This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File:                     V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier:          JJs32DFU7tdZrh+vpGeYsHhiz6Jp4+TFzergbJk7p6I=
Subject key identifier:   C6:A8:DD:37:BC:2C:B9:8E:DC:E2:AF:B2:D6:4A:1C:05:D9:94:E5:87
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer:       /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number:          D4
Signing time:             Tue 23 Dec 2025 04:42:25 +0000
Manifest this update:     Tue 23 Dec 2025 04:42:24 +0000
Manifest next update:     Tue 30 Dec 2025 04:42:24 +0000
Files and hashes:         1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: wnqrHNGNZSZL78lySW5dFyoLODo6gzQ/O95hKADQF74=)
                          2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: 59709TYd4BYZbsPTssB//DoW2gqjEPI/Hf7sdt1S0uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
        Validity
            Not Before: Dec 23 04:42:24 2025 GMT
            Not After : Dec 30 04:42:24 2025 GMT
        Subject: CN=694a1db1-b57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4d:07:95:75:49:6e:b6:8c:4a:e6:14:aa:05:
                    b7:a6:f6:88:de:6e:aa:17:7a:7e:81:c5:d2:c8:69:
                    4e:1f:62:ec:c2:a1:e2:b4:7f:1a:b8:05:8e:e0:e6:
                    30:3f:62:63:58:a2:8f:a0:18:f4:19:c1:d6:0a:4e:
                    35:24:7c:d1:ef:e0:d9:46:07:da:a0:6a:92:9e:50:
                    2d:a1:b6:b1:c0:97:bb:b0:5c:c1:f6:82:d2:e2:88:
                    38:52:33:14:24:94:41:f3:4b:95:12:69:03:04:53:
                    7e:47:35:58:1f:16:3e:80:df:31:96:1e:51:61:68:
                    c0:80:80:5c:a8:ad:d5:59:3c:f3:b0:91:af:5e:0b:
                    76:b0:0b:43:02:f2:7a:19:c7:c4:50:6f:29:8e:db:
                    ef:ac:e2:02:4b:c2:91:b5:97:a7:c5:da:35:9c:35:
                    d1:d1:b3:b8:61:0e:22:42:ee:28:81:ed:3d:c9:63:
                    26:59:a3:2f:cc:9c:a6:5e:11:fd:16:5c:3c:5b:aa:
                    7c:cd:0d:1d:a1:81:28:d2:b0:69:22:9c:e6:f1:31:
                    0e:a0:2e:d8:41:64:17:2d:b7:45:b6:ec:a3:fb:aa:
                    8b:45:f9:59:1e:3d:e9:cd:a3:b9:ab:7b:d7:93:61:
                    d0:4b:52:64:28:21:ba:c9:69:2c:14:4b:fc:31:f3:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A8:DD:37:BC:2C:B9:8E:DC:E2:AF:B2:D6:4A:1C:05:D9:94:E5:87
            X509v3 Authority Key Identifier:
                keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:60:08:77:3c:e9:3c:93:ae:7b:40:27:00:0d:c5:f1:81:0f:
         88:74:e7:83:2a:af:f7:b8:c7:49:c1:f6:94:ea:96:a6:e4:e2:
         82:7d:2f:23:e8:f6:f7:5e:65:7c:19:03:5f:7b:89:11:2a:65:
         01:02:39:f5:d8:06:2a:e4:fb:24:40:f4:85:ed:d1:c6:f5:13:
         a7:d1:30:ca:af:c8:f3:84:bf:f0:0b:3a:a8:b6:69:02:20:2c:
         2f:51:61:2c:ef:0d:8b:2a:31:2f:6b:8c:be:80:95:d2:95:eb:
         28:8c:42:99:da:47:c3:9e:1b:ac:43:97:22:9e:06:7f:18:ea:
         6b:17:c3:ba:1b:3d:ea:30:f4:eb:28:6c:2e:ed:7c:e6:52:11:
         4f:53:a5:11:53:f7:1f:13:9e:f6:92:95:9a:b8:b4:34:f9:92:
         42:7a:93:69:21:92:9b:94:9d:2a:97:79:31:fa:db:5c:52:9a:
         db:50:f4:84:1e:d7:41:ee:1a:d0:a5:56:4f:e7:29:0d:95:98:
         14:4b:4f:65:71:06:7f:06:a7:1c:b9:75:74:7a:1a:b6:e9:39:
         e3:3e:1f:43:56:19:46:cd:52:e0:15:a8:c5:23:e5:42:2e:f4:
         cd:39:9e:c8:90:22:30:59:f6:b3:6f:51:f7:b9:cd:de:1b:eb:
         e1:78:3c:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1RDkxMTAvBgNVBAUTKDU3QjU4MzJCNDkwMDE4MTlDQUUxQ0NCOTJDREIxQ0I0
Njg4N0UwOUMwHhcNMjUxMjIzMDQ0MjI0WhcNMjUxMjMwMDQ0MjI0WjAYMRYwFAYD
VQQDDA02OTRhMWRiMS1iNTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9U0HlXVJbraMSuYUqgW3pvaI3m6qF3p+gcXSyGlOH2LswqHitH8auAWO4OYw
P2JjWKKPoBj0GcHWCk41JHzR7+DZRgfaoGqSnlAtobaxwJe7sFzB9oLS4og4UjMU
JJRB80uVEmkDBFN+RzVYHxY+gN8xlh5RYWjAgIBcqK3VWTzzsJGvXgt2sAtDAvJ6
GcfEUG8pjtvvrOICS8KRtZenxdo1nDXR0bO4YQ4iQu4oge09yWMmWaMvzJymXhH9
Flw8W6p8zQ0doYEo0rBpIpzm8TEOoC7YQWQXLbdFtuyj+6qLRflZHj3pzaO5q3vX
k2HQS1JkKCG6yWksFEv8MfM0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMao3Te8
LLmO3OKvstZKHAXZlOWHMB8GA1UdIwQYMBaAFFe1gytJABgZyuHMuSzbHLRoh+Cc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DNTRGMjI0NkEy
ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi9WN1dESzBrQUdCbks0Y3k1TE5zY3RHaUg0
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Y3V0RLMGtBR0JuSzRjeTVMTnNjdEdpSDRKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTVEOS9DNTRGMjI0NkEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi9WN1dESzBrQUdC
bks0Y3k1TE5zY3RHaUg0SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnYAh3POk8k657QCcADcXxgQ+IdOeDKq/3uMdJwfaU6pam5OKCfS8j
6Pb3XmV8GQNfe4kRKmUBAjn12AYq5PskQPSF7dHG9ROn0TDKr8jzhL/wCzqotmkC
ICwvUWEs7w2LKjEva4y+gJXSlesojEKZ2kfDnhusQ5cingZ/GOprF8O6Gz3qMPTr
KGwu7XzmUhFPU6URU/cfE572kpWauLQ0+ZJCepNpIZKblJ0ql3kx+ttcUprbUPSE
HtdB7hrQpVZP5ykNlZgUS09lcQZ/BqccuXV0ehq26TnjPh9DVhlGzVLgFajFI+VC
LvTNOZ7IkCIwWfazb1H3uc3eG+vheDxw
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:09 2025 by rpki-client