This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
File:                     RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json)
Hash identifier:          HnPa/tdvcrVqcVqqCBdXWYxuOI9srDxh2EqppKmhQbc=
Subject key identifier:   2D:A3:49:54:12:23:E5:E8:C5:56:1E:51:B0:FB:BA:69:78:73:82:81
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Certificate issuer:       /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial:       0579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
Manifest number:          0574
Signing time:             Mon 22 Dec 2025 22:26:31 +0000
Manifest this update:     Mon 22 Dec 2025 22:26:30 +0000
Manifest next update:     Mon 29 Dec 2025 22:26:30 +0000
Files and hashes:         1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: GScf/uNsqjw7EfeEL2mvz9/7jWyu+eCU5z96gh4ePhc=)
                          2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: nOEydBH+4cGAGOdhxK92YxWSis+D+7L0G12GwB2Zf94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
                          rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A341, serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
        Validity
            Not Before: Dec 22 22:26:30 2025 GMT
            Not After : Dec 29 22:26:30 2025 GMT
        Subject: CN=6949c597-eaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:c4:b1:97:c0:a9:50:15:21:0d:b6:5b:97:
                    69:99:2e:8a:a3:27:70:1f:60:e8:27:b6:6a:c6:60:
                    dd:29:29:bc:88:4a:03:ee:80:f6:03:6a:9f:6d:4b:
                    0d:df:0f:75:a4:92:2c:ea:db:74:0f:d4:d6:49:45:
                    59:b6:8e:9a:65:5f:d4:1e:1e:29:df:79:12:88:fc:
                    72:18:91:a3:eb:e4:30:b8:c0:cb:56:b5:ca:5d:34:
                    d0:4c:d0:db:9b:6b:2b:a5:b9:b2:5f:62:a9:ff:79:
                    0f:f2:5d:6c:8c:b0:c3:57:40:18:6f:be:10:cd:0a:
                    35:40:92:fe:90:83:15:6d:65:88:62:61:93:d0:52:
                    d2:d5:62:84:62:33:90:1d:14:a3:a0:39:0c:34:10:
                    45:92:dc:7a:b4:c1:fa:d5:df:f5:f7:86:13:17:a7:
                    96:42:eb:f0:da:9c:9b:aa:dd:e2:5b:73:9a:20:49:
                    05:79:ad:b5:f1:22:62:bd:1c:06:cc:ea:e3:f1:77:
                    e7:fc:93:49:43:af:7a:e2:39:e8:e7:15:3f:c6:10:
                    5c:39:79:4e:be:cf:75:72:01:c1:81:24:b5:ff:44:
                    e5:0d:b9:49:ea:4e:02:d5:f8:0a:02:c8:ba:47:ca:
                    b8:f6:7d:94:4f:84:a4:6f:71:56:3a:32:bd:4b:6d:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:49:54:12:23:E5:E8:C5:56:1E:51:B0:FB:BA:69:78:73:82:81
            X509v3 Authority Key Identifier:
                keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:85:61:e6:ae:65:63:e0:f5:01:af:e9:93:ac:3b:6d:94:f3:
         1a:09:61:bc:4b:b2:31:f6:db:d6:32:da:74:47:e7:ff:52:30:
         3d:4d:dd:7a:c0:43:e6:3b:e4:39:3c:4d:8a:76:d4:53:25:fe:
         73:31:14:82:8f:13:de:94:a3:6e:c3:84:d4:9f:0e:58:65:c1:
         b8:cc:fe:48:c0:0b:c5:ac:3c:78:67:64:48:ad:1e:1f:d3:38:
         80:04:8b:ed:dc:87:e6:36:33:e5:17:04:ee:6c:2a:ef:f4:d2:
         3d:ba:ef:66:f3:d8:3e:67:d2:4e:26:03:ec:4c:d5:a9:e7:62:
         15:9d:cf:03:f6:24:71:a3:53:b9:cc:21:6e:fe:cf:4a:ec:57:
         67:fb:e2:0c:7f:b5:21:3b:8d:c9:f8:ae:b0:5d:73:1a:18:c0:
         5c:38:f4:43:b1:d7:c7:2f:f1:43:a8:29:81:34:b5:b5:0c:f7:
         63:d9:b1:b3:fa:fe:5c:ce:9f:7a:f8:72:43:6c:69:62:5c:ca:
         6f:cd:d5:b6:de:c1:18:c5:d3:78:c6:33:e3:b3:d3:97:30:cf:
         3c:f8:91:75:2e:91:c7:90:93:04:f0:a2:82:2c:53:f1:c7:fd:
         8e:f0:dd:a0:da:09:de:68:fd:fb:07:b9:43:57:2a:9a:09:0b:
         93:87:db:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3
MUU4RjgzRUMwHhcNMjUxMjIyMjIyNjMwWhcNMjUxMjI5MjIyNjMwWjAYMRYwFAYD
VQQDDA02OTQ5YzU5Ny1lYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ETEsZfAqVAVIQ22W5dpmS6KoydwH2DoJ7ZqxmDdKSm8iEoD7oD2A2qfbUsN
3w91pJIs6tt0D9TWSUVZto6aZV/UHh4p33kSiPxyGJGj6+QwuMDLVrXKXTTQTNDb
m2srpbmyX2Kp/3kP8l1sjLDDV0AYb74QzQo1QJL+kIMVbWWIYmGT0FLS1WKEYjOQ
HRSjoDkMNBBFktx6tMH61d/194YTF6eWQuvw2pybqt3iW3OaIEkFea218SJivRwG
zOrj8Xfn/JNJQ6964jno5xU/xhBcOXlOvs91cgHBgSS1/0TlDblJ6k4C1fgKAsi6
R8q49n2UT4Skb3FWOjK9S22LMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2jSVQS
I+XoxVYeUbD7uml4c4KBMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5
OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2
MndPT2pOTEdPdXh4NlBnLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUhWHmrmVj4PUBr+mTrDttlPMaCWG8S7Ix9tvWMtp0R+f/UjA9Td16
wEPmO+Q5PE2KdtRTJf5zMRSCjxPelKNuw4TUnw5YZcG4zP5IwAvFrDx4Z2RIrR4f
0ziABIvt3IfmNjPlFwTubCrv9NI9uu9m89g+Z9JOJgPsTNWp52IVnc8D9iRxo1O5
zCFu/s9K7Fdn++IMf7UhO43J+K6wXXMaGMBcOPRDsdfHL/FDqCmBNLW1DPdj2bGz
+v5czp96+HJDbGliXMpvzdW23sEYxdN4xjPjs9OXMM88+JF1LpHHkJME8KKCLFPx
x/2O8N2g2gneaP37B7lDVyqaCQuTh9uM
-----END CERTIFICATE-----
Generated at Tue Dec 23 14:33:50 2025 by rpki-client