This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
File:                     66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json)
Hash identifier:          qYJzb/TwmSzc3BzpxMi8O5zoiUC5wUtze8JB6ac6RYQ=
Subject key identifier:   3D:E5:E1:B6:73:2F:3E:63:C5:F5:2B:01:C5:BF:72:72:AA:7C:E6:72
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Certificate issuer:       /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
Manifest number:          0114
Signing time:             Tue 09 Dec 2025 02:55:32 +0000
Manifest this update:     Tue 09 Dec 2025 02:55:31 +0000
Manifest next update:     Tue 16 Dec 2025 02:55:31 +0000
Files and hashes:         1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: X7qlwjz2ZdhNoQnlsgEImQYFGR22GM08O4xjC72aoD8=)
                          2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: PfGn53JSYWSbw4kJ9ksJRxs8eswRllufrLhU7+JEImU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 02:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
        Validity
            Not Before: Dec  9 02:55:31 2025 GMT
            Not After : Dec 16 02:55:31 2025 GMT
        Subject: CN=69378fa4-b07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:3a:d4:88:d9:2d:97:54:22:09:73:d1:a0:
                    3e:55:18:9c:8d:b9:de:00:93:96:34:28:9e:fb:21:
                    42:2d:04:ba:37:10:10:e1:31:6b:1b:86:f5:b5:03:
                    aa:78:c5:d7:d4:19:43:22:10:8b:79:a8:bb:62:36:
                    b3:e7:90:df:cf:6f:d6:9d:5f:a1:b7:68:76:06:8d:
                    1d:dd:ef:45:8a:ae:6f:fc:da:e7:df:35:39:58:77:
                    fd:8e:14:53:ea:a1:c1:df:0a:12:c5:8f:a8:f3:33:
                    f2:73:37:bd:f9:62:09:04:71:78:eb:0c:ce:4f:40:
                    1d:47:03:50:31:60:97:a1:55:a3:38:af:6a:16:1f:
                    85:f0:97:a8:7f:d9:4c:f6:f9:86:b1:92:5a:01:07:
                    ab:91:03:63:26:c3:2a:8a:3d:34:94:c8:9d:c0:84:
                    f1:69:16:99:9f:46:3b:94:8c:1f:c3:90:cd:af:c8:
                    c2:51:2b:2b:e5:5a:81:c5:4b:bc:6a:a4:dd:b9:00:
                    12:9f:83:e9:16:e0:51:76:19:59:61:0a:6e:62:9b:
                    d3:53:59:6c:15:36:42:f3:68:b4:92:0e:13:4d:0a:
                    6d:34:5c:0a:ed:3c:f3:b1:7a:2e:78:1b:dd:68:34:
                    42:98:36:3c:28:80:16:ef:99:63:a5:d2:14:00:67:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:E1:B6:73:2F:3E:63:C5:F5:2B:01:C5:BF:72:72:AA:7C:E6:72
            X509v3 Authority Key Identifier:
                keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:61:e4:25:de:b5:7c:12:de:f4:89:06:63:11:01:b3:1c:
         d3:57:e8:aa:66:a2:49:cd:e2:68:6f:a8:9f:cc:fe:14:a0:23:
         31:98:10:40:ad:60:77:56:b2:8b:4d:f4:82:29:8c:91:c4:88:
         49:f3:4f:e1:a4:be:29:4e:4b:4f:45:a5:19:ff:4e:80:1d:c7:
         b8:cc:40:da:15:2e:bc:17:1a:22:06:e1:9b:15:6a:17:e0:3c:
         f5:2b:2c:82:f2:f8:66:a7:8c:78:2c:7e:27:96:dc:80:79:55:
         2a:4f:13:75:b1:3c:5b:cc:5c:82:13:13:45:2e:8e:93:8e:67:
         32:b7:46:94:28:78:dc:d3:7a:e1:0c:65:04:8d:fb:f7:bf:8f:
         77:3a:9e:61:92:f0:5b:40:bd:90:b4:bb:4b:9b:b7:4f:2b:27:
         76:22:0d:8b:fc:80:5c:a1:c2:95:05:c2:34:e1:68:0b:24:50:
         f4:b1:4f:23:be:34:06:72:87:3f:cf:b7:a4:29:38:96:3b:9e:
         c0:42:3f:84:5a:6d:a5:9a:dd:c6:05:d5:0d:6b:66:59:95:73:
         65:45:aa:8b:30:f6:bf:02:20:f5:6b:89:02:45:e1:f3:a8:58:
         68:4b:73:37:d4:13:92:46:e4:5b:b4:58:de:32:04:df:a9:e6:
         92:16:f9:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE
ODYwNUIxNjMwHhcNMjUxMjA5MDI1NTMxWhcNMjUxMjE2MDI1NTMxWjAYMRYwFAYD
VQQDEw02OTM3OGZhNC1iMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8g61IjZLZdUIglz0aA+VRicjbneAJOWNCie+yFCLQS6NxAQ4TFrG4b1tQOq
eMXX1BlDIhCLeai7Yjaz55Dfz2/WnV+ht2h2Bo0d3e9Fiq5v/Nrn3zU5WHf9jhRT
6qHB3woSxY+o8zPycze9+WIJBHF46wzOT0AdRwNQMWCXoVWjOK9qFh+F8Jeof9lM
9vmGsZJaAQerkQNjJsMqij00lMidwITxaRaZn0Y7lIwfw5DNr8jCUSsr5VqBxUu8
aqTduQASn4PpFuBRdhlZYQpuYpvTU1lsFTZC82i0kg4TTQptNFwK7TzzsXoueBvd
aDRCmDY8KIAW75ljpdIUAGcbxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3l4bZz
Lz5jxfUrAcW/cnKqfOZyMB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx
QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz
RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnKmHkJd61fBLe9IkGYxEBsxzTV+iqZqJJzeJob6ifzP4UoCMxmBBA
rWB3VrKLTfSCKYyRxIhJ80/hpL4pTktPRaUZ/06AHce4zEDaFS68FxoiBuGbFWoX
4Dz1KyyC8vhmp4x4LH4nltyAeVUqTxN1sTxbzFyCExNFLo6Tjmcyt0aUKHjc03rh
DGUEjfv3v493Op5hkvBbQL2QtLtLm7dPKyd2Ig2L/IBcocKVBcI04WgLJFD0sU8j
vjQGcoc/z7ekKTiWO57AQj+EWm2lmt3GBdUNa2ZZlXNlRaqLMPa/AiD1a4kCReHz
qFhoS3M31BOSRuRbtFjeMgTfqeaSFvmL
-----END CERTIFICATE-----
Generated at Thu Dec 11 19:03:43 2025 by rpki-client