This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
File:                     0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json)
Hash identifier:          IG8wQrz9Z/EJHr8F3q0OdrAUxEIpXU/CBXPphmqy6rA=
Subject key identifier:   44:0C:78:D4:71:50:18:3C:83:CD:BD:B9:A1:6E:00:C8:B7:4D:4F:CB
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
Manifest number:          068A
Signing time:             Wed 10 Dec 2025 21:09:38 +0000
Manifest this update:     Wed 10 Dec 2025 21:09:37 +0000
Manifest next update:     Wed 17 Dec 2025 21:09:37 +0000
Files and hashes:         1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: eSEnFqjGjrkIXGmA7N5CJovo2vkS5oFbdPPR6MBx1LA=)
                          2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc=)
                          3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: s1rfV8r68HE4TuansWzDnqISJzRH7RjJXWNUpk6BVJU=)
                          4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 21:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
        Validity
            Not Before: Dec 10 21:09:37 2025 GMT
            Not After : Dec 17 21:09:37 2025 GMT
        Subject: CN=6939e191-3959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:75:ee:2b:ee:b0:03:bf:07:03:4a:3a:3c:
                    e9:73:e6:99:92:85:4a:29:7e:95:0d:97:cb:fb:f9:
                    7b:97:18:c9:e7:5c:be:ec:8e:a0:85:0f:7e:92:77:
                    4e:19:61:38:cd:4e:ec:5b:ab:23:4a:3f:24:a8:1e:
                    07:7d:1e:85:45:bd:bc:e9:6f:04:73:89:53:8f:8a:
                    4a:a2:ea:44:80:b9:70:7b:2c:92:c5:97:18:d3:29:
                    46:5f:6a:77:ba:b4:e5:f2:b8:fb:6d:21:84:a8:e2:
                    a6:e2:14:80:cd:fc:cd:23:bd:af:57:ca:b7:68:12:
                    3a:b6:b0:ce:e9:12:1f:b4:e3:e9:a5:27:57:81:89:
                    00:cd:f7:dc:d0:76:3b:51:88:17:78:59:a8:89:3a:
                    01:d5:01:5b:a6:33:21:e7:43:b4:52:da:9d:fb:27:
                    bd:b5:4a:4d:80:92:c1:ba:a8:95:43:ec:7c:71:5f:
                    18:0b:5f:0c:51:d8:4f:b2:6a:3b:b6:13:83:95:f4:
                    e8:59:32:8c:06:74:44:78:b5:63:9e:cc:cd:ac:35:
                    aa:18:0e:8a:e6:d9:2e:f3:35:94:c2:8a:d0:36:e2:
                    a1:47:cb:74:2d:17:98:72:ee:96:f3:84:53:ca:a2:
                    de:2b:07:c8:bf:6c:49:94:5e:66:b0:31:ae:b5:84:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:78:D4:71:50:18:3C:83:CD:BD:B9:A1:6E:00:C8:B7:4D:4F:CB
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cd:d9:52:40:86:f2:66:56:d9:88:4a:c9:88:34:e6:e9:1f:
         9c:d1:42:eb:6b:df:45:1b:33:16:f8:af:85:4b:d0:7a:66:97:
         c6:35:79:58:7d:a5:79:b4:1a:28:48:7d:d0:ef:0e:f5:ff:3c:
         99:77:78:ea:b6:d8:98:11:57:79:02:7b:b4:ca:b1:b6:32:98:
         d2:c6:dc:94:1d:c7:96:a4:e3:25:23:69:42:d1:14:3c:c2:2d:
         78:2a:d9:6a:a6:63:64:57:9d:6d:50:e8:54:c7:ff:7d:05:84:
         a4:4c:08:7b:ab:7b:c0:3f:43:04:1c:86:af:f2:f4:73:51:d0:
         2a:d6:dd:5d:b4:52:d8:ea:94:de:bb:79:de:0a:c6:fc:9c:54:
         13:11:0a:3b:ef:bc:17:4d:b6:cb:3e:8a:31:aa:da:63:94:cb:
         c0:50:15:16:37:ac:9f:49:d4:f8:a5:db:26:72:90:be:3d:32:
         97:44:50:02:5a:ac:c0:c1:35:fe:26:87:08:55:75:cb:a7:5f:
         93:c3:d6:e6:d1:6f:70:d5:ee:6c:fb:9d:e5:78:b2:48:ed:3a:
         a2:4b:44:ea:b3:dc:69:cb:e9:90:cb:99:80:53:9f:20:98:27:
         f5:a7:6b:2a:da:8e:2a:47:ec:31:49:8f:35:15:8a:1e:41:e8:
         25:c4:b1:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB
ODk0QTlBNzYwHhcNMjUxMjEwMjEwOTM3WhcNMjUxMjE3MjEwOTM3WjAYMRYwFAYD
VQQDEw02OTM5ZTE5MS0zOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6l17ivusAO/BwNKOjzpc+aZkoVKKX6VDZfL+/l7lxjJ51y+7I6ghQ9+kndO
GWE4zU7sW6sjSj8kqB4HfR6FRb286W8Ec4lTj4pKoupEgLlweyySxZcY0ylGX2p3
urTl8rj7bSGEqOKm4hSAzfzNI72vV8q3aBI6trDO6RIftOPppSdXgYkAzffc0HY7
UYgXeFmoiToB1QFbpjMh50O0Utqd+ye9tUpNgJLBuqiVQ+x8cV8YC18MUdhPsmo7
thODlfToWTKMBnREeLVjnszNrDWqGA6K5tku8zWUworQNuKhR8t0LReYcu6W84RT
yqLeKwfIv2xJlF5msDGutYSnMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQMeNRx
UBg8g829uaFuAMi3TU/LMB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5
MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJCRC9EM0YxMUYwRTk5MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlf
WGhoQjJzNVNldXFvbEttblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCazdlSQIbyZlbZiErJiDTm6R+c0ULra99FGzMW+K+FS9B6ZpfGNXlY
faV5tBooSH3Q7w71/zyZd3jqttiYEVd5Anu0yrG2MpjSxtyUHceWpOMlI2lC0RQ8
wi14KtlqpmNkV51tUOhUx/99BYSkTAh7q3vAP0MEHIav8vRzUdAq1t1dtFLY6pTe
u3neCsb8nFQTEQo777wXTbbLPooxqtpjlMvAUBUWN6yfSdT4pdsmcpC+PTKXRFAC
WqzAwTX+JocIVXXLp1+Tw9bm0W9w1e5s+53leLJI7TqiS0Tqs9xpy+mQy5mAU58g
mCf1p2sq2o4qR+wxSY81FYoeQeglxLEn
-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:31 2025 by rpki-client