This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          Wn4fzWRNnwRG5tox3Q44DKdvZOxbpBpdzlv6+UCi1OI=
Subject key identifier:   F9:B2:3D:F8:2E:75:FD:B7:3F:88:FD:AF:BC:C3:A9:19:6D:85:BE:33
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0C2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0C22
Signing time:             Mon 22 Dec 2025 18:20:12 +0000
Manifest this update:     Mon 22 Dec 2025 18:20:11 +0000
Manifest next update:     Mon 29 Dec 2025 18:20:11 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: 9pIiXRpU3hTO24rqGM3RpK6qC4PLvFJ70ISNrJQ6Ab4=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: hA+WjNUTeG1AnXZuvAjzzld8pq8Hs2wTD6vIEKRFdS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3118 (0xc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: Dec 22 18:20:11 2025 GMT
            Not After : Dec 29 18:20:11 2025 GMT
        Subject: CN=69498bdb-1b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:93:ed:67:c1:7f:ef:b5:45:10:9a:7b:02:
                    fa:c3:0f:99:98:86:26:82:31:a8:55:ee:bf:5f:41:
                    88:46:d5:8a:46:0c:e0:d7:60:3f:d2:23:63:fd:85:
                    60:0d:9e:3a:35:09:eb:43:96:64:fd:43:72:78:20:
                    04:da:bd:15:c3:1d:ce:b9:26:c4:10:9b:35:0a:1f:
                    d9:e3:9e:64:33:f7:3b:a7:48:09:03:e9:c8:25:96:
                    98:19:a1:03:3b:08:77:3a:cb:c6:e0:af:63:da:7b:
                    7a:67:34:02:ae:4d:28:ce:9d:fc:0c:94:0c:33:75:
                    a6:82:ed:86:9f:ed:ca:c4:29:6e:2e:bd:24:dc:36:
                    b7:a8:89:7c:52:5a:43:cd:0e:e5:e2:46:62:95:8c:
                    03:50:20:60:2a:c3:a0:08:3a:04:6b:90:3e:93:67:
                    ec:4a:39:9e:a7:3f:03:18:b0:7c:77:d1:02:67:94:
                    0f:a2:28:84:fe:95:f3:71:92:83:fe:32:06:77:87:
                    bb:fa:0d:4e:f4:c0:0a:89:65:b6:da:df:9e:e5:8c:
                    64:c1:06:0f:9f:00:da:47:75:f7:81:28:37:e0:85:
                    82:36:99:a4:36:95:3b:a5:51:99:74:01:17:98:65:
                    7c:a8:38:0e:38:3b:97:04:72:60:e0:17:52:18:20:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:3D:F8:2E:75:FD:B7:3F:88:FD:AF:BC:C3:A9:19:6D:85:BE:33
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:0b:c8:2c:e3:56:ed:e2:86:4f:2e:e8:83:ea:70:b5:7b:
         dc:8d:fe:a7:7b:cb:26:c2:a3:a0:8f:89:36:d0:31:01:2d:13:
         bf:5b:46:ee:27:02:ea:32:6e:41:7d:01:d7:07:b5:e6:a6:b7:
         26:47:72:8d:4c:db:fc:44:26:70:7d:77:47:ce:dc:20:ae:b3:
         1c:fb:e2:4a:ab:62:aa:2a:58:78:00:a2:b6:03:8a:b4:8b:2b:
         c1:60:a7:51:81:dd:85:25:c1:73:6f:dc:33:c9:f5:80:67:df:
         e8:50:94:b2:cc:30:59:74:8a:b9:80:86:32:9d:39:2e:2b:0d:
         00:dc:9d:9f:28:5a:ec:e4:ba:c9:a5:b2:ab:08:a4:e3:7e:41:
         4c:74:57:60:da:11:b4:62:46:7d:25:76:2b:d4:23:61:5c:f5:
         f5:0b:ad:90:ae:00:c6:e7:52:af:2f:a7:45:f5:61:6d:6d:13:
         0b:4b:39:01:b7:90:5b:5f:c9:f4:e4:6f:a6:f1:bd:5d:91:8f:
         fe:8f:d6:ba:4e:11:63:1d:67:24:e5:df:88:52:da:46:ff:23:
         27:b7:33:fc:c9:df:c1:64:47:2e:4f:b2:d4:a4:89:c8:c8:87:
         d8:e1:aa:c8:53:d9:e7:7a:10:82:70:24:3d:85:02:13:c9:54:
         a3:7c:da:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx
OENENjhFMzEwHhcNMjUxMjIyMTgyMDExWhcNMjUxMjI5MTgyMDExWjAYMRYwFAYD
VQQDDA02OTQ5OGJkYi0xYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxtiT7WfBf++1RRCaewL6ww+ZmIYmgjGoVe6/X0GIRtWKRgzg12A/0iNj/YVg
DZ46NQnrQ5Zk/UNyeCAE2r0Vwx3OuSbEEJs1Ch/Z455kM/c7p0gJA+nIJZaYGaED
Owh3OsvG4K9j2nt6ZzQCrk0ozp38DJQMM3Wmgu2Gn+3KxCluLr0k3Da3qIl8UlpD
zQ7l4kZilYwDUCBgKsOgCDoEa5A+k2fsSjmepz8DGLB8d9ECZ5QPoiiE/pXzcZKD
/jIGd4e7+g1O9MAKiWW22t+e5YxkwQYPnwDaR3X3gSg34IWCNpmkNpU7pVGZdAEX
mGV8qDgOODuXBHJg4BdSGCDAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmyPfgu
df23P4j9r7zDqRlthb4zMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx
ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI
QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAs+wvILONW7eKGTy7og+pwtXvcjf6ne8smwqOgj4k20DEBLRO/W0bu
JwLqMm5BfQHXB7XmprcmR3KNTNv8RCZwfXdHztwgrrMc++JKq2KqKlh4AKK2A4q0
iyvBYKdRgd2FJcFzb9wzyfWAZ9/oUJSyzDBZdIq5gIYynTkuKw0A3J2fKFrs5LrJ
pbKrCKTjfkFMdFdg2hG0YkZ9JXYr1CNhXPX1C62QrgDG51KvL6dF9WFtbRMLSzkB
t5BbX8n05G+m8b1dkY/+j9a6ThFjHWck5d+IUtpG/yMntzP8yd/BZEcuT7LUpInI
yIfY4arIU9nnehCCcCQ9hQITyVSjfNrp
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:27:28 2025 by rpki-client