This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          dWlfpBV0UV/Axkwg8se17iZn/sXzGXTfm7cjCQfXkAc=
Subject key identifier:   CB:50:EA:1C:7F:E5:94:D6:CE:28:4E:1E:E3:A5:12:1B:78:F9:0A:FC
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       0581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          057A
Signing time:             Mon 22 Dec 2025 22:26:12 +0000
Manifest this update:     Mon 22 Dec 2025 22:26:12 +0000
Manifest next update:     Mon 29 Dec 2025 22:26:12 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: JCvqR0GxXEK+xaHZA4osLNBhXwXu05SpvcGqYNL7Drs=)
                          2: C847114C07D411ECBF875117C4F9AE02.roa (hash: MMhekj2SFZKQhejre+/ZuSr0R5tKH64F+RFediiHsYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Dec 22 22:26:12 2025 GMT
            Not After : Dec 29 22:26:12 2025 GMT
        Subject: CN=6949c584-6c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:fc:c6:f6:60:64:be:17:83:a7:ea:56:2e:
                    40:3a:95:f0:01:85:eb:e3:47:9a:81:5f:0d:e3:47:
                    9a:58:f3:d0:17:28:4a:4d:56:cc:78:05:2f:19:a7:
                    62:8b:d8:32:71:fd:2a:57:9e:a9:c2:94:d1:9f:1c:
                    5e:29:17:88:57:af:87:7a:76:be:e2:27:3e:c0:3b:
                    7f:f2:9f:24:71:df:c2:c1:5a:60:65:d7:5e:5f:fd:
                    57:e4:e8:ac:57:68:bb:48:60:cb:90:ec:8f:09:eb:
                    fc:d0:f8:4d:44:c8:35:cf:7c:c9:5c:67:e3:f1:b5:
                    a2:c8:94:70:4a:06:16:a6:2c:39:78:2c:22:18:05:
                    44:15:86:c4:c4:84:29:23:1a:7d:25:86:3c:12:91:
                    02:2c:3b:60:aa:f3:60:04:19:27:ff:39:71:cf:e8:
                    25:87:35:1a:70:65:7e:ea:15:14:f1:fa:1b:60:e0:
                    7d:ea:a3:d9:52:98:b6:1e:40:ec:9d:71:0b:09:c5:
                    8c:1d:3f:7e:b1:29:b8:7b:5c:e7:37:14:a6:35:0d:
                    a7:ee:b8:e6:6c:05:90:c9:a7:c1:1a:80:00:61:b2:
                    94:c7:34:5f:12:24:72:a5:e3:1a:3c:d4:e5:08:18:
                    78:1c:f9:ee:d7:ed:28:f4:08:95:0d:73:ec:25:1f:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:EA:1C:7F:E5:94:D6:CE:28:4E:1E:E3:A5:12:1B:78:F9:0A:FC
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:69:15:21:88:a8:dd:50:70:8f:b8:25:cf:35:15:84:92:2d:
         6c:e6:47:a2:86:25:f6:be:50:1c:d5:d0:21:16:99:d5:60:1e:
         c1:9a:00:6c:58:79:86:d1:18:fd:99:1f:93:f4:bb:6c:00:2c:
         9a:80:f4:9a:10:21:c6:8f:e6:09:ca:74:79:c8:d5:b8:3d:c0:
         71:a2:45:5c:f2:26:0f:e5:f2:ce:89:12:50:e6:91:2a:1c:8d:
         bd:e6:67:a3:01:01:10:bc:5d:e3:1e:35:47:82:17:b4:68:ec:
         1b:d9:26:e6:fc:6a:36:04:93:86:fe:f3:66:14:43:09:e2:0b:
         ca:cb:01:d3:48:a7:c9:5b:fe:f8:f8:25:14:55:f4:c7:8d:1f:
         17:16:2e:99:d5:63:12:0e:6a:23:5f:c8:6e:0f:94:94:58:23:
         98:d6:be:91:9b:7f:07:ee:33:5d:bc:67:c9:a3:ef:bc:1f:21:
         39:ac:6d:fb:5a:d9:2c:bc:51:7f:4a:65:d8:3f:d3:d5:74:f1:
         9c:09:84:aa:ff:bc:83:a6:2a:41:63:c3:c4:55:f9:90:fe:a3:
         b4:0e:f1:c1:78:f8:81:c6:69:5e:8e:6e:a3:e6:d1:e3:87:7e:
         4f:18:76:b8:ee:74:24:a2:8e:c2:01:00:14:45:30:01:a0:21:
         1d:4a:5e:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4
Mzc3RjIyMkIwHhcNMjUxMjIyMjIyNjEyWhcNMjUxMjI5MjIyNjEyWjAYMRYwFAYD
VQQDDA02OTQ5YzU4NC02Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAn8xvZgZL4Xg6fqVi5AOpXwAYXr40eagV8N40eaWPPQFyhKTVbMeAUvGadi
i9gycf0qV56pwpTRnxxeKReIV6+Hena+4ic+wDt/8p8kcd/CwVpgZddeX/1X5Ois
V2i7SGDLkOyPCev80PhNRMg1z3zJXGfj8bWiyJRwSgYWpiw5eCwiGAVEFYbExIQp
Ixp9JYY8EpECLDtgqvNgBBkn/zlxz+glhzUacGV+6hUU8fobYOB96qPZUpi2HkDs
nXELCcWMHT9+sSm4e1znNxSmNQ2n7rjmbAWQyafBGoAAYbKUxzRfEiRypeMaPNTl
CBh4HPnu1+0o9AiVDXPsJR/35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtQ6hx/
5ZTWzihOHuOlEht4+Qr8MB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3
RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTVBRS80NkQ0MjJGMDA3RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29q
RG5uNDhvejkxdEtEZF9JaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEaRUhiKjdUHCPuCXPNRWEki1s5keihiX2vlAc1dAhFpnVYB7BmgBs
WHmG0Rj9mR+T9LtsACyagPSaECHGj+YJynR5yNW4PcBxokVc8iYP5fLOiRJQ5pEq
HI295mejAQEQvF3jHjVHghe0aOwb2Sbm/Go2BJOG/vNmFEMJ4gvKywHTSKfJW/74
+CUUVfTHjR8XFi6Z1WMSDmojX8huD5SUWCOY1r6Rm38H7jNdvGfJo++8HyE5rG37
WtksvFF/SmXYP9PVdPGcCYSq/7yDpipBY8PEVfmQ/qO0DvHBePiBxmlejm6j5tHj
h35PGHa47nQkoo7CAQAURTABoCEdSl7A
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:02 2025 by rpki-client