3:36:b8:38:0f:94:c7:e8:5e:da:04:8b:
                    c5:aa:03:67:15:a7:fb:51:66:8b:a6:9f:fc:08:21:
                    c0:78:ba:7f:b8:d8:a6:28:49:70:66:58:18:ea:92:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A7:45:AE:8D:8D:3A:D1:F8:DA:63:6C:73:A7:E7:E4:6C:83:51:FF
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:d6:ea:88:5a:29:c5:42:86:f1:95:70:c4:69:9b:3e:6b:
         9d:ad:82:42:b2:31:ef:75:fe:f0:e1:e2:58:c4:09:99:1a:9d:
         d8:91:f8:e2:8f:65:f4:ee:f7:6e:da:7c:bd:1d:e8:71:bc:37:
         00:1e:ea:9e:4e:9d:d5:ac:03:bf:8a:62:c9:1e:90:65:d5:da:
         d4:dd:c6:7e:a1:40:0a:5d:4a:22:46:37:43:88:d3:d6:07:0e:
         3f:78:f4:4d:22:7f:e3:b2:85:fe:12:05:14:a1:d2:0f:0c:64:
         1b:03:94:a1:db:0f:2e:44:b4:84:8f:16:f8:f7:76:be:56:c2:
         ea:d6:25:1e:bd:35:34:d4:91:34:38:32:e3:31:13:b0:0e:b2:
         16:b3:33:26:d3:3f:af:8b:e1:cf:f4:49:2b:bd:45:69:e2:48:
         d5:0c:23:49:2d:b5:7d:55:5e:b2:1c:0f:5a:c5:66:fb:09:79:
         f4:c2:c0:6c:8c:4b:fb:9c:55:d7:b2:7b:88:56:1b:c3:9c:ca:
         82:7a:6d:c7:b7:2e:21:be:bf:3a:dd:79:8e:6d:b5:2f:29:36:
         71:97:6b:97:c7:cc:da:3d:13:e6:21:92:dd:06:a2:72:41:b9:
         f7:99:f0:64:c0:b8:d2:97:c7:42:6b:ac:c9:9f:07:33:92:b1:
         71:95:a4:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4NEIxMTAvBgNVBAUTKDczNDFGNjRFQUIyNTE3RUE5OTM4RERFNEZCMEE4MTRF
NUNCQjdFNzcwHhcNMjUxMjA2MTU0NjE4WhcNMjUxMjEzMTU0NjE4WjAYMRYwFAYD
VQQDEw02OTM0NGZjYS01N2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzNpH8uB3LncU6mYsOjUIjQSDOARnNqEQJGZHH7n9JEcCHAN/WSp4MASiHuj9
VBWl5ZWdOGgHGDJ/1rd2Tahc1Fp8nJM3RahxidM2VxdvJgZHaQ+GlhtirF1ZABX4
TKU8HCNL94j57yh5nRRANSFFz3YceJOR57ucBAfS6jSomxkC18CSg6fdO8DGgXvO
BRRm1QTZ1hivx66G2A+dBV23keVUuQpiZIqnOngCGTbPBaiTmCnTPnZ//392OAzJ
ac3gliG6KpBNEo/keKrnYcLQhDcwjwDDNrg4D5TH6F7aBIvFqgNnFaf7UWaLpp/8
CCHAeLp/uNimKElwZlgY6pI/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKynRa6N
jTrR+NpjbHOn5+Rsg1H/MB8GA1UdIwQYMBaAFHNB9k6rJRfqmTjd5PsKgU5cu353
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg0Qi8xMzY0ODdGQThD
OEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYtcVpPTjNrLXdxQlRseTdm
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwSDJUcXNsRi1xWk9OM2std3FCVGx5N2ZuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTg0Qi8xMzY0ODdGQThDOEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYt
cVpPTjNrLXdxQlRseTdmbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuT9bqiFopxUKG8ZVwxGmbPmudrYJCsjHvdf7w4eJYxAmZGp3Ykfji
j2X07vdu2ny9HehxvDcAHuqeTp3VrAO/imLJHpBl1drU3cZ+oUAKXUoiRjdDiNPW
Bw4/ePRNIn/jsoX+EgUUodIPDGQbA5Sh2w8uRLSEjxb493a+VsLq1iUevTU01JE0
ODLjMROwDrIWszMm0z+vi+HP9EkrvUVp4kjVDCNJLbV9VV6yHA9axWb7CXn0wsBs
jEv7nFXXsnuIVhvDnMqCem3Hty4hvr863XmObbUvKTZxl2uXx8zaPRPmIZLdBqJy
Qbn3mfBkwLjSl8dCa6zJnwczkrFxlaSD
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:23:16 2025 by rpki-client