This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft
File:                     s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json)
Hash identifier:          QtdTDtd4eUuZDXAVabCWmkoEWVOKpTeEphxftNj6hhc=
Subject key identifier:   1E:20:2F:A2:93:5C:87:B8:10:91:DA:80:0F:99:5A:2E:C3:F7:A4:0C
Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C
Certificate issuer:       /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft
Manifest number:          5B
Signing time:             Tue 23 Dec 2025 05:59:48 +0000
Manifest this update:     Tue 23 Dec 2025 05:59:48 +0000
Manifest next update:     Tue 30 Dec 2025 05:59:48 +0000
Files and hashes:         1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: nYlf9GesyYf45l+03slJO/xaKDU7IcLqC5Il59YjyQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl
                          rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C
        Validity
            Not Before: Dec 23 05:59:48 2025 GMT
            Not After : Dec 30 05:59:48 2025 GMT
        Subject: CN=694a2fd4-cccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:ee:96:6a:e8:c4:ce:1b:d6:42:ee:f7:13:
                    6b:e5:8b:b7:54:b0:07:8b:8c:a1:db:50:67:f9:8a:
                    44:9c:8e:44:54:a7:d5:0b:50:f0:86:af:ee:93:b6:
                    90:48:30:78:db:c5:79:a7:b3:38:35:b5:82:27:7c:
                    22:ef:f6:55:14:81:e4:7d:6a:52:4b:fb:33:0c:d3:
                    02:f9:88:90:81:44:fb:1f:4d:d0:5f:7e:cf:e6:fc:
                    d5:0f:e4:95:0e:37:ef:fc:6c:fd:7a:e9:8b:e7:f0:
                    20:1c:82:8f:23:5f:0d:69:33:f6:39:83:73:7a:52:
                    22:a2:9c:d8:99:58:9e:ab:b5:fa:06:de:0c:e1:87:
                    1d:e7:88:68:26:5c:da:6e:fb:62:c2:20:58:a7:92:
                    f1:be:88:92:ae:e0:be:cf:9b:f1:4c:24:c5:3b:5b:
                    64:07:0e:14:18:c1:8d:19:e7:d7:e3:88:e6:39:d2:
                    be:3b:75:91:2f:1a:72:4f:1b:85:c9:8f:a6:4c:0f:
                    5f:f2:5a:71:f8:55:82:b6:85:30:50:5e:45:b8:f2:
                    b2:d9:03:cf:ab:1f:a0:a3:51:b1:d4:33:7e:25:9e:
                    8f:c9:86:7e:48:df:7a:3c:2b:e1:d1:a9:a3:1a:4b:
                    45:1e:ff:6c:ad:c7:c1:46:51:44:60:db:ee:63:33:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:2F:A2:93:5C:87:B8:10:91:DA:80:0F:99:5A:2E:C3:F7:A4:0C
            X509v3 Authority Key Identifier:
                keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:7f:10:f8:5f:ad:9a:c6:5a:4d:37:0c:8a:82:36:f2:0a:
         55:e8:f5:a2:5e:cd:1f:64:0f:1a:2a:01:1e:e5:49:a6:24:be:
         11:0e:35:4d:de:22:ab:7f:5d:e9:0c:fd:c4:48:f1:25:89:cc:
         f8:99:1a:71:18:7b:b2:8f:f5:36:fb:86:db:c2:f9:d3:a9:bd:
         92:e4:dd:fe:18:b8:85:02:34:47:ce:50:8b:ae:af:d9:3c:bf:
         e2:03:92:f8:f6:66:23:b1:a9:1d:2b:85:ba:b3:40:42:f2:fc:
         87:79:d6:96:35:0c:2c:91:dc:bc:f9:8d:74:f2:eb:07:ee:93:
         0a:bb:0f:5f:b2:d7:2a:5f:4c:11:61:35:fc:37:a6:37:70:60:
         f3:d5:56:d6:1e:46:4d:a3:8d:1c:1f:9c:89:be:11:b9:cb:3c:
         21:88:25:e8:86:39:f3:de:b7:02:ce:c0:b0:12:34:e4:7d:ca:
         23:55:2e:de:0a:1a:43:8c:33:12:b5:ad:ad:0a:2e:75:b8:a1:
         aa:0d:71:8a:84:9a:c1:48:5f:2c:4f:eb:b6:ae:00:c6:d2:f3:
         27:fb:85:61:91:76:71:5d:16:e1:49:99:4b:2b:c9:49:68:76:
         f4:58:3e:41:76:c1:95:2c:28:e3:84:d0:d3:e9:25:b1:3b:8e:
         90:7c:93:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE
QUExOTMzQzAeFw0yNTEyMjMwNTU5NDhaFw0yNTEyMzAwNTU5NDhaMBgxFjAUBgNV
BAMMDTY5NGEyZmQ0LWNjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC14O6WaujEzhvWQu73E2vli7dUsAeLjKHbUGf5ikScjkRUp9ULUPCGr+6TtpBI
MHjbxXmnszg1tYInfCLv9lUUgeR9alJL+zMM0wL5iJCBRPsfTdBffs/m/NUP5JUO
N+/8bP166Yvn8CAcgo8jXw1pM/Y5g3N6UiKinNiZWJ6rtfoG3gzhhx3niGgmXNpu
+2LCIFinkvG+iJKu4L7Pm/FMJMU7W2QHDhQYwY0Z59fjiOY50r47dZEvGnJPG4XJ
j6ZMD1/yWnH4VYK2hTBQXkW48rLZA8+rH6CjUbHUM34lno/Jhn5I33o8K+HRqaMa
S0Ue/2ytx8FGUURg2+5jM7hvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHiAvopNc
h7gQkdqAD5laLsP3pAwwHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz
MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF
ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv
ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACC0fxD4X62axlpNNwyKgjbyClXo9aJezR9kDxoqAR7lSaYkvhEONU3e
Iqt/XekM/cRI8SWJzPiZGnEYe7KP9Tb7htvC+dOpvZLk3f4YuIUCNEfOUIuur9k8
v+IDkvj2ZiOxqR0rhbqzQELy/Id51pY1DCyR3Lz5jXTy6wfukwq7D1+y1ypfTBFh
Nfw3pjdwYPPVVtYeRk2jjRwfnIm+EbnLPCGIJeiGOfPetwLOwLASNOR9yiNVLt4K
GkOMMxK1ra0KLnW4oaoNcYqEmsFIXyxP67auAMbS8yf7hWGRdnFdFuFJmUsryUlo
dvRYPkF2wZUsKOOE0NPpJbE7jpB8k+0=
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:10 2025 by rpki-client