This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File:                     ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier:          fv/YHlVcDiIACbFJc6Awrfepr7NhzvPI2LuieFPJleY=
Subject key identifier:   1B:4C:38:EB:66:A6:C9:4F:34:48:88:6C:D6:05:19:7F:16:C5:FE:96
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer:       /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number:          7E
Signing time:             Sun 21 Dec 2025 05:53:53 +0000
Manifest this update:     Sun 21 Dec 2025 05:53:52 +0000
Manifest next update:     Sun 28 Dec 2025 05:53:52 +0000
Files and hashes:         1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: hIBCF50bRO1Sr54t/yMbgIPO+IXGc/hBQ6iHNYbTne4=)
                          2: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: +MuiZcKVfagn/EUscOGtM+jo03HbljVKVbfVcrdmvSk=)
                          3: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: TjQlu0F+YIffgV7FQsn/LMUGbUdqPRgHuxAxeA1KSRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
        Validity
            Not Before: Dec 21 05:53:52 2025 GMT
            Not After : Dec 28 05:53:52 2025 GMT
        Subject: CN=69478b71-1fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:86:0d:42:5e:ff:66:28:cc:20:a8:89:60:
                    ef:35:2f:44:39:fd:d1:36:30:ae:81:3f:6e:a6:43:
                    0a:01:77:27:6c:7d:e8:fb:2b:24:9f:7d:76:82:83:
                    d1:cc:f6:da:b3:54:1e:75:97:4d:11:86:ca:ec:4d:
                    0e:c2:f1:d6:fa:f1:1b:1f:c1:47:92:9d:15:2c:9c:
                    a3:3d:67:b9:af:2d:52:c3:10:ba:a0:67:28:a6:2f:
                    eb:10:86:26:a0:dd:55:a3:d8:39:ec:f0:ee:8a:01:
                    dc:2e:1b:d0:df:26:66:80:f5:49:b1:a4:b0:bd:38:
                    86:4b:2b:43:d2:91:de:47:ea:02:72:c2:cb:2e:d6:
                    6e:de:83:23:da:e4:59:1e:17:7c:6e:53:2e:1a:26:
                    7a:fb:d9:5d:25:b5:48:ee:8d:e3:56:4a:11:fd:ce:
                    72:af:a3:5b:34:40:5e:88:c9:2e:9f:9a:b3:4d:33:
                    1a:66:be:90:b1:73:c1:82:ca:14:6c:ab:de:af:58:
                    0f:ad:80:bb:f0:eb:d0:4a:b2:64:fd:92:38:b0:d7:
                    be:cf:70:4a:80:15:ff:12:5e:e6:6b:c7:e1:6e:17:
                    08:18:8a:a7:e6:19:92:f1:d8:34:6a:40:9c:4d:e6:
                    1f:1a:bd:ca:01:ad:39:e4:6d:1a:e0:68:65:89:ca:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:38:EB:66:A6:C9:4F:34:48:88:6C:D6:05:19:7F:16:C5:FE:96
            X509v3 Authority Key Identifier:
                keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:c3:8b:e2:15:1b:fd:e2:53:2e:bf:17:47:ed:af:4a:77:
         da:00:fd:6c:72:ab:57:4c:aa:99:fa:db:1a:ad:da:c2:26:05:
         87:d3:23:fe:ec:31:49:ce:c8:e0:93:42:db:a9:d1:46:ee:a4:
         92:4f:6c:ee:4a:bb:6f:22:32:fe:9f:32:41:82:5d:a1:61:9d:
         52:b5:54:31:93:83:8f:43:96:5c:5a:ff:4e:18:e7:6a:27:5a:
         68:6c:a8:30:34:dc:d7:43:31:61:1c:db:97:b2:ac:5a:1b:a5:
         d7:47:e5:97:cf:08:bf:21:7d:e1:74:83:e2:5e:1e:dc:26:57:
         2d:25:91:7e:72:46:32:6e:b8:9d:57:0a:be:d7:3b:a4:dc:cc:
         4d:93:b4:3c:19:b1:ea:5a:06:59:6d:c9:ac:57:6d:4c:0e:92:
         d9:38:44:5b:ea:aa:38:f7:e4:5a:6f:26:1d:a1:d7:9c:3e:b0:
         30:5a:63:66:5e:50:5a:36:9a:e4:e7:f9:67:61:73:c3:dd:4b:
         8e:82:65:79:74:1f:35:7b:bd:25:ed:11:0a:d4:b7:9a:1f:22:
         f1:04:b4:64:b7:ae:30:08:d3:62:bc:b4:71:ce:d5:3e:49:cd:
         7e:d6:0e:29:85:13:66:d6:77:ee:61:85:d9:d5:e9:56:23:62:
         77:f4:6a:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjExMTAvBgNVBAUTKEFFRTE3RERCOEM2QjM1OTk2NDYxODdEMDgxRTdDOEY3
OTg4M0UxOUQwHhcNMjUxMjIxMDU1MzUyWhcNMjUxMjI4MDU1MzUyWjAYMRYwFAYD
VQQDDA02OTQ3OGI3MS0xZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOmGDUJe/2YozCCoiWDvNS9EOf3RNjCugT9upkMKAXcnbH3o+yskn312goPR
zPbas1QedZdNEYbK7E0OwvHW+vEbH8FHkp0VLJyjPWe5ry1SwxC6oGcopi/rEIYm
oN1Vo9g57PDuigHcLhvQ3yZmgPVJsaSwvTiGSytD0pHeR+oCcsLLLtZu3oMj2uRZ
Hhd8blMuGiZ6+9ldJbVI7o3jVkoR/c5yr6NbNEBeiMkun5qzTTMaZr6QsXPBgsoU
bKver1gPrYC78OvQSrJk/ZI4sNe+z3BKgBX/El7ma8fhbhcIGIqn5hmS8dg0akCc
TeYfGr3KAa055G0a4GhlicrIiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtMOOtm
pslPNEiIbNYFGX8Wxf6WMB8GA1UdIwQYMBaAFK7hfduMazWZZGGH0IHnyPeYg+Gd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyMS8zM0VBQUM2ODJE
MDMxMUYwODNFQkIzN0FDNEY5QUUwMi9ydUY5MjR4ck5abGtZWWZRZ2VmSTk1aUQ0
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyMS8zM0VBQUM2ODJEMDMxMUYwODNFQkIzN0FDNEY5QUUwMi9ydUY5MjR4ck5a
bGtZWWZRZ2VmSTk1aUQ0WjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQo8OL4hUb/eJTLr8XR+2vSnfaAP1scqtXTKqZ+tsardrCJgWH0yP+
7DFJzsjgk0LbqdFG7qSST2zuSrtvIjL+nzJBgl2hYZ1StVQxk4OPQ5ZcWv9OGOdq
J1pobKgwNNzXQzFhHNuXsqxaG6XXR+WXzwi/IX3hdIPiXh7cJlctJZF+ckYybrid
Vwq+1zuk3MxNk7Q8GbHqWgZZbcmsV21MDpLZOERb6qo49+RabyYdodecPrAwWmNm
XlBaNprk5/lnYXPD3UuOgmV5dB81e70l7REK1LeaHyLxBLRkt64wCNNivLRxztU+
Sc1+1g4phRNm1nfuYYXZ1elWI2J39Gr+
-----END CERTIFICATE-----
Generated at Sun Dec 21 22:13:06 2025 by rpki-client