This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File:                     J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier:          eQQyt0wUDd3yy2FEzC8WxXoWxIICAn/PNewpShUTdBg=
Subject key identifier:   B5:BC:FA:B3:A8:21:1F:72:C7:65:DC:C8:B7:B4:05:B2:A5:08:CB:2B
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer:       /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial:       0CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number:          0C92
Signing time:             Mon 22 Dec 2025 18:03:34 +0000
Manifest this update:     Mon 22 Dec 2025 18:03:34 +0000
Manifest next update:     Mon 29 Dec 2025 18:03:34 +0000
Files and hashes:         1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: u00NV++GviM+VGk41eY/zxuE2dPjt90VZFMZ/9GqW5M=)
                          2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
                          rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
        Validity
            Not Before: Dec 22 18:03:34 2025 GMT
            Not After : Dec 29 18:03:34 2025 GMT
        Subject: CN=694987f6-838c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:55:bf:af:fc:e6:e9:f3:18:5d:09:a0:a7:
                    19:8c:3f:dd:2d:ff:f8:d2:72:bd:32:05:d5:7c:01:
                    45:c2:33:e5:47:86:42:8b:79:bc:14:ac:a8:10:8f:
                    f8:79:1f:90:61:73:e5:6b:f7:ef:82:b7:67:3e:d7:
                    9b:5b:b7:3d:dc:c5:34:5c:53:81:8f:85:ef:a9:87:
                    9f:2f:2e:8b:78:1d:05:84:9b:6b:b7:7c:a5:e9:fc:
                    bb:97:be:26:a5:e4:37:b8:9c:77:0b:ad:e2:73:f7:
                    2c:42:e9:64:71:cb:f8:68:0a:ec:32:1c:4b:b5:8b:
                    c4:9d:66:4f:44:26:65:5d:20:0d:9f:a5:d6:4f:ad:
                    b0:e0:19:ba:39:fb:01:70:e0:82:ca:5d:ff:e0:e1:
                    0a:42:17:cb:88:09:8e:e1:24:9f:51:c5:73:08:10:
                    f1:38:fa:17:6d:5e:cc:0e:34:01:48:2c:12:47:73:
                    23:0e:a9:bd:2b:aa:8c:e1:ac:36:80:f6:bd:a6:d5:
                    0d:bd:a3:a4:3b:52:c9:10:bb:76:cc:1b:92:58:4a:
                    b9:4b:dc:86:a9:a5:9e:2f:4c:ac:2a:7c:02:ab:a9:
                    02:98:93:31:45:63:34:7f:ed:7b:99:bd:56:a1:b0:
                    d9:9e:2e:76:70:9a:80:68:1c:b3:09:c9:dd:4c:ed:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:FA:B3:A8:21:1F:72:C7:65:DC:C8:B7:B4:05:B2:A5:08:CB:2B
            X509v3 Authority Key Identifier:
                keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:13:4e:d1:65:c2:9e:d4:27:01:dd:59:a3:84:1f:26:eb:29:
         4f:17:eb:7d:07:66:e8:1b:4b:de:87:23:b8:d4:42:de:b1:43:
         47:1c:47:5c:28:e9:41:ff:f9:37:95:8c:5c:f3:66:8e:42:e3:
         9a:40:bd:6d:c3:53:6a:81:1a:de:85:22:c0:b0:9f:8d:18:7e:
         48:55:2c:4b:1e:06:bd:47:2b:69:71:fe:04:ad:bc:31:45:77:
         ce:6d:0e:1a:4b:c6:8e:2e:7e:3d:c2:f6:5d:b7:75:0e:0a:8c:
         5b:9f:7c:b2:61:67:35:2e:be:5c:99:3b:cc:1c:73:5e:92:bf:
         61:55:9e:ed:be:5b:0e:44:dd:64:81:42:14:97:68:29:81:e1:
         a7:97:96:17:86:a4:72:b9:73:72:83:5a:eb:57:f5:b2:4f:8a:
         5a:07:2b:1e:aa:43:44:b0:3f:a7:b1:c2:8b:28:66:cf:61:22:
         e6:0c:db:ca:ac:a7:4f:15:18:f0:dc:74:5d:f6:bf:60:1f:31:
         21:c4:29:2b:86:d3:6b:fd:79:73:df:4f:70:70:a5:59:38:45:
         32:00:08:0d:db:dd:d7:0e:35:34:49:39:7f:13:80:5e:f2:50:
         33:d1:d5:3a:81:5c:f4:ff:04:d2:42:ee:ea:b9:0b:96:08:e9:
         b8:9b:ef:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB
NTNEREM5QzIwHhcNMjUxMjIyMTgwMzM0WhcNMjUxMjI5MTgwMzM0WjAYMRYwFAYD
VQQDDA02OTQ5ODdmNi04MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmAVVv6/85unzGF0JoKcZjD/dLf/40nK9MgXVfAFFwjPlR4ZCi3m8FKyoEI/4
eR+QYXPla/fvgrdnPtebW7c93MU0XFOBj4XvqYefLy6LeB0FhJtrt3yl6fy7l74m
peQ3uJx3C63ic/csQulkccv4aArsMhxLtYvEnWZPRCZlXSANn6XWT62w4Bm6OfsB
cOCCyl3/4OEKQhfLiAmO4SSfUcVzCBDxOPoXbV7MDjQBSCwSR3MjDqm9K6qM4aw2
gPa9ptUNvaOkO1LJELt2zBuSWEq5S9yGqaWeL0ysKnwCq6kCmJMxRWM0f+17mb1W
obDZni52cJqAaByzCcndTO1T8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW8+rOo
IR9yx2XcyLe0BbKlCMsrMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC
N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2
eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmE07RZcKe1CcB3VmjhB8m6ylPF+t9B2boG0vehyO41ELesUNHHEdc
KOlB//k3lYxc82aOQuOaQL1tw1NqgRrehSLAsJ+NGH5IVSxLHga9Rytpcf4Erbwx
RXfObQ4aS8aOLn49wvZdt3UOCoxbn3yyYWc1Lr5cmTvMHHNekr9hVZ7tvlsORN1k
gUIUl2gpgeGnl5YXhqRyuXNyg1rrV/WyT4paByseqkNEsD+nscKLKGbPYSLmDNvK
rKdPFRjw3HRd9r9gHzEhxCkrhtNr/Xlz309wcKVZOEUyAAgN293XDjU0STl/E4Be
8lAz0dU6gVz0/wTSQu7quQuWCOm4m+9v
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:39 2025 by rpki-client