This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File:                     goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier:          pRvXtcTszodu27XwUqZEIs3VEtmo6lTtgZyU3uoFW48=
Subject key identifier:   5C:6C:30:23:E2:8D:7B:BF:23:E5:27:F1:1D:28:67:C2:26:14:49:24
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer:       /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number:          05FA
Signing time:             Mon 22 Dec 2025 22:04:14 +0000
Manifest this update:     Mon 22 Dec 2025 22:04:14 +0000
Manifest next update:     Mon 29 Dec 2025 22:04:14 +0000
Files and hashes:         1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: kd9r+7W+4q3/OPQ4YouDxECham8izQ2F6oUQbSXNyIU=)
                          2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
        Validity
            Not Before: Dec 22 22:04:14 2025 GMT
            Not After : Dec 29 22:04:14 2025 GMT
        Subject: CN=6949c05e-fdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:6c:f8:eb:cc:f0:78:5b:83:a5:fd:48:34:
                    35:b5:0b:49:f1:8f:e4:37:cb:73:45:fe:b8:0c:bf:
                    d5:0f:7e:45:26:4d:c5:ca:fd:6f:a7:3f:26:6c:13:
                    7f:06:66:f1:f3:a4:1f:58:83:fa:67:69:8a:c8:7a:
                    13:7b:43:b3:45:c4:bc:94:d9:a9:a6:50:f5:f9:a9:
                    f7:54:e9:9b:ec:b5:46:c1:ba:41:4c:15:04:f9:2d:
                    0b:ae:31:36:93:3b:93:97:8d:dc:f6:09:96:38:0f:
                    1c:a9:72:5a:58:7f:41:84:3b:8c:bd:16:df:eb:f2:
                    d6:50:e2:06:95:1b:97:b2:f0:ab:56:77:7c:39:4f:
                    a4:7f:43:c3:9c:18:a8:21:ea:70:69:c3:bc:93:a9:
                    6d:a6:5e:48:a2:56:3b:4b:5f:db:c5:72:f9:50:c1:
                    0e:67:4c:a8:76:6a:3e:a9:4f:e5:86:3d:f5:3d:47:
                    c6:24:76:c7:58:2d:d1:0f:f8:33:bb:b5:52:d8:69:
                    e1:ed:82:fa:cd:9b:4d:90:a2:bc:8d:9f:66:cf:a4:
                    ab:ea:da:68:8c:cf:69:df:a4:02:7c:9e:ef:8f:28:
                    c6:bb:92:70:76:29:ad:db:47:3c:38:47:1b:ff:84:
                    a4:f6:c1:0c:e2:cd:16:8b:b3:23:4f:76:fb:5d:83:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6C:30:23:E2:8D:7B:BF:23:E5:27:F1:1D:28:67:C2:26:14:49:24
            X509v3 Authority Key Identifier:
                keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:82:18:22:1f:eb:17:ab:3e:2c:ee:dd:bb:30:f3:14:af:
         9a:de:dc:0e:4e:76:ed:fc:fa:98:2b:3d:ca:7f:6f:fd:28:07:
         06:06:18:14:31:6f:a3:50:b2:8f:7d:44:d3:fc:77:8f:fb:a6:
         82:9a:3f:26:b0:2b:f9:d6:f9:73:55:26:c2:41:92:01:9c:c2:
         21:d9:9b:fe:9b:2b:b4:ca:74:dc:9d:4c:e8:11:0d:f9:b7:ce:
         30:08:27:5b:5f:3f:72:33:3c:ed:7e:78:0a:26:d5:2b:68:a2:
         50:95:0c:3b:9e:ac:07:57:11:4c:2f:09:27:31:26:33:e3:ae:
         b1:e0:fd:7d:5d:0a:ef:83:47:e9:ec:29:23:ea:9e:97:e9:24:
         5f:22:e7:4f:a5:32:da:ef:d2:7b:d5:95:60:d7:56:f5:e5:04:
         88:a6:84:02:6c:b4:39:2c:ec:20:11:8f:21:ca:d1:25:a0:59:
         48:be:e6:fd:d8:09:7d:18:a9:9e:f3:61:28:66:05:4e:62:53:
         4a:91:b0:76:3a:8c:7f:ae:57:bc:05:b4:fb:2a:02:65:cc:ce:
         5b:20:00:d6:3b:60:04:84:45:1c:66:2f:53:b3:17:33:1d:bd:
         14:29:31:4b:f1:68:72:6e:50:84:14:87:c9:d3:76:75:5c:66:
         85:de:be:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz
MTBCNzAwMjQwHhcNMjUxMjIyMjIwNDE0WhcNMjUxMjI5MjIwNDE0WjAYMRYwFAYD
VQQDDA02OTQ5YzA1ZS1mZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo05s+OvM8Hhbg6X9SDQ1tQtJ8Y/kN8tzRf64DL/VD35FJk3Fyv1vpz8mbBN/
Bmbx86QfWIP6Z2mKyHoTe0OzRcS8lNmpplD1+an3VOmb7LVGwbpBTBUE+S0LrjE2
kzuTl43c9gmWOA8cqXJaWH9BhDuMvRbf6/LWUOIGlRuXsvCrVnd8OU+kf0PDnBio
IepwacO8k6ltpl5IolY7S1/bxXL5UMEOZ0yodmo+qU/lhj31PUfGJHbHWC3RD/gz
u7VS2Gnh7YL6zZtNkKK8jZ9mz6Sr6tpojM9p36QCfJ7vjyjGu5Jwdimt20c8OEcb
/4Sk9sEM4s0Wi7MjT3b7XYM4TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxsMCPi
jXu/I+Un8R0oZ8ImFEkkMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1
NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE
TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2S4IYIh/rF6s+LO7duzDzFK+a3twOTnbt/PqYKz3Kf2/9KAcGBhgU
MW+jULKPfUTT/HeP+6aCmj8msCv51vlzVSbCQZIBnMIh2Zv+myu0ynTcnUzoEQ35
t84wCCdbXz9yMzztfngKJtUraKJQlQw7nqwHVxFMLwknMSYz466x4P19XQrvg0fp
7Ckj6p6X6SRfIudPpTLa79J71ZVg11b15QSIpoQCbLQ5LOwgEY8hytEloFlIvub9
2Al9GKme82EoZgVOYlNKkbB2Oox/rle8BbT7KgJlzM5bIADWO2AEhEUcZi9Tsxcz
Hb0UKTFL8WhyblCEFIfJ03Z1XGaF3r5t
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:23 2025 by rpki-client