This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File:                     mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier:          3BSahfcd0A3vcxZivht/lXJglTfb41Y3Ya3OR+npmsA=
Subject key identifier:   A1:C8:DA:44:00:E2:5F:0A:90:15:5A:1D:F0:08:5B:6A:5E:12:C2:72
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       0612
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number:          05F9
Signing time:             Mon 22 Dec 2025 22:09:15 +0000
Manifest this update:     Mon 22 Dec 2025 22:09:14 +0000
Manifest next update:     Mon 29 Dec 2025 22:09:14 +0000
Files and hashes:         1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: lhryb/9hWRdsQ5ggsflENqVNZlwyHRDDGwnPcqPCKZQ=)
                          2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=)
                          3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: Dec 22 22:09:14 2025 GMT
            Not After : Dec 29 22:09:14 2025 GMT
        Subject: CN=6949c18b-27be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:54:aa:ef:88:a2:7b:9c:cd:5f:d5:d9:2c:
                    c8:a1:5a:92:4a:cf:5e:67:eb:1b:5b:67:19:e8:d9:
                    f0:da:a3:49:25:f8:f5:03:4e:44:ae:ab:d6:d3:3d:
                    b5:91:c5:c8:a2:b1:b5:58:5a:80:12:7c:00:e0:4e:
                    10:c8:8b:25:c6:c6:1b:8d:52:b8:73:ea:4c:e5:31:
                    0a:51:ad:49:8b:91:d5:a6:1f:6a:a4:a0:95:33:75:
                    28:7d:cd:fe:7d:ca:bc:d8:52:5e:72:f4:40:8c:ae:
                    57:0f:dc:17:10:bc:b3:f5:64:2f:d0:2a:e9:86:70:
                    c4:11:75:f1:5e:14:7e:ee:ae:99:a9:37:79:5b:54:
                    a4:d2:5f:de:34:d9:8e:e0:0a:00:40:14:b1:00:f9:
                    ea:31:ae:d0:42:db:64:c7:19:28:91:d0:5f:56:99:
                    32:f8:4b:5e:b7:69:0a:73:fe:21:8d:d2:2f:82:96:
                    a0:bb:5e:07:2d:34:2d:b0:77:b4:ca:8a:6f:ca:8b:
                    c6:a4:f1:6b:f1:78:75:1c:26:cc:62:71:07:d0:ed:
                    69:00:1c:2a:c7:0c:89:db:c9:13:93:30:9c:2d:23:
                    5f:ec:41:0a:75:c4:f0:75:a9:96:29:02:e9:c7:fc:
                    6e:08:3f:2d:a0:1a:ce:23:48:c4:ea:66:e8:2a:80:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:DA:44:00:E2:5F:0A:90:15:5A:1D:F0:08:5B:6A:5E:12:C2:72
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:44:63:68:fb:9b:54:62:45:d8:92:45:c6:d4:6b:f2:61:f1:
         66:44:2b:7f:13:fe:80:77:70:fc:fd:8a:38:28:f3:88:d2:ec:
         b7:09:38:ed:ba:a2:04:bf:b7:62:57:82:cb:91:02:81:a7:32:
         e6:df:8f:dd:43:06:04:01:47:01:45:53:16:52:2b:a1:30:b4:
         58:21:c0:82:7e:e6:9c:93:4c:a0:01:44:48:4a:d3:69:53:82:
         d6:2c:cd:9e:a9:c3:e8:11:51:22:17:74:79:97:e1:fd:9a:8f:
         3e:7b:ff:4c:44:ec:c5:72:64:2c:2f:d4:20:3f:1b:16:5e:6b:
         fa:2c:cb:8d:ab:cf:e7:d5:77:a0:12:57:98:23:75:ad:ab:fc:
         b3:9d:37:b7:b5:77:1c:15:39:fa:09:e6:60:55:14:12:e2:70:
         37:c2:27:54:2b:55:3a:21:e9:fb:7d:4d:2c:9b:1a:0b:78:f1:
         25:9c:7a:40:31:03:f4:10:56:0f:f1:f9:e0:dc:7e:00:28:c7:
         24:57:b6:b5:66:80:e8:94:1e:cc:11:aa:f1:45:bc:37:76:c7:
         3f:60:a0:04:ef:1e:33:56:8c:00:4d:fd:f0:4b:94:83:60:eb:
         e4:66:f1:92:c4:22:8a:86:75:0c:16:50:32:4d:fe:fe:97:66:
         88:43:17:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz
MDg3RTk3NzAwHhcNMjUxMjIyMjIwOTE0WhcNMjUxMjI5MjIwOTE0WjAYMRYwFAYD
VQQDDA02OTQ5YzE4Yi0yN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzONUqu+IonuczV/V2SzIoVqSSs9eZ+sbW2cZ6Nnw2qNJJfj1A05ErqvW0z21
kcXIorG1WFqAEnwA4E4QyIslxsYbjVK4c+pM5TEKUa1Ji5HVph9qpKCVM3Uofc3+
fcq82FJecvRAjK5XD9wXELyz9WQv0CrphnDEEXXxXhR+7q6ZqTd5W1Sk0l/eNNmO
4AoAQBSxAPnqMa7QQttkxxkokdBfVpky+Etet2kKc/4hjdIvgpagu14HLTQtsHe0
yopvyovGpPFr8Xh1HCbMYnEH0O1pABwqxwyJ28kTkzCcLSNf7EEKdcTwdamWKQLp
x/xuCD8toBrOI0jE6mboKoA4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHI2kQA
4l8KkBVaHfAIW2peEsJyMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG
MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M
Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTRGNo+5tUYkXYkkXG1GvyYfFmRCt/E/6Ad3D8/Yo4KPOI0uy3CTjt
uqIEv7diV4LLkQKBpzLm34/dQwYEAUcBRVMWUiuhMLRYIcCCfuack0ygAURIStNp
U4LWLM2eqcPoEVEiF3R5l+H9mo8+e/9MROzFcmQsL9QgPxsWXmv6LMuNq8/n1Xeg
EleYI3Wtq/yznTe3tXccFTn6CeZgVRQS4nA3widUK1U6Ien7fU0smxoLePElnHpA
MQP0EFYP8fng3H4AKMckV7a1ZoDolB7MEarxRbw3dsc/YKAE7x4zVowATf3wS5SD
YOvkZvGSxCKKhnUMFlAyTf7+l2aIQxeh
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:33 2025 by rpki-client