This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
File:                     -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json)
Hash identifier:          BvQ78TxPbtrdTc1dvIVLSad/kTF/qWvbI1xAytgl3XA=
Subject key identifier:   05:B7:1C:8C:60:D6:4F:6A:AE:5D:85:F2:7F:C1:95:43:C0:BD:8F:F4
Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25
Certificate issuer:       /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
Manifest number:          53
Signing time:             Tue 23 Dec 2025 06:06:05 +0000
Manifest this update:     Tue 23 Dec 2025 06:06:05 +0000
Manifest next update:     Tue 30 Dec 2025 06:06:05 +0000
Files and hashes:         1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: DZpn9leUfVPmdRpydFbNnRueo0Ho49tf7oHb+T8Q3BY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl
                          rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925
        Validity
            Not Before: Dec 23 06:06:05 2025 GMT
            Not After : Dec 30 06:06:05 2025 GMT
        Subject: CN=694a314d-e140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:aa:d7:07:98:f4:0e:0d:9c:50:d1:7d:c9:
                    07:76:30:0f:32:0b:00:b6:3b:bd:45:89:8e:12:d6:
                    a2:20:0a:2f:78:d2:d5:e3:37:84:7e:ac:0d:47:06:
                    a8:2f:16:b6:41:71:5f:15:71:0e:d9:e9:6f:c8:8f:
                    f9:93:aa:6b:1c:3a:e6:10:be:12:35:94:47:85:52:
                    f7:e8:84:4b:56:0d:89:cb:66:c7:f1:57:7a:b4:28:
                    10:2a:65:19:c0:1a:49:d5:4d:5c:22:ec:82:e0:cc:
                    37:80:01:13:38:e4:af:a9:72:55:5d:78:d5:5e:c5:
                    a6:cf:d7:dd:46:35:76:1b:a6:1e:eb:c6:1e:76:ab:
                    e2:fd:1d:fc:74:59:32:9c:ae:b7:a1:46:bd:a9:d4:
                    be:f1:da:24:b1:ed:09:8f:7c:a4:31:a2:56:8c:2a:
                    78:22:4a:4f:80:90:d6:01:06:d5:cb:03:25:19:f1:
                    8e:31:7d:b9:78:bb:90:27:31:ac:b0:8e:01:65:8e:
                    58:e7:3b:a4:bb:af:d6:22:c8:fd:54:c7:59:ac:a4:
                    3e:34:b2:10:50:1b:23:e7:c5:56:d4:82:6a:ba:cc:
                    3a:28:a0:a0:a2:df:09:b1:b7:0f:37:e3:e8:d7:84:
                    86:ed:0d:f7:d8:d4:c4:67:4e:82:5d:73:3b:4b:8f:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:1C:8C:60:D6:4F:6A:AE:5D:85:F2:7F:C1:95:43:C0:BD:8F:F4
            X509v3 Authority Key Identifier:
                keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:e0:28:ac:12:63:ee:f2:b4:70:2e:e1:cf:7b:a0:07:dd:
         1a:6c:fa:ab:3a:83:8c:ab:4d:d2:35:c5:07:07:c9:ab:04:e3:
         bc:c2:6b:61:5b:d3:00:67:7a:2b:ed:eb:93:6e:85:ca:a7:5d:
         e3:7b:25:d3:97:5f:7f:20:2d:96:2b:de:7b:b5:61:87:95:93:
         5e:59:ce:d9:3c:43:3b:0c:65:a9:45:e2:00:5f:96:72:44:5b:
         26:e7:be:82:b4:38:83:f3:16:ec:b1:d0:94:d6:17:d3:07:67:
         92:ad:95:2a:d1:f2:3d:e2:c8:4b:a1:20:2c:73:cc:e2:9d:75:
         a2:82:2d:de:8a:6a:31:cd:1c:97:01:76:3f:42:dd:15:31:01:
         95:d9:be:ae:e9:14:2a:7e:d0:c1:3d:a1:5c:83:de:da:4e:b7:
         63:f5:2c:fc:35:c8:b3:c6:90:67:cc:b8:da:e6:04:e5:a6:c6:
         38:1a:40:b6:f1:fe:d7:7f:23:07:33:79:ff:db:2f:9c:89:56:
         3f:1a:c5:f2:d7:99:25:39:67:10:f9:20:af:88:ae:ac:89:c9:
         c7:1f:0f:6d:37:e1:3a:79:fc:fe:f1:d8:45:eb:2b:ce:b5:f4:
         0a:f7:f8:ec:70:88:21:be:08:a1:ed:8b:16:b5:e6:54:0a:0d:
         b6:16:c0:22
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODQxQjExMC8GA1UEBRMoRkFGMjMwQ0UyMkZCRTY0RjY4ODk5OUVGN0NEODk0RERC
RDlCODkyNTAeFw0yNTEyMjMwNjA2MDVaFw0yNTEyMzAwNjA2MDVaMBgxFjAUBgNV
BAMMDTY5NGEzMTRkLWUxNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyUarXB5j0Dg2cUNF9yQd2MA8yCwC2O71FiY4S1qIgCi940tXjN4R+rA1HBqgv
FrZBcV8VcQ7Z6W/Ij/mTqmscOuYQvhI1lEeFUvfohEtWDYnLZsfxV3q0KBAqZRnA
GknVTVwi7ILgzDeAARM45K+pclVdeNVexabP191GNXYbph7rxh52q+L9Hfx0WTKc
rrehRr2p1L7x2iSx7QmPfKQxolaMKngiSk+AkNYBBtXLAyUZ8Y4xfbl4u5AnMayw
jgFljljnO6S7r9YiyP1Ux1mspD40shBQGyPnxVbUgmq6zDoooKCi3wmxtw834+jX
hIbtDffY1MRnToJdcztLj4bzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBbccjGDW
T2quXYXyf8GVQ8C9j/QwHwYDVR0jBBgwFoAU+vIwziL75k9oiZnvfNiU3b2biSUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NDFCL0Q1RjExOEVFNjBD
MDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5b2labnZmTmlVM2IyYmlT
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXZJd3ppTDc1azlvaVpudmZOaVUzYjJiaVNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4
NDFCL0Q1RjExOEVFNjBDMDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5
b2labnZmTmlVM2IyYmlTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI2U4CisEmPu8rRwLuHPe6AH3Rps+qs6g4yrTdI1xQcHyasE47zCa2Fb
0wBneivt65NuhcqnXeN7JdOXX38gLZYr3nu1YYeVk15Zztk8QzsMZalF4gBflnJE
WybnvoK0OIPzFuyx0JTWF9MHZ5KtlSrR8j3iyEuhICxzzOKddaKCLd6KajHNHJcB
dj9C3RUxAZXZvq7pFCp+0ME9oVyD3tpOt2P1LPw1yLPGkGfMuNrmBOWmxjgaQLbx
/td/Iwczef/bL5yJVj8axfLXmSU5ZxD5IK+IrqyJyccfD2034Tp5/P7x2EXrK861
9Ar3+OxwiCG+CKHtixa15lQKDbYWwCI=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:20 2025 by rpki-client