This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File:                     sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier:          GHn+i3VWt5qEyrMN1zO7wT3WpuqKeX976bhpGGsivsk=
Subject key identifier:   42:59:8E:FB:BD:3B:D0:A6:41:69:67:DF:5F:39:AF:9F:50:9B:43:BC
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer:       /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial:       02F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number:          02E7
Signing time:             Tue 02 Dec 2025 23:57:48 +0000
Manifest this update:     Tue 02 Dec 2025 23:57:48 +0000
Manifest next update:     Tue 09 Dec 2025 23:57:48 +0000
Files and hashes:         1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: bNUXA4j0fKQNkC44UXOjcDhcYhAZ08eCAwBzJOTGjw4=)
                          2: FAF865AACB6B11F0A831E06BC4F9AE02.roa (hash: 38sgRw7lbQYMoiP7J/pdM87ivbZafpdULxwddXG9uZM=)
                          3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=)
                          4: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: ArS5AGPHgEHvdQtpL/879+l26sBrIJGIKuKFDkTzfqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
                          rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 23:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
        Validity
            Not Before: Dec  2 23:57:48 2025 GMT
            Not After : Dec  9 23:57:48 2025 GMT
        Subject: CN=692f7cfc-fc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5d:cc:0c:67:42:74:6f:53:ea:27:69:35:80:
                    89:2d:0d:e8:a8:a8:0d:8a:31:9c:26:17:49:47:cf:
                    c3:8a:4f:64:e0:59:f9:32:65:2c:72:de:b6:8e:1f:
                    4d:30:6e:f2:f2:73:8a:2f:07:a1:a0:8e:68:c4:5e:
                    b5:41:02:18:21:d0:29:22:57:c7:6b:80:69:47:50:
                    48:8b:a1:3b:5a:fc:e9:d0:cc:ac:1f:fe:fd:b9:8a:
                    eb:32:e2:30:9d:fa:5d:6b:3d:29:89:87:d5:f2:f9:
                    f0:24:4d:5a:d4:04:be:d4:a4:a4:8b:36:0b:8f:f3:
                    80:42:e7:7d:19:80:8b:69:d0:7f:8c:85:b5:64:a7:
                    db:3b:a3:18:b0:ba:95:e8:c7:99:cb:df:c8:9e:1c:
                    09:6d:a4:ac:04:fa:db:b6:90:c5:fe:c2:7c:5e:58:
                    87:26:fb:95:63:05:3c:35:62:97:06:25:56:9b:00:
                    c9:20:ba:2b:8f:8e:01:8c:6b:4a:c8:7a:01:43:7b:
                    56:17:99:60:db:e6:8c:2b:10:fe:e4:f5:e0:fc:2b:
                    70:56:dd:d3:86:ea:15:54:07:67:2d:79:97:54:c5:
                    c8:56:0d:28:b9:da:2d:d7:ec:b2:66:4c:87:4e:e3:
                    6b:7e:76:53:9d:80:96:45:8a:20:58:fe:3b:ec:2d:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:8E:FB:BD:3B:D0:A6:41:69:67:DF:5F:39:AF:9F:50:9B:43:BC
            X509v3 Authority Key Identifier:
                keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:9e:48:b4:b2:b5:dd:17:13:a3:d5:66:9f:43:56:a7:61:
         62:82:68:b3:b8:46:be:f2:31:f0:bc:b7:75:8b:ba:06:bb:ac:
         00:30:44:c6:a3:9c:15:17:f7:a1:09:61:7e:44:ac:32:a9:24:
         6a:86:9a:76:27:1d:33:1c:7a:8c:c0:5c:18:d2:63:ba:2b:55:
         a3:45:dd:e8:f9:f3:06:25:dc:93:9c:50:49:8e:2d:45:c4:35:
         e0:4d:a4:c1:9e:cb:7c:09:b4:22:21:ce:6d:0d:2e:f9:37:25:
         e8:1f:9d:23:c7:f3:52:72:78:9b:94:38:be:68:90:4c:8b:1b:
         77:1b:c1:c3:97:93:83:0e:15:1e:82:d7:db:bb:78:0c:47:33:
         f3:8e:b3:c8:dd:6b:8d:10:98:91:dd:c2:6c:a3:93:a6:43:ca:
         1d:88:1d:bc:d8:ef:00:8b:4c:68:eb:ba:14:bc:b2:25:60:d4:
         f7:14:d4:2a:53:ca:a4:6b:b0:78:40:b7:5d:74:cb:23:2b:89:
         f4:e3:01:74:0b:0c:f1:39:f6:d8:fd:35:b3:3e:fa:a8:94:a7:
         58:07:b2:bb:fb:df:de:9d:43:01:9e:c0:34:9c:af:87:66:2d:
         e6:ad:ad:02:40:ad:58:af:22:8e:89:14:35:ba:c5:8f:b4:cd:
         53:63:9c:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw
RjdBOTc3ODkwHhcNMjUxMjAyMjM1NzQ4WhcNMjUxMjA5MjM1NzQ4WjAYMRYwFAYD
VQQDEw02OTJmN2NmYy1mYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+l3MDGdCdG9T6idpNYCJLQ3oqKgNijGcJhdJR8/Dik9k4Fn5MmUsct62jh9N
MG7y8nOKLwehoI5oxF61QQIYIdApIlfHa4BpR1BIi6E7Wvzp0MysH/79uYrrMuIw
nfpdaz0piYfV8vnwJE1a1AS+1KSkizYLj/OAQud9GYCLadB/jIW1ZKfbO6MYsLqV
6MeZy9/InhwJbaSsBPrbtpDF/sJ8XliHJvuVYwU8NWKXBiVWmwDJILorj44BjGtK
yHoBQ3tWF5lg2+aMKxD+5PXg/CtwVt3ThuoVVAdnLXmXVMXIVg0oudot1+yyZkyH
TuNrfnZTnYCWRYogWP477C2AAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJZjvu9
O9CmQWln3185r59Qm0O8MB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5
OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F
ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9Wp5ItLK13RcTo9Vmn0NWp2FigmizuEa+8jHwvLd1i7oGu6wAMETG
o5wVF/ehCWF+RKwyqSRqhpp2Jx0zHHqMwFwY0mO6K1WjRd3o+fMGJdyTnFBJji1F
xDXgTaTBnst8CbQiIc5tDS75NyXoH50jx/NScniblDi+aJBMixt3G8HDl5ODDhUe
gtfbu3gMRzPzjrPI3WuNEJiR3cJso5OmQ8odiB282O8Ai0xo67oUvLIlYNT3FNQq
U8qka7B4QLdddMsjK4n04wF0CwzxOfbY/TWzPvqolKdYB7K7+9/enUMBnsA0nK+H
Zi3mra0CQK1YryKOiRQ1usWPtM1TY5z1
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:58 2025 by rpki-client