This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File:                     DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier:          GmwPiZ70YwkRyD5PcsiPwTGaW984oGRbtmWgv1/iS+o=
Subject key identifier:   75:F4:B7:15:9B:8B:17:CB:FD:A3:21:A2:BC:CF:31:D4:25:65:5C:0F
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number:          F3
Signing time:             Tue 23 Dec 2025 04:17:34 +0000
Manifest this update:     Tue 23 Dec 2025 04:17:34 +0000
Manifest next update:     Tue 30 Dec 2025 04:17:34 +0000
Files and hashes:         1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: 56FL1p+4stBRvmb93w0aCRjki3ezhqlTQlA9Gqy2KnE=)
                          2: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=)
                          3: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Dec 23 04:17:34 2025 GMT
            Not After : Dec 30 04:17:34 2025 GMT
        Subject: CN=694a17de-a1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:da:dc:09:5a:19:ca:ab:18:2a:87:b4:da:
                    9d:ac:c2:d3:bb:34:c0:2e:6c:ee:fb:bb:d3:6b:c3:
                    89:4e:43:18:46:cf:83:04:1f:0a:7a:78:26:8f:df:
                    f7:26:cb:b0:b5:03:6f:ae:aa:5a:80:fd:5b:8a:8a:
                    2b:17:a8:a3:1a:26:d6:7c:43:f9:45:45:59:a1:d7:
                    8a:88:48:2f:38:f1:b1:52:61:6d:a2:4a:83:f8:11:
                    21:04:4d:55:bf:0e:cc:80:ee:e0:f5:63:88:e9:7b:
                    c8:3d:38:6a:c4:72:67:20:51:88:a3:bd:3d:d6:39:
                    44:15:e8:a7:53:22:dd:32:60:6e:ce:e9:7e:09:6d:
                    c7:6f:c8:b8:c9:f5:38:3a:a5:99:0b:ed:eb:70:db:
                    71:e2:6c:4f:2a:2e:6a:92:4e:7d:59:4a:81:94:7f:
                    4a:f5:ab:b7:bf:ba:de:04:91:8b:d1:a2:dc:a8:60:
                    27:ca:9e:0c:07:f2:94:a2:74:00:30:f2:49:1e:62:
                    6e:2a:df:8e:78:9a:67:0c:59:d6:04:d4:d3:2e:6b:
                    e7:21:85:54:2b:5a:a7:44:23:93:9e:0e:92:b9:48:
                    3f:e4:97:dd:9c:16:7a:80:71:d7:22:e2:6d:31:a4:
                    14:db:bc:c0:8a:cb:01:e9:7c:cc:04:d3:e5:a8:95:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:B7:15:9B:8B:17:CB:FD:A3:21:A2:BC:CF:31:D4:25:65:5C:0F
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:4f:43:79:16:5f:47:cc:8e:56:bd:3a:8f:a1:3c:00:66:
         91:10:ea:aa:bf:e0:e5:c6:4e:b9:10:14:46:0d:e8:1f:51:e0:
         5a:47:29:27:4c:1a:94:3c:b3:17:c0:33:53:f2:bc:83:67:18:
         78:1b:56:93:02:cc:5d:b7:ad:fe:11:72:8b:a7:ab:1b:43:a2:
         fe:0b:73:91:10:33:d8:57:f2:6f:34:9c:37:ed:f3:44:68:b9:
         a0:fd:d3:c1:28:65:26:10:5a:98:66:d5:86:21:b9:5f:57:39:
         25:b2:65:72:1b:b8:31:68:34:03:96:06:0e:57:e9:41:e0:2d:
         68:1e:66:8a:14:ab:33:f3:d9:1b:77:d5:6e:f9:60:b2:0b:8d:
         af:85:e9:74:7d:f0:65:1c:d8:95:6c:b9:e9:63:b5:26:65:eb:
         56:1d:8a:af:63:79:6d:fb:4a:89:8d:dc:c2:5d:e9:b2:f2:72:
         5d:e6:1d:1f:e9:1e:12:e9:80:d8:cb:d9:40:ea:89:d4:d7:cf:
         d9:18:c0:15:77:52:58:69:09:df:68:e8:94:cd:0e:95:34:28:
         be:dc:b6:ab:3b:e3:d8:af:d0:fc:f8:c1:ee:fd:75:81:e1:c2:
         d3:97:4e:97:89:78:e1:08:08:8e:84:0f:7c:c6:6d:8c:0b:4b:
         af:31:43:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE4RTIxMTAvBgNVBAUTKDBDMDUyNDNCN0VGNTU2MTFFNDBBNERCQkY3RkU3RTkx
MjA5MkE2NTIwHhcNMjUxMjIzMDQxNzM0WhcNMjUxMjMwMDQxNzM0WjAYMRYwFAYD
VQQDDA02OTRhMTdkZS1hMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnnba3AlaGcqrGCqHtNqdrMLTuzTALmzu+7vTa8OJTkMYRs+DBB8Kengmj9/3
JsuwtQNvrqpagP1bioorF6ijGibWfEP5RUVZodeKiEgvOPGxUmFtokqD+BEhBE1V
vw7MgO7g9WOI6XvIPThqxHJnIFGIo7091jlEFeinUyLdMmBuzul+CW3Hb8i4yfU4
OqWZC+3rcNtx4mxPKi5qkk59WUqBlH9K9au3v7reBJGL0aLcqGAnyp4MB/KUonQA
MPJJHmJuKt+OeJpnDFnWBNTTLmvnIYVUK1qnRCOTng6SuUg/5JfdnBZ6gHHXIuJt
MaQU27zAissB6XzMBNPlqJU8mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX0txWb
ixfL/aMhorzPMdQlZVwPMB8GA1UdIwQYMBaAFAwFJDt+9VYR5ApNu/f+fpEgkqZS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QThFMi9BNDUxRDk4NDZG
MkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZoSGtDazI3OV81LWtTQ1Nw
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RBVWtPMzcxVmhIa0NrMjc5XzUta1NDU3BsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QThFMi9BNDUxRDk4NDZGMkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZo
SGtDazI3OV81LWtTQ1NwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO9U9DeRZfR8yOVr06j6E8AGaREOqqv+Dlxk65EBRGDegfUeBaRykn
TBqUPLMXwDNT8ryDZxh4G1aTAsxdt63+EXKLp6sbQ6L+C3OREDPYV/JvNJw37fNE
aLmg/dPBKGUmEFqYZtWGIblfVzklsmVyG7gxaDQDlgYOV+lB4C1oHmaKFKsz89kb
d9Vu+WCyC42vhel0ffBlHNiVbLnpY7UmZetWHYqvY3lt+0qJjdzCXemy8nJd5h0f
6R4S6YDYy9lA6onU18/ZGMAVd1JYaQnfaOiUzQ6VNCi+3LarO+PYr9D8+MHu/XWB
4cLTl06XiXjhCAiOhA98xm2MC0uvMUNH
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:56 2025 by rpki-client