This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
File:                     3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json)
Hash identifier:          z0Cv8lChdI7J+7L1pYd2RfQOGytJA1ubzdq0J4ILz4c=
Subject key identifier:   20:57:52:66:DF:4C:CA:B2:A4:DA:EB:25:74:DE:83:79:74:2A:A3:09
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Certificate issuer:       /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial:       0B7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
Manifest number:          0B73
Signing time:             Mon 22 Dec 2025 18:37:19 +0000
Manifest this update:     Mon 22 Dec 2025 18:37:19 +0000
Manifest next update:     Mon 29 Dec 2025 18:37:19 +0000
Files and hashes:         1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: urxq5YdHc16fqiVOfbbZ7AiRAfjXP0srwFZITS5+nzg=)
                          2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2938 (0xb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
        Validity
            Not Before: Dec 22 18:37:19 2025 GMT
            Not After : Dec 29 18:37:19 2025 GMT
        Subject: CN=69498fdf-a1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:b1:71:d9:3d:95:48:d5:47:da:cf:13:e1:
                    ff:ac:c1:14:3f:07:12:5e:c0:a3:e4:6a:db:90:1c:
                    51:f2:fc:9c:75:b1:68:97:46:c2:e7:b7:fd:eb:2c:
                    6a:5d:7d:2b:9e:07:4f:37:bb:ef:b5:f6:c9:11:fb:
                    dd:12:30:35:d5:a8:01:05:e8:0f:c3:6e:52:0d:cb:
                    3f:db:51:7a:f3:ef:8c:7f:ad:02:40:ff:00:68:70:
                    f0:dc:1b:c4:e3:e0:cd:f1:f1:f9:15:23:8f:86:13:
                    e6:87:9d:49:05:3b:de:e0:35:27:dd:fd:41:3c:e7:
                    90:44:a6:5e:c7:b6:3a:50:dc:5f:40:7e:4b:82:33:
                    59:63:d8:78:84:46:5c:38:4b:cf:13:f5:38:a9:e2:
                    35:bc:04:5b:54:89:06:5d:a7:57:38:aa:d2:a6:ea:
                    ff:89:9d:15:53:00:cd:cd:d8:31:14:87:da:42:ad:
                    ed:6f:1b:d4:76:28:df:07:71:b7:79:a5:08:cc:ae:
                    30:6c:75:09:ae:30:32:e8:19:fe:e6:f6:63:e7:2e:
                    25:ff:ac:20:5d:ea:c7:aa:cc:56:b3:46:bb:88:96:
                    97:b5:d6:ed:7c:09:f8:8d:91:2d:54:2b:4f:17:0d:
                    16:ae:78:00:5f:48:73:60:19:be:12:2d:fc:ea:56:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:52:66:DF:4C:CA:B2:A4:DA:EB:25:74:DE:83:79:74:2A:A3:09
            X509v3 Authority Key Identifier:
                keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:b7:70:10:1a:6a:4e:05:1e:36:80:18:1b:5f:23:e4:6b:
         87:af:07:4a:db:d1:27:80:dc:fd:bc:5c:20:b4:88:25:2a:19:
         46:be:03:7f:35:18:c0:08:8a:8c:7f:a2:18:cd:2f:cd:cb:d1:
         81:ff:9d:db:67:bb:c3:8d:40:20:2c:8e:f0:bf:81:99:e8:96:
         b6:29:9b:96:e0:91:fd:18:c2:87:76:3c:68:58:2e:b9:6b:fd:
         bd:62:0f:46:51:97:c9:0f:d5:f6:09:60:bd:91:17:02:5b:30:
         c0:f5:28:68:bf:4d:70:98:16:fb:dd:f7:1d:1b:66:5d:bf:95:
         8a:34:a5:2e:bd:3d:d9:6f:f9:ba:7a:2d:8c:d4:cd:03:9a:f3:
         95:ff:91:4e:e0:5b:be:a0:0b:dc:d7:ce:cd:7e:d7:6a:6c:14:
         12:96:5f:08:49:54:c9:1e:12:fa:1a:ae:1c:b7:87:9c:f9:5e:
         04:74:91:14:55:57:d2:05:75:37:69:95:19:6c:18:75:b3:ed:
         5d:eb:4d:b9:04:b6:b2:19:d1:ae:09:a9:3c:36:b6:0b:1e:af:
         23:c7:7c:d9:ba:b9:13:83:1d:62:14:a6:13:c0:6b:89:aa:ca:
         6a:7d:5e:4f:5f:f0:7f:e3:c0:ce:eb:84:81:81:c0:3c:69:b0:
         15:e8:39:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2
NDE1NTJFQTQwHhcNMjUxMjIyMTgzNzE5WhcNMjUxMjI5MTgzNzE5WjAYMRYwFAYD
VQQDDA02OTQ5OGZkZi1hMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmaxcdk9lUjVR9rPE+H/rMEUPwcSXsCj5GrbkBxR8vycdbFol0bC57f96yxq
XX0rngdPN7vvtfbJEfvdEjA11agBBegPw25SDcs/21F68++Mf60CQP8AaHDw3BvE
4+DN8fH5FSOPhhPmh51JBTve4DUn3f1BPOeQRKZex7Y6UNxfQH5LgjNZY9h4hEZc
OEvPE/U4qeI1vARbVIkGXadXOKrSpur/iZ0VUwDNzdgxFIfaQq3tbxvUdijfB3G3
eaUIzK4wbHUJrjAy6Bn+5vZj5y4l/6wgXerHqsxWs0a7iJaXtdbtfAn4jZEtVCtP
Fw0WrngAX0hzYBm+Ei386lZcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBXUmbf
TMqypNrrJXTeg3l0KqMJMB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy
NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTQ0Ny81RjRDNkNGMjQyNjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1Nh
bU4wRmhjLVdja0prRlZMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7/bdwEBpqTgUeNoAYG18j5GuHrwdK29EngNz9vFwgtIglKhlGvgN/
NRjACIqMf6IYzS/Ny9GB/53bZ7vDjUAgLI7wv4GZ6Ja2KZuW4JH9GMKHdjxoWC65
a/29Yg9GUZfJD9X2CWC9kRcCWzDA9Shov01wmBb73fcdG2Zdv5WKNKUuvT3Zb/m6
ei2M1M0DmvOV/5FO4Fu+oAvc187NftdqbBQSll8ISVTJHhL6Gq4ct4ec+V4EdJEU
VVfSBXU3aZUZbBh1s+1d6025BLayGdGuCak8NrYLHq8jx3zZurkTgx1iFKYTwGuJ
qspqfV5PX/B/48DO64SBgcA8abAV6Dn4
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:24 2025 by rpki-client