This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File:                     -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier:          rCIrRQ2sYRoypIyrT72YGnjhl4aYHtZjZnEcFG9eTR8=
Subject key identifier:   EE:5E:6D:9B:15:A9:EE:A3:47:5D:BF:11:3B:91:A3:D4:E7:09:35:1E
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer:       /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number:          019B
Signing time:             Tue 23 Dec 2025 02:26:29 +0000
Manifest this update:     Tue 23 Dec 2025 02:26:29 +0000
Manifest next update:     Tue 30 Dec 2025 02:26:29 +0000
Files and hashes:         1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: Zg3R+PkLdatpO5E536CJ+s9wvH5xpNdT6tirHgb7PaI=)
                          2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: muOcSUHydOybWaIbIJqpYR7U55ErO7bT8T8E0VaV7DU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
                          rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
        Validity
            Not Before: Dec 23 02:26:29 2025 GMT
            Not After : Dec 30 02:26:29 2025 GMT
        Subject: CN=6949fdd5-fe7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:fc:ad:52:0a:41:2d:50:e9:56:d2:66:f0:
                    d8:87:22:89:22:b0:3d:59:37:5a:ee:f5:10:61:b5:
                    bf:67:2f:d6:38:e0:f3:41:65:f7:f6:e4:24:da:91:
                    05:3c:02:18:55:bb:1e:7e:1d:5f:06:d9:e0:d1:56:
                    25:54:f7:26:11:4c:f4:c2:91:15:a4:c8:e0:51:c6:
                    5a:13:8c:dc:7e:c2:07:47:1b:f4:d5:24:e8:7b:9e:
                    e3:02:f0:dd:ce:94:10:38:e9:c8:89:d0:1f:30:d2:
                    5f:f9:81:41:15:1b:a9:66:af:4b:68:ff:eb:37:10:
                    42:67:c9:73:5d:bd:39:c5:a8:96:06:b0:7b:09:8b:
                    b9:1e:9c:86:e4:07:6e:ac:ea:be:1e:5a:bc:c8:a2:
                    50:8f:c5:8f:be:54:e3:fb:14:8e:bc:ef:4b:75:72:
                    ed:bd:9a:19:26:34:ef:33:76:7e:32:06:a7:2a:3c:
                    fe:02:28:50:4b:34:c9:c8:e6:04:79:b2:67:40:3a:
                    c0:32:b8:33:b6:81:8a:55:99:5b:fe:e1:06:90:70:
                    7b:81:0c:2b:98:d8:14:ba:ca:98:62:9b:18:86:7d:
                    9e:8b:55:41:7f:ab:ce:1e:42:9b:1d:7c:83:d3:62:
                    9c:50:2d:56:36:01:36:e2:49:9b:3d:92:34:7b:2e:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5E:6D:9B:15:A9:EE:A3:47:5D:BF:11:3B:91:A3:D4:E7:09:35:1E
            X509v3 Authority Key Identifier:
                keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:6b:6c:1e:d7:3e:06:83:89:e6:e7:7a:4e:db:fa:d4:d4:
         f2:14:9a:e2:47:fe:10:a8:1e:d8:5e:11:6b:6b:a8:2f:13:d3:
         81:03:3b:69:6b:f6:dc:51:c5:2a:9a:30:7c:27:c1:8b:24:ca:
         db:99:c2:13:30:2d:39:2f:b3:0b:20:67:04:b4:62:a0:42:13:
         9f:c0:7e:6c:7a:4f:64:b3:6e:c3:ed:bd:b2:50:ed:c6:3c:ec:
         e0:79:14:9e:26:11:ea:e4:ae:cb:c4:4c:98:57:ce:51:e7:1b:
         23:e0:23:1c:06:76:68:75:0a:a5:52:56:51:02:64:cf:6e:1e:
         0b:30:af:12:f9:c9:bb:07:0f:36:c3:52:29:60:75:45:e4:74:
         23:9e:aa:f8:93:b9:71:3c:1e:3d:72:52:d8:99:06:6d:46:4b:
         ca:07:be:28:b4:08:e4:7c:4c:10:c0:59:ea:31:7c:70:41:a8:
         76:1c:83:ad:0b:87:5b:89:2c:77:6b:8b:1c:08:ea:ff:d1:15:
         9e:59:85:8f:e8:44:68:51:cf:3f:eb:88:08:c2:ca:b2:d0:da:
         74:35:93:24:10:e3:77:a4:e6:d1:af:a0:e7:cb:bd:52:a8:04:
         ae:58:76:95:60:13:dd:93:35:92:49:cc:2a:41:6b:71:34:6c:
         d5:b5:06:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw
NkMwOENBMzgwHhcNMjUxMjIzMDIyNjI5WhcNMjUxMjMwMDIyNjI5WjAYMRYwFAYD
VQQDDA02OTQ5ZmRkNS1mZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm78rVIKQS1Q6VbSZvDYhyKJIrA9WTda7vUQYbW/Zy/WOODzQWX39uQk2pEF
PAIYVbsefh1fBtng0VYlVPcmEUz0wpEVpMjgUcZaE4zcfsIHRxv01SToe57jAvDd
zpQQOOnIidAfMNJf+YFBFRupZq9LaP/rNxBCZ8lzXb05xaiWBrB7CYu5HpyG5Adu
rOq+Hlq8yKJQj8WPvlTj+xSOvO9LdXLtvZoZJjTvM3Z+MganKjz+AihQSzTJyOYE
ebJnQDrAMrgztoGKVZlb/uEGkHB7gQwrmNgUusqYYpsYhn2ei1VBf6vOHkKbHXyD
02KcUC1WNgE24kmbPZI0ey5qFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5ebZsV
qe6jR12/ETuRo9TnCTUeMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF
NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB
TExQWTZ0V3ZjLVVHd0l5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAd+mtsHtc+BoOJ5ud6Ttv61NTyFJriR/4QqB7YXhFra6gvE9OBAztp
a/bcUcUqmjB8J8GLJMrbmcITMC05L7MLIGcEtGKgQhOfwH5sek9ks27D7b2yUO3G
POzgeRSeJhHq5K7LxEyYV85R5xsj4CMcBnZodQqlUlZRAmTPbh4LMK8S+cm7Bw82
w1IpYHVF5HQjnqr4k7lxPB49clLYmQZtRkvKB74otAjkfEwQwFnqMXxwQah2HIOt
C4dbiSx3a4scCOr/0RWeWYWP6ERoUc8/64gIwsqy0Np0NZMkEON3pObRr6Dny71S
qASuWHaVYBPdkzWSScwqQWtxNGzVtQYm
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:24 2025 by rpki-client