This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
File:                     45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json)
Hash identifier:          lPmfIpjnZUwAt2Dtm7O7/Ny1eYI4+Y2l42uR37DTtz4=
Subject key identifier:   D3:16:0F:ED:21:23:6E:2B:52:38:11:38:41:4F:3B:B2:A7:2F:94:E9
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Certificate issuer:       /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
Manifest number:          0285
Signing time:             Tue 23 Dec 2025 00:35:33 +0000
Manifest this update:     Tue 23 Dec 2025 00:35:33 +0000
Manifest next update:     Tue 30 Dec 2025 00:35:33 +0000
Files and hashes:         1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: xf/app8Q1CGSHf6ESYJS68EPIPSbrcVjIZtGd4horF4=)
                          2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
        Validity
            Not Before: Dec 23 00:35:33 2025 GMT
            Not After : Dec 30 00:35:33 2025 GMT
        Subject: CN=6949e3d5-e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:3e:50:fd:a0:b6:df:73:05:ff:5e:64:4c:
                    37:39:27:cc:dd:e4:26:ae:5e:f8:92:1f:9b:57:59:
                    de:62:2f:93:87:9b:e9:28:1e:ec:90:64:b4:9d:42:
                    31:d0:d8:06:74:33:67:e5:e6:0f:e6:51:c0:71:f0:
                    4c:aa:72:ef:97:bf:0f:06:78:62:dc:28:7a:69:b7:
                    2f:55:53:04:05:db:00:ca:6c:09:40:bd:bc:96:54:
                    b3:98:5c:f9:b0:3a:33:03:9b:ca:0a:c7:92:17:0e:
                    30:41:85:13:e6:64:34:7b:15:c1:9b:e1:a8:b0:fb:
                    66:9a:f4:a6:d7:d2:21:e5:52:a7:e8:c3:f0:94:62:
                    49:72:28:fb:80:49:c5:c0:60:ba:0f:64:53:a5:fe:
                    b4:ab:aa:3b:81:81:5c:a0:8c:0e:ea:da:ac:98:9a:
                    48:bd:97:cc:ee:02:6f:4e:61:04:e5:2b:d9:7b:0c:
                    2d:1e:a1:68:6e:26:16:9f:05:20:fa:7f:03:87:46:
                    ae:d6:6b:ef:80:da:18:e9:fb:a8:11:31:77:72:60:
                    49:b1:57:fb:b4:dc:87:9f:6d:fa:41:f8:89:ff:64:
                    52:63:da:62:32:c4:46:a7:5f:8f:87:31:c3:bc:95:
                    cf:51:5a:90:23:a1:af:bd:8f:72:28:a8:aa:cc:a4:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:16:0F:ED:21:23:6E:2B:52:38:11:38:41:4F:3B:B2:A7:2F:94:E9
            X509v3 Authority Key Identifier:
                keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:be:03:84:8f:d8:db:bb:e8:b2:c4:83:d6:fc:e4:18:40:f9:
         97:54:1f:94:5e:68:3a:29:75:00:be:a0:73:e5:16:f7:3f:77:
         4c:ed:f0:2e:97:b7:f2:89:55:13:d2:4b:f6:c1:37:bd:21:99:
         8f:58:37:02:06:9e:b1:53:c3:0c:0e:26:5c:33:d6:67:1f:cf:
         f2:de:75:6a:fa:06:32:a7:f5:97:60:6d:5e:e9:bc:ef:8a:e5:
         47:3d:8e:13:c8:10:1c:1a:1f:af:eb:d5:1a:83:45:3a:48:fc:
         b9:53:40:68:b9:06:ab:5e:61:57:4e:54:88:5a:b3:a8:75:91:
         ce:dd:fa:ca:d0:fd:70:e3:55:84:f7:f4:4e:f1:96:ce:8b:cb:
         c1:b1:54:04:ac:2f:34:ec:b4:0d:2d:cc:d3:e2:0d:01:a1:64:
         8e:09:55:c4:78:e7:68:96:84:7b:45:47:73:40:1f:66:8f:0b:
         63:c3:46:c7:07:f8:f2:6a:8c:7e:ab:17:3d:aa:0f:57:93:5f:
         e8:f3:ca:65:6a:dd:75:8c:7b:0b:59:b2:17:83:af:d2:fc:40:
         14:65:d4:9b:ad:0e:13:7d:ba:16:1e:e5:17:b1:73:86:0d:a3:
         60:3b:8a:e4:00:57:20:b3:3e:d2:39:b9:9c:ed:63:78:f1:63:
         0f:c6:de:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDNzMxMTAvBgNVBAUTKEUzOTM2OUJBOUREODgwOTk4N0IyMzZCNDc3QUQ3OEUx
NUM3NUFCMUMwHhcNMjUxMjIzMDAzNTMzWhcNMjUxMjMwMDAzNTMzWjAYMRYwFAYD
VQQDDA02OTQ5ZTNkNS1lMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmc+UP2gtt9zBf9eZEw3OSfM3eQmrl74kh+bV1neYi+Th5vpKB7skGS0nUIx
0NgGdDNn5eYP5lHAcfBMqnLvl78PBnhi3Ch6abcvVVMEBdsAymwJQL28llSzmFz5
sDozA5vKCseSFw4wQYUT5mQ0exXBm+GosPtmmvSm19Ih5VKn6MPwlGJJcij7gEnF
wGC6D2RTpf60q6o7gYFcoIwO6tqsmJpIvZfM7gJvTmEE5SvZewwtHqFobiYWnwUg
+n8Dh0au1mvvgNoY6fuoETF3cmBJsVf7tNyHn236QfiJ/2RSY9piMsRGp1+PhzHD
vJXPUVqQI6GvvY9yKKiqzKR82QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMWD+0h
I24rUjgROEFPO7KnL5TpMB8GA1UdIwQYMBaAFOOTabqd2ICZh7I2tHeteOFcdasc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM3My8yMTVFNUQzQTM2
NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdKbUhzamEwZDYxNDRWeDFx
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1TnB1cDNZZ0ptSHNqYTBkNjE0NFZ4MXF4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEM3My8yMTVFNUQzQTM2NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdK
bUhzamEwZDYxNDRWeDFxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6vgOEj9jbu+iyxIPW/OQYQPmXVB+UXmg6KXUAvqBz5Rb3P3dM7fAu
l7fyiVUT0kv2wTe9IZmPWDcCBp6xU8MMDiZcM9ZnH8/y3nVq+gYyp/WXYG1e6bzv
iuVHPY4TyBAcGh+v69Uag0U6SPy5U0BouQarXmFXTlSIWrOodZHO3frK0P1w41WE
9/RO8ZbOi8vBsVQErC807LQNLczT4g0BoWSOCVXEeOdoloR7RUdzQB9mjwtjw0bH
B/jyaox+qxc9qg9Xk1/o88plat11jHsLWbIXg6/S/EAUZdSbrQ4TfboWHuUXsXOG
DaNgO4rkAFcgsz7SObmc7WN48WMPxt7K
-----END CERTIFICATE-----
Generated at Tue Dec 23 05:54:28 2025 by rpki-client