This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
File:                     2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json)
Hash identifier:          8RGaj6g6k/ORO4EJgdN8jfui8UbRuUk+yO3o8h/wyZg=
Subject key identifier:   DB:02:75:96:72:66:97:D4:66:DC:21:E0:F9:32:5E:7A:E2:3C:02:15
Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D
Certificate issuer:       /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
Certificate serial:       34FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
Manifest number:          34F4
Signing time:             Mon 22 Dec 2025 14:53:04 +0000
Manifest this update:     Mon 22 Dec 2025 14:53:03 +0000
Manifest next update:     Mon 29 Dec 2025 14:53:03 +0000
Files and hashes:         1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: NLlriFhLqF32XIidZXmz6QXnAkZWM4xpVPx7FWI4m+k=)
                          2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: RzsyMG8grNRl/TU/HKZlXJ7ZiLnl0fu14E8Z0lJpa0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl
                          rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13562 (0x34fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
        Validity
            Not Before: Dec 22 14:53:03 2025 GMT
            Not After : Dec 29 14:53:03 2025 GMT
        Subject: CN=69495b50-17ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8a:bd:f8:89:f1:11:26:01:36:7e:4e:75:9f:
                    8e:28:44:4e:59:f5:2b:1c:4a:c3:ea:17:77:a4:72:
                    cb:bb:05:05:46:63:31:ee:0f:e5:ff:2c:be:bd:e9:
                    d8:08:b1:d8:c3:98:f6:73:f0:57:03:11:dc:98:af:
                    24:5f:41:a1:83:b4:39:5b:20:4d:8f:d4:c3:11:68:
                    90:c1:03:89:ea:e6:96:0d:2c:fa:54:41:55:23:67:
                    8d:c0:ba:8c:33:63:61:fd:96:b6:f9:f8:3f:ad:10:
                    14:82:c4:75:57:0c:e8:29:80:4a:25:60:c1:ea:db:
                    a7:1a:c5:07:48:99:4f:a2:c8:ee:eb:15:24:ec:07:
                    3d:fb:c6:f3:98:de:da:1b:40:16:91:9f:66:aa:4b:
                    b3:90:08:e5:9d:2e:f3:c8:56:77:c7:da:e3:56:20:
                    2b:0e:ed:3d:1c:41:9f:b1:4a:05:11:7e:e2:11:8a:
                    f4:bb:75:5a:e6:02:09:1f:aa:31:32:05:2a:4d:28:
                    32:c9:9b:7f:dd:96:2b:0f:5d:eb:3b:f8:a3:e4:51:
                    e9:d5:72:fa:3d:3c:1c:1f:1d:03:ce:6f:e0:0c:25:
                    a3:ff:4b:69:48:41:03:cf:19:7b:9d:cc:3a:e2:61:
                    1b:97:85:ec:7b:40:59:2f:d8:36:04:0b:4a:94:f7:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:02:75:96:72:66:97:D4:66:DC:21:E0:F9:32:5E:7A:E2:3C:02:15
            X509v3 Authority Key Identifier:
                keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:b2:8b:98:46:fe:e6:45:d5:d4:2d:9f:5d:a1:c3:3d:0e:
         89:6d:cf:5b:47:27:35:9c:63:93:79:ad:c0:46:60:77:1d:1c:
         65:61:5c:20:a9:de:69:93:88:97:7c:9b:24:80:c1:2c:54:72:
         39:c5:29:13:fe:a6:3d:27:70:2b:ee:25:06:4d:98:58:c1:bc:
         a2:fb:64:79:92:bf:c8:72:38:58:6b:77:bb:49:39:c2:24:df:
         ab:ad:47:1a:c9:e4:73:47:d5:48:fb:fd:7b:a9:ce:dd:31:a9:
         a4:2a:56:23:37:e3:a5:59:4c:7b:4e:5c:f7:52:a4:d8:05:1e:
         7f:dd:13:a5:97:d1:13:6a:7e:bd:78:9b:9d:5e:7b:88:a3:2a:
         51:1f:eb:dc:93:5f:69:61:4d:8c:80:47:ae:46:a4:97:6f:8b:
         f8:00:07:7f:31:21:fa:9f:99:ca:82:b6:6c:0d:6f:06:11:6a:
         96:63:64:51:93:05:98:6b:25:a8:6f:8c:46:35:fa:09:36:1f:
         0f:cc:7d:4b:84:f1:5b:e6:fb:33:57:9b:ee:85:46:bd:87:84:
         e1:26:bd:4c:59:ea:f0:40:8d:0f:a1:3d:2b:37:f1:25:34:94:
         bf:42:18:3e:46:6c:f4:01:25:f6:44:ff:5a:17:49:48:6e:73:
         c3:c1:11:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5
NTBBMzZCN0QwHhcNMjUxMjIyMTQ1MzAzWhcNMjUxMjI5MTQ1MzAzWjAYMRYwFAYD
VQQDDA02OTQ5NWI1MC0xN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+oq9+InxESYBNn5OdZ+OKEROWfUrHErD6hd3pHLLuwUFRmMx7g/l/yy+venY
CLHYw5j2c/BXAxHcmK8kX0Ghg7Q5WyBNj9TDEWiQwQOJ6uaWDSz6VEFVI2eNwLqM
M2Nh/Za2+fg/rRAUgsR1VwzoKYBKJWDB6tunGsUHSJlPosju6xUk7Ac9+8bzmN7a
G0AWkZ9mqkuzkAjlnS7zyFZ3x9rjViArDu09HEGfsUoFEX7iEYr0u3Va5gIJH6ox
MgUqTSgyyZt/3ZYrD13rO/ij5FHp1XL6PTwcHx0Dzm/gDCWj/0tpSEEDzxl7ncw6
4mEbl4Xse0BZL9g2BAtKlPfjbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsCdZZy
ZpfUZtwh4PkyXnriPAIVMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE
OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli
SE44WFlzTGZPREtWQ2phMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlEbKLmEb+5kXV1C2fXaHDPQ6Jbc9bRyc1nGOTea3ARmB3HRxlYVwg
qd5pk4iXfJskgMEsVHI5xSkT/qY9J3Ar7iUGTZhYwbyi+2R5kr/IcjhYa3e7STnC
JN+rrUcayeRzR9VI+/17qc7dMamkKlYjN+OlWUx7Tlz3UqTYBR5/3ROll9ETan69
eJudXnuIoypRH+vck19pYU2MgEeuRqSXb4v4AAd/MSH6n5nKgrZsDW8GEWqWY2RR
kwWYayWob4xGNfoJNh8PzH1LhPFb5vszV5vuhUa9h4ThJr1MWerwQI0PoT0rN/El
NJS/Qhg+Rmz0ASX2RP9aF0lIbnPDwRFY
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:45 2025 by rpki-client