This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
File:                     RCP79BrZ8Px008FVWLjQmhZLJhs.mft (raw, json)
Hash identifier:          XxYHW3xzzvjFN65oaqG6ReqTFmVGFh/gvGHwaVRlAYs=
Subject key identifier:   B3:BC:0B:23:09:DF:E9:5D:CF:04:35:F9:09:6D:FB:A4:3A:B5:33:25
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Certificate issuer:       /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
Manifest number:          0692
Signing time:             Tue 02 Dec 2025 19:50:46 +0000
Manifest this update:     Tue 02 Dec 2025 19:50:45 +0000
Manifest next update:     Tue 09 Dec 2025 19:50:45 +0000
Files and hashes:         1: RCP79BrZ8Px008FVWLjQmhZLJhs.crl (hash: TZQcTj97Xd/AIjYEeQmjgXgo7E/z1tJ+kwYjI5tzxVE=)
                          2: 061C3362985911EBA5F39B54C4F9AE02.roa (hash: 58ITnOEIWhsg3VC5900dxvG6wKzEJQmdtWvJjNGVUdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 19:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
        Validity
            Not Before: Dec  2 19:50:45 2025 GMT
            Not After : Dec  9 19:50:45 2025 GMT
        Subject: CN=692f4315-9fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:d1:3b:c7:e6:93:c3:f5:d6:e8:0c:3f:64:
                    08:1b:a7:d8:cc:d7:8d:25:e5:a4:52:45:2c:cf:23:
                    32:20:ac:7d:70:a1:1f:57:e3:8d:38:07:b8:ff:f0:
                    42:ad:1f:bc:85:e8:46:d1:bf:a9:fd:13:c8:cb:c9:
                    dc:aa:e7:00:4a:94:6f:2d:a5:3a:18:42:42:10:75:
                    04:91:74:01:2d:d5:d3:41:b8:ed:d8:35:45:70:e0:
                    f5:a7:4b:7a:a0:d7:75:c3:ce:4f:65:80:4e:7a:66:
                    a9:85:7a:8c:39:00:6f:39:e5:c1:8e:bc:f2:b9:7a:
                    51:bb:cd:81:12:6a:2b:2c:f0:49:b2:a9:47:4b:db:
                    ec:a2:14:de:b3:1b:bd:79:e9:94:05:81:cd:71:29:
                    96:cb:69:1c:d2:fa:33:86:d5:57:c8:9f:30:02:8d:
                    4c:72:c0:53:58:b8:ff:44:b3:1a:7c:a4:ce:0f:2f:
                    f2:e3:01:7a:0f:ef:08:c0:3b:94:62:70:2b:a6:0a:
                    59:8b:b0:22:92:f3:ab:a8:36:78:29:6a:0d:2d:89:
                    c5:f3:b6:03:ba:a9:b9:a6:d4:d9:c5:7e:ee:cc:c4:
                    31:ae:52:5f:b8:e2:a0:c9:91:9e:32:a9:d9:7f:d1:
                    5c:a5:7b:41:6a:7e:c4:2c:83:23:0e:6c:bf:86:9e:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:0B:23:09:DF:E9:5D:CF:04:35:F9:09:6D:FB:A4:3A:B5:33:25
            X509v3 Authority Key Identifier:
                keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:69:a8:07:74:3a:66:99:a7:79:8f:ac:ca:84:9c:6c:f1:
         7c:e6:8d:14:9e:d5:9e:ac:a4:e8:a4:d8:50:c5:79:f4:06:70:
         54:55:51:60:b8:c9:39:ec:7c:e7:62:43:dc:9d:a4:57:6e:4d:
         51:f1:dc:c4:1d:d3:20:7a:bb:39:10:bb:4c:54:a1:14:63:c1:
         d0:6c:6a:41:73:51:87:29:05:09:17:e1:cc:7a:13:7d:f4:de:
         c4:e3:6a:3c:2c:ca:1c:e9:f4:d9:b4:c0:77:30:e8:4b:f1:45:
         b3:a8:eb:43:c7:dc:0b:ff:73:62:f8:be:b2:3f:7f:66:b1:3d:
         87:e3:ba:57:73:7d:44:62:a7:56:62:66:3c:7a:ed:b1:aa:9a:
         08:f8:b0:c0:22:84:be:ed:c5:c1:b1:e4:3b:4c:d9:93:51:19:
         b0:c9:25:25:ca:72:6c:b7:17:1a:d5:73:22:f3:cd:d0:bd:c6:
         5b:35:60:21:ad:72:53:18:33:90:9e:3d:10:ff:81:3e:de:40:
         a4:80:7d:30:39:b4:0a:80:b2:96:9a:24:5d:5e:da:0f:cb:1f:
         90:2a:db:8d:9e:a8:22:0a:30:24:c5:21:e6:ce:21:7a:52:6d:
         95:87:2d:b9:a5:c4:7c:53:e8:37:8f:27:15:58:0c:19:b2:90:
         47:c6:15:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURCNTUxMTAvBgNVBAUTKDQ0MjNGQkY0MUFEOUYwRkM3NEQzQzE1NTU4QjhEMDlB
MTY0QjI2MUIwHhcNMjUxMjAyMTk1MDQ1WhcNMjUxMjA5MTk1MDQ1WjAYMRYwFAYD
VQQDEw02OTJmNDMxNS05ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwvRO8fmk8P11ugMP2QIG6fYzNeNJeWkUkUszyMyIKx9cKEfV+ONOAe4//BC
rR+8hehG0b+p/RPIy8ncqucASpRvLaU6GEJCEHUEkXQBLdXTQbjt2DVFcOD1p0t6
oNd1w85PZYBOemaphXqMOQBvOeXBjrzyuXpRu82BEmorLPBJsqlHS9vsohTesxu9
eemUBYHNcSmWy2kc0vozhtVXyJ8wAo1McsBTWLj/RLMafKTODy/y4wF6D+8IwDuU
YnArpgpZi7AikvOrqDZ4KWoNLYnF87YDuqm5ptTZxX7uzMQxrlJfuOKgyZGeMqnZ
f9FcpXtBan7ELIMjDmy/hp4oGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO8CyMJ
3+ldzwQ1+Qlt+6Q6tTMlMB8GA1UdIwQYMBaAFEQj+/Qa2fD8dNPBVVi40JoWSyYb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS8yMDQ4MDUzMjk4
NTgxMUVCOEE0MUZBMjBDNEY5QUUwMi9SQ1A3OUJyWjhQeDAwOEZWV0xqUW1oWkxK
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JDUDc5QnJaOFB4MDA4RlZXTGpRbWhaTEpocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REI1NS8yMDQ4MDUzMjk4NTgxMUVCOEE0MUZBMjBDNEY5QUUwMi9SQ1A3OUJyWjhQ
eDAwOEZWV0xqUW1oWkxKaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9FWmoB3Q6ZpmneY+syoScbPF85o0UntWerKTopNhQxXn0BnBUVVFg
uMk57HznYkPcnaRXbk1R8dzEHdMgers5ELtMVKEUY8HQbGpBc1GHKQUJF+HMehN9
9N7E42o8LMoc6fTZtMB3MOhL8UWzqOtDx9wL/3Ni+L6yP39msT2H47pXc31EYqdW
YmY8eu2xqpoI+LDAIoS+7cXBseQ7TNmTURmwySUlynJstxca1XMi883QvcZbNWAh
rXJTGDOQnj0Q/4E+3kCkgH0wObQKgLKWmiRdXtoPyx+QKtuNnqgiCjAkxSHmziF6
Um2Vhy25pcR8U+g3jycVWAwZspBHxhVJ
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:27 2025 by rpki-client