This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File:                     -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier:          BDzRD0LVBiyVKNIDfNylIwEQuTscTEXHTTPQ4elGigU=
Subject key identifier:   60:71:8B:E9:CE:E6:52:3D:0A:7A:0B:52:EB:18:5E:05:35:EE:17:E7
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer:       /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number:          0451
Signing time:             Mon 22 Dec 2025 23:14:42 +0000
Manifest this update:     Mon 22 Dec 2025 23:14:41 +0000
Manifest next update:     Mon 29 Dec 2025 23:14:41 +0000
Files and hashes:         1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: oappsJ7mFJihDPtGW/Y1hFKr4pXCBwmeRllINAhDojo=)
                          2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
                          rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
        Validity
            Not Before: Dec 22 23:14:41 2025 GMT
            Not After : Dec 29 23:14:41 2025 GMT
        Subject: CN=6949d0e1-a23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:81:78:4c:50:20:23:1c:06:03:68:f7:8b:
                    52:05:45:8c:19:75:5d:80:27:9a:65:6d:b1:14:58:
                    bb:84:f1:27:a7:fd:9e:06:52:95:33:35:31:2c:72:
                    10:e6:c0:c5:7c:dc:c0:ac:ee:dc:eb:e3:14:28:3d:
                    e2:00:23:14:ab:59:fc:c0:67:93:27:da:4a:2d:0a:
                    e0:82:60:e4:21:81:2e:b3:ed:4d:8b:62:25:c0:05:
                    b9:34:df:16:8e:00:75:9b:fd:aa:fc:28:62:bd:64:
                    3a:90:4b:bf:e2:27:eb:4a:67:13:b0:02:e5:85:df:
                    db:35:ab:98:fa:7c:a4:3a:18:f9:3d:17:58:ea:c3:
                    71:19:26:67:63:f4:9a:b0:c7:91:f4:9e:b5:18:b4:
                    5c:bc:b6:46:f2:32:36:30:c5:13:f2:55:18:bb:e1:
                    47:f2:b9:2e:eb:8a:28:54:6b:b0:af:cd:d9:8a:be:
                    cf:28:61:b2:99:45:c4:c3:f8:d2:1a:84:51:7f:6f:
                    a0:dd:ae:05:db:49:94:d1:2a:88:41:ff:27:6e:73:
                    b6:41:a6:9d:13:26:28:d9:5e:02:07:69:b0:d6:73:
                    e3:f8:55:41:ac:b8:ed:ac:83:12:97:53:6d:66:eb:
                    7c:70:e0:2b:9e:85:3c:16:8d:29:94:0f:9a:0e:d2:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:8B:E9:CE:E6:52:3D:0A:7A:0B:52:EB:18:5E:05:35:EE:17:E7
            X509v3 Authority Key Identifier:
                keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:42:c2:bf:66:70:0e:81:21:fe:13:de:8d:8f:ad:5e:c4:
         b0:89:8b:6f:51:21:f9:c9:db:bb:db:7e:79:47:cb:0d:3c:63:
         e4:47:5c:e3:de:05:ca:65:98:91:20:c8:9d:80:02:b8:88:1e:
         cf:a0:c8:55:33:b4:1e:05:20:cc:f6:c6:8e:48:e7:7c:ea:e9:
         a9:a1:38:ea:53:54:62:e7:5d:40:6e:21:d0:cd:a5:12:3a:a0:
         a1:e1:a1:34:31:ad:d7:29:c1:02:c9:84:91:af:ad:65:e7:6e:
         4e:31:02:b6:cb:aa:5a:25:82:a6:87:31:83:5b:34:57:3c:71:
         34:b9:a4:b8:f6:98:7e:f5:c4:d6:2a:35:b4:f1:33:c1:b7:15:
         3c:68:aa:32:b0:ba:89:e8:85:35:d1:68:cf:d7:fd:ce:4d:f3:
         1a:12:3a:16:14:dd:36:c2:e1:6d:29:f9:98:cb:21:85:60:30:
         8e:8b:12:84:22:5b:e1:2a:e7:d9:34:19:c3:c1:26:aa:48:ac:
         2d:0d:41:1d:77:70:ae:e4:f6:dc:f4:1d:27:f2:b3:84:04:28:
         d3:e7:f5:62:b7:46:5e:13:1d:73:36:cf:cc:5e:af:65:b3:5a:
         87:f5:b4:78:4b:68:48:b3:00:1b:11:9e:da:4f:22:91:b0:ec:
         e2:f7:b5:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFCMzgxMTAvBgNVBAUTKEZBNTlCMjZFQzY1OTc4MDBDMzU3OURENzA3M0ZBNEI2
ODVBN0MyRDIwHhcNMjUxMjIyMjMxNDQxWhcNMjUxMjI5MjMxNDQxWjAYMRYwFAYD
VQQDDA02OTQ5ZDBlMS1hMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaeBeExQICMcBgNo94tSBUWMGXVdgCeaZW2xFFi7hPEnp/2eBlKVMzUxLHIQ
5sDFfNzArO7c6+MUKD3iACMUq1n8wGeTJ9pKLQrggmDkIYEus+1Ni2IlwAW5NN8W
jgB1m/2q/ChivWQ6kEu/4ifrSmcTsALlhd/bNauY+nykOhj5PRdY6sNxGSZnY/Sa
sMeR9J61GLRcvLZG8jI2MMUT8lUYu+FH8rku64ooVGuwr83Zir7PKGGymUXEw/jS
GoRRf2+g3a4F20mU0SqIQf8nbnO2QaadEyYo2V4CB2mw1nPj+FVBrLjtrIMSl1Nt
Zut8cOArnoU8Fo0plA+aDtLyiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBxi+nO
5lI9CnoLUusYXgU17hfnMB8GA1UdIwQYMBaAFPpZsm7GWXgAw1ed1wc/pLaFp8LS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUIzOC8yREY1NDQ1NDdE
MEIxMUVDQkEyMzk0MzNDNEY5QUUwMi8tbG15YnNaWmVBRERWNTNYQnota3RvV253
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1sbXlic1paZUFERFY1M1hCei1rdG9Xbnd0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUIzOC8yREY1NDQ1NDdEMEIxMUVDQkEyMzk0MzNDNEY5QUUwMi8tbG15YnNaWmVB
RERWNTNYQnota3RvV253dEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuC0LCv2ZwDoEh/hPejY+tXsSwiYtvUSH5ydu72355R8sNPGPkR1zj
3gXKZZiRIMidgAK4iB7PoMhVM7QeBSDM9saOSOd86umpoTjqU1Ri511AbiHQzaUS
OqCh4aE0Ma3XKcECyYSRr61l525OMQK2y6paJYKmhzGDWzRXPHE0uaS49ph+9cTW
KjW08TPBtxU8aKoysLqJ6IU10WjP1/3OTfMaEjoWFN02wuFtKfmYyyGFYDCOixKE
IlvhKufZNBnDwSaqSKwtDUEdd3Cu5Pbc9B0n8rOEBCjT5/Vit0ZeEx1zNs/MXq9l
s1qH9bR4S2hIswAbEZ7aTyKRsOzi97WA
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:12 2025 by rpki-client