This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
File:                     MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json)
Hash identifier:          vRehMwZ2yNLhow/awk236HHbBpj6vuMcQxPSdqlziJw=
Subject key identifier:   55:EE:5A:27:15:CD:69:1B:DF:18:EB:74:12:D8:F8:63:A9:7A:E7:0B
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Certificate issuer:       /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial:       032B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
Manifest number:          0326
Signing time:             Tue 23 Dec 2025 00:05:11 +0000
Manifest this update:     Tue 23 Dec 2025 00:05:11 +0000
Manifest next update:     Tue 30 Dec 2025 00:05:11 +0000
Files and hashes:         1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: r0N/JY5w99QySk+PmC5TAAwLfKEK+MDPlWpESMnOhFQ=)
                          2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: MIhJBQ/IYNcOuozmSACr2/1KtqYw3Vi4E6eq3oh42As=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
                          rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
        Validity
            Not Before: Dec 23 00:05:11 2025 GMT
            Not After : Dec 30 00:05:11 2025 GMT
        Subject: CN=6949dcb7-a687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:64:7e:d4:5e:44:8b:e5:7e:76:0f:f6:0d:
                    ac:c0:a1:39:34:f8:c5:6c:4f:4b:c9:69:c8:c0:c6:
                    63:05:7d:89:32:bd:b9:b2:b4:26:d7:6d:c1:f2:d1:
                    f7:d6:8f:11:57:a4:43:20:25:b7:f9:cb:ac:19:bc:
                    bc:a4:a9:be:40:12:68:5d:17:94:b4:06:fc:5b:80:
                    6e:01:2d:8e:cf:78:6c:48:1b:39:11:6b:40:b0:a1:
                    49:3f:e0:d4:9c:80:15:37:3e:a1:48:dc:d0:09:fe:
                    4b:23:74:e1:b4:92:47:81:b9:53:4e:5e:78:e9:ba:
                    48:4d:65:6c:db:17:f1:93:33:fb:f9:8c:9f:f7:0d:
                    da:97:3c:58:65:37:56:a6:88:5f:68:13:47:80:a0:
                    33:06:a2:40:e5:f0:ed:6b:8c:52:b6:d4:35:b9:49:
                    8f:c6:95:69:35:09:66:f4:2e:a9:30:7c:02:95:55:
                    e3:db:07:6e:54:00:82:0a:7e:33:a6:0f:59:a5:28:
                    30:e3:57:f2:bb:ee:b7:b3:c8:17:17:04:df:1d:92:
                    a8:41:71:7f:63:51:ae:12:d8:e7:2c:e6:b0:bb:1a:
                    6c:a3:55:03:d3:85:f8:b5:8d:76:5f:72:86:a6:f3:
                    1c:d2:db:4d:6e:58:a2:64:7e:11:b2:1c:e1:eb:b7:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:5A:27:15:CD:69:1B:DF:18:EB:74:12:D8:F8:63:A9:7A:E7:0B
            X509v3 Authority Key Identifier:
                keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:23:03:25:57:3b:36:56:35:e9:1e:85:08:c9:0b:a7:eb:
         95:c9:31:7b:6d:30:27:eb:ff:b4:6f:7f:96:e7:de:e1:03:a3:
         bc:71:61:9c:aa:6f:0a:57:a0:d0:08:ed:2d:9a:95:89:9f:ee:
         6e:d2:dd:ad:bf:7e:28:6d:4c:a2:4d:4b:2f:00:3c:91:af:40:
         1f:14:ad:c6:da:3c:9b:1a:d7:47:9b:4a:70:03:fc:af:60:bf:
         90:4f:16:8a:d1:48:85:8d:a7:a1:9c:b9:e0:63:5a:7d:9c:9f:
         9e:6c:c9:f6:3e:40:b5:d6:11:8d:16:10:83:49:f0:3d:a7:31:
         91:01:f4:8d:6d:49:09:7e:4f:fb:d9:29:77:cf:60:aa:3e:02:
         68:35:f4:4b:d0:c1:1a:b2:a6:d2:54:96:f3:db:a9:09:30:e5:
         c0:b8:7b:ce:85:bc:5f:02:78:fd:38:b6:a8:68:ef:c3:2f:9f:
         a8:41:ad:13:e5:ad:1e:80:36:0c:50:c1:ec:9d:39:e3:61:2f:
         9c:db:bc:53:d0:9e:d7:01:9a:bf:16:df:36:a7:95:c5:6d:ac:
         52:4f:40:0f:56:7d:97:7d:1b:09:09:fd:dd:66:72:c4:90:3e:
         f7:dc:0c:6c:3f:1f:ee:74:36:84:03:f1:2e:d6:19:1a:df:5a:
         9f:f4:61:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1
RDMyQkFGQUIwHhcNMjUxMjIzMDAwNTExWhcNMjUxMjMwMDAwNTExWjAYMRYwFAYD
VQQDDA02OTQ5ZGNiNy1hNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxlkftReRIvlfnYP9g2swKE5NPjFbE9LyWnIwMZjBX2JMr25srQm123B8tH3
1o8RV6RDICW3+cusGby8pKm+QBJoXReUtAb8W4BuAS2Oz3hsSBs5EWtAsKFJP+DU
nIAVNz6hSNzQCf5LI3ThtJJHgblTTl546bpITWVs2xfxkzP7+Yyf9w3alzxYZTdW
pohfaBNHgKAzBqJA5fDta4xSttQ1uUmPxpVpNQlm9C6pMHwClVXj2wduVACCCn4z
pg9ZpSgw41fyu+63s8gXFwTfHZKoQXF/Y1GuEtjnLOawuxpso1UD04X4tY12X3KG
pvMc0ttNbliiZH4Rshzh67ergQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXuWicV
zWkb3xjrdBLY+GOpeucLMB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy
QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzEwMC9FNDNEQzVDQUYyQkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFk
MjZTbTFFQkIxNXBkTXJyNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHjiMDJVc7NlY16R6FCMkLp+uVyTF7bTAn6/+0b3+W597hA6O8cWGc
qm8KV6DQCO0tmpWJn+5u0t2tv34obUyiTUsvADyRr0AfFK3G2jybGtdHm0pwA/yv
YL+QTxaK0UiFjaehnLngY1p9nJ+ebMn2PkC11hGNFhCDSfA9pzGRAfSNbUkJfk/7
2Sl3z2CqPgJoNfRL0MEasqbSVJbz26kJMOXAuHvOhbxfAnj9OLaoaO/DL5+oQa0T
5a0egDYMUMHsnTnjYS+c27xT0J7XAZq/Ft82p5XFbaxST0APVn2XfRsJCf3dZnLE
kD733AxsPx/udDaEA/Eu1hka31qf9GGt
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:42 2025 by rpki-client