This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
File:                     31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft (raw, json)
Hash identifier:          bwvFNEHFkZbhUwra6xefXzvlD+XYzF/B0O0ffPsGN7o=
Subject key identifier:   C8:9F:13:95:CC:BE:51:28:AD:FE:FE:EB:F5:CD:1F:1A:71:93:B9:91
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Certificate issuer:       /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial:       070C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
Manifest number:          0705
Signing time:             Mon 22 Dec 2025 21:10:10 +0000
Manifest this update:     Mon 22 Dec 2025 21:10:10 +0000
Manifest next update:     Mon 29 Dec 2025 21:10:10 +0000
Files and hashes:         1: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl (hash: nvCDYek7tXa2W2L8bjiTyas0R+e8+hp5c1kzujdapl8=)
                          2: DD3109D66C6C11EB92CE744BC4F9AE02.roa (hash: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
                          rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
        Validity
            Not Before: Dec 22 21:10:10 2025 GMT
            Not After : Dec 29 21:10:10 2025 GMT
        Subject: CN=6949b3b2-4600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:59:53:e8:4d:c7:ac:f2:5d:18:1c:77:d1:
                    47:90:c1:9d:6b:de:11:2b:5f:33:47:f6:1b:b8:8a:
                    88:6f:2b:da:8a:56:3e:66:a2:d8:29:de:3e:d7:5d:
                    5f:79:7c:b5:5b:d7:77:e9:30:03:9a:88:cf:ae:70:
                    32:ac:f3:f5:be:85:a6:3d:85:62:52:99:3d:eb:17:
                    b9:d5:96:01:f8:a4:5f:10:38:ae:ef:14:e3:d7:b5:
                    7c:07:c5:a1:94:91:c9:e9:b0:ca:fe:0d:e1:95:81:
                    2d:93:c9:0c:9f:ae:02:83:c7:c6:df:50:95:c0:59:
                    57:1b:7d:b1:84:6c:cf:85:2f:c2:a3:fc:04:c0:e0:
                    f1:d9:2b:a8:76:dd:b4:61:a2:df:45:8c:65:92:9f:
                    77:a4:e8:ab:00:ab:91:7a:7b:4f:66:10:a9:eb:ed:
                    1d:0e:bf:89:4a:e9:ac:79:c5:cf:49:cd:a2:4c:4d:
                    24:9f:a7:be:b7:7b:0f:e0:6f:6c:c7:f7:a7:c1:3c:
                    06:35:6f:05:1a:f9:20:23:78:fb:36:2b:8e:f8:4d:
                    05:c2:8f:12:0f:c4:73:8a:b6:92:3d:fc:73:33:0d:
                    3e:fb:94:23:ca:5b:65:7d:94:41:f2:c0:a4:47:95:
                    3a:72:46:4f:88:0c:ee:4e:9b:84:46:f7:01:0e:91:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:13:95:CC:BE:51:28:AD:FE:FE:EB:F5:CD:1F:1A:71:93:B9:91
            X509v3 Authority Key Identifier:
                keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:20:f9:7f:49:62:c4:12:fd:58:cb:08:27:ee:77:8d:b2:
         63:de:2d:1a:70:e7:c3:83:d6:ec:92:ae:4e:94:64:84:c9:4b:
         40:52:39:54:19:c4:8a:ab:2a:05:03:ce:62:a8:7e:43:9d:e5:
         54:a7:bc:c1:64:d8:5d:e7:89:43:da:00:02:20:12:80:dc:7c:
         f3:d9:14:4d:55:00:37:e3:31:89:ff:11:88:af:d5:b5:54:d2:
         ef:29:65:01:21:83:f2:54:0c:78:56:74:c8:14:53:b9:f2:6c:
         7f:1b:b3:61:aa:af:28:41:f5:42:55:c8:ba:30:d9:d4:c3:ba:
         db:42:e1:a3:87:4c:bc:11:0e:8d:b8:ff:c2:5d:55:b8:94:59:
         5e:43:e9:95:f5:64:e5:43:3c:0b:4a:77:d1:4f:66:c7:e2:79:
         6f:8b:88:48:79:85:b3:50:8d:29:20:cc:50:bf:a4:03:7c:2f:
         a7:2b:cf:1b:a1:c5:66:2f:36:db:26:f8:3c:23:68:30:67:3a:
         8f:3f:27:fb:df:09:42:ed:69:a8:8c:ff:03:a8:f2:68:6c:7c:
         5a:03:89:f3:ac:77:e3:3e:0d:29:ec:3f:84:e2:d3:a0:84:ee:
         66:ab:47:ad:fd:d1:7a:2a:4f:52:76:eb:23:e9:7e:cb:ca:d1:
         3a:72:fe:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZCRUExMTAvBgNVBAUTKERGNTE1QjU5MTVFODMzRUVEQjQ0NEQxOUMzMEEwMEYw
OTc4MTVBMzUwHhcNMjUxMjIyMjExMDEwWhcNMjUxMjI5MjExMDEwWjAYMRYwFAYD
VQQDDA02OTQ5YjNiMi00NjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAts9ZU+hNx6zyXRgcd9FHkMGda94RK18zR/YbuIqIbyvailY+ZqLYKd4+111f
eXy1W9d36TADmojPrnAyrPP1voWmPYViUpk96xe51ZYB+KRfEDiu7xTj17V8B8Wh
lJHJ6bDK/g3hlYEtk8kMn64Cg8fG31CVwFlXG32xhGzPhS/Co/wEwODx2Suodt20
YaLfRYxlkp93pOirAKuRentPZhCp6+0dDr+JSumsecXPSc2iTE0kn6e+t3sP4G9s
x/enwTwGNW8FGvkgI3j7NiuO+E0Fwo8SD8RziraSPfxzMw0++5QjyltlfZRB8sCk
R5U6ckZPiAzuTpuERvcBDpHBVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMifE5XM
vlEorf7+6/XNHxpxk7mRMB8GA1UdIwQYMBaAFN9RW1kV6DPu20RNGcMKAPCXgVo1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkJFQS9BQTdFMzkxQTZD
NkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00tN2JSRTBad3dvQThKZUJX
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMxRmJXUlhvTS03YlJFMFp3d29BOEplQldqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkJFQS9BQTdFMzkxQTZDNkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00t
N2JSRTBad3dvQThKZUJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS9yD5f0lixBL9WMsIJ+53jbJj3i0acOfDg9bskq5OlGSEyUtAUjlU
GcSKqyoFA85iqH5DneVUp7zBZNhd54lD2gACIBKA3Hzz2RRNVQA34zGJ/xGIr9W1
VNLvKWUBIYPyVAx4VnTIFFO58mx/G7Nhqq8oQfVCVci6MNnUw7rbQuGjh0y8EQ6N
uP/CXVW4lFleQ+mV9WTlQzwLSnfRT2bH4nlvi4hIeYWzUI0pIMxQv6QDfC+nK88b
ocVmLzbbJvg8I2gwZzqPPyf73wlC7WmojP8DqPJobHxaA4nzrHfjPg0p7D+E4tOg
hO5mq0et/dF6Kk9Sdusj6X7LytE6cv7I
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:16 2025 by rpki-client