This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File:                     h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier:          Yn78lMYrssFrMJ3SmSsUJinP9ynXd1Tb8feeMBSF91k=
Subject key identifier:   F3:E8:DF:46:5C:93:3E:22:8F:C7:34:7C:A4:62:B9:E5:B2:6F:35:AF
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       1291
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number:          1281
Signing time:             Wed 31 Dec 2025 16:52:51 +0000
Manifest this update:     Wed 31 Dec 2025 16:52:51 +0000
Manifest next update:     Wed 07 Jan 2026 16:52:51 +0000
Files and hashes:         1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: dW6k9Yx6kTsShX5qRDhnyg6bLZ0kyPiQv13RABFxPeM=)
                          2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: uCuRtLaJqPZT1V5liTXsYaVKYmSfpzuCPzU/U+ZmSyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 16:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4753 (0x1291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Dec 31 16:52:51 2025 GMT
            Not After : Jan  7 16:52:51 2026 GMT
        Subject: CN=695554e3-959b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:e1:b1:a9:20:9b:d2:55:5f:75:35:3e:73:
                    88:ac:ec:d3:cd:1c:ce:47:f3:74:27:bd:12:11:41:
                    a9:1c:7c:da:e2:da:e7:be:54:ed:b2:96:5f:d9:73:
                    9c:0f:83:04:8d:94:3e:5d:39:6b:f3:25:1c:f3:d0:
                    21:21:b8:7c:96:09:69:6c:f1:bf:7d:de:2c:aa:f2:
                    46:3f:51:49:28:9d:ac:d5:89:02:5a:90:fb:53:15:
                    32:74:97:07:8e:f4:c3:01:72:0c:c4:0f:df:e3:0a:
                    23:fe:3f:2f:79:19:7c:77:67:f7:ca:05:0e:a7:b7:
                    6d:52:d6:ba:42:63:b3:27:84:71:7a:54:10:91:a3:
                    4e:84:e5:41:4a:f2:c2:c4:b7:6c:d1:65:86:06:6d:
                    b0:13:cd:59:a7:89:dc:eb:77:13:b2:5d:47:11:6d:
                    97:17:ca:e1:a5:7c:41:0b:7a:93:9a:d4:1f:71:62:
                    c2:aa:b1:5f:a8:f8:ee:ba:24:83:d0:ed:6b:7c:8b:
                    d9:04:80:b6:6c:e9:f7:61:64:59:62:12:89:79:d2:
                    a3:eb:04:29:ed:26:82:ad:22:eb:a2:f4:97:fc:bb:
                    78:3a:e1:f0:64:c7:06:1d:3d:72:b2:0d:a0:66:1c:
                    62:6d:a4:02:50:9d:b4:64:78:77:b5:a3:31:ec:f7:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:DF:46:5C:93:3E:22:8F:C7:34:7C:A4:62:B9:E5:B2:6F:35:AF
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:1e:47:65:84:47:cd:98:0f:96:83:86:a4:42:4a:a3:22:
         79:7d:53:e0:d4:f9:7f:a0:31:44:5f:eb:aa:fa:67:62:37:da:
         f0:30:5a:99:3c:f7:e2:c2:ec:df:95:73:a9:05:01:3e:a7:a4:
         41:6e:6d:40:97:6d:d9:96:9f:cb:6a:03:ac:b7:f9:ab:72:59:
         41:39:0e:37:65:b3:f5:dd:90:52:ba:34:88:cb:4d:10:43:32:
         93:59:f5:22:5f:4c:b1:d1:77:c9:18:8d:0f:83:b4:c2:a2:f5:
         c6:c7:3d:f5:86:05:a5:9f:9c:25:27:7d:34:a3:f9:7b:d9:8f:
         53:07:8d:8a:69:be:af:3d:4b:f0:91:44:ae:22:93:34:3e:3e:
         fc:bf:24:38:80:87:69:48:e9:2f:77:fe:7d:3f:1b:21:0b:16:
         c9:cb:fe:e2:7a:ed:5e:4f:8b:12:b1:e9:58:39:56:58:15:81:
         c5:b8:39:96:e9:e6:3f:00:da:e6:eb:87:d2:df:6c:91:f2:49:
         cc:ef:5e:95:9e:03:04:ea:44:ed:63:de:03:e6:6b:26:b8:9a:
         78:ff:d6:7e:2d:44:7a:23:0e:c4:97:c8:b9:11:04:d9:98:a6:
         ef:a4:cd:17:00:91:f2:41:c2:7f:30:3b:f7:5b:eb:2e:7b:85:
         8c:73:bb:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1
RUNCNzVCMEMwHhcNMjUxMjMxMTY1MjUxWhcNMjYwMTA3MTY1MjUxWjAYMRYwFAYD
VQQDDA02OTU1NTRlMy05NTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIPhsakgm9JVX3U1PnOIrOzTzRzOR/N0J70SEUGpHHza4trnvlTtspZf2XOc
D4MEjZQ+XTlr8yUc89AhIbh8lglpbPG/fd4sqvJGP1FJKJ2s1YkCWpD7UxUydJcH
jvTDAXIMxA/f4woj/j8veRl8d2f3ygUOp7dtUta6QmOzJ4RxelQQkaNOhOVBSvLC
xLds0WWGBm2wE81Zp4nc63cTsl1HEW2XF8rhpXxBC3qTmtQfcWLCqrFfqPjuuiSD
0O1rfIvZBIC2bOn3YWRZYhKJedKj6wQp7SaCrSLrovSX/Lt4OuHwZMcGHT1ysg2g
ZhxibaQCUJ20ZHh3taMx7Pf2oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPo30Zc
kz4ij8c0fKRiueWybzWvMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz
NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM
Sy1MZjIxWjhkSzlleTNXd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAh8h5HZYRHzZgPloOGpEJKoyJ5fVPg1Pl/oDFEX+uq+mdiN9rwMFqZ
PPfiwuzflXOpBQE+p6RBbm1Al23Zlp/LagOst/mrcllBOQ43ZbP13ZBSujSIy00Q
QzKTWfUiX0yx0XfJGI0Pg7TCovXGxz31hgWln5wlJ300o/l72Y9TB42Kab6vPUvw
kUSuIpM0Pj78vyQ4gIdpSOkvd/59PxshCxbJy/7ieu1eT4sSselYOVZYFYHFuDmW
6eY/ANrm64fS32yR8knM716VngME6kTtY94D5msmuJp4/9Z+LUR6Iw7El8i5EQTZ
mKbvpM0XAJHyQcJ/MDv3W+sue4WMc7sc
-----END CERTIFICATE-----
Generated at Thu Jan 1 09:44:19 2026 by rpki-client