This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          jLSKLj0834ku7uFhCFJ6v7PC7cIrqZGLJN2otfSqHmI=
Subject key identifier:   EA:63:60:CE:C4:95:00:5D:16:79:BB:9C:64:D3:F8:F3:D4:B6:1F:38
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       0911
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          0906
Signing time:             Tue 16 Dec 2025 19:55:54 +0000
Manifest this update:     Tue 16 Dec 2025 19:55:54 +0000
Manifest next update:     Tue 23 Dec 2025 19:55:54 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: TtO19B2FFU+EwgKFFS1M5Kk2OI94PO+4eYF2zj17g8A=)
                          2: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: TswTJHvENAD1Dt3sWcM8Wd5gmJihOCWr1zQhNFNqIck=)
                          3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 19:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Dec 16 19:55:54 2025 GMT
            Not After : Dec 23 19:55:54 2025 GMT
        Subject: CN=6941b94a-6f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:a8:0f:80:bd:49:fc:c4:ab:fc:20:81:12:
                    e3:7a:70:ca:d4:53:16:2b:ef:ae:aa:05:7b:47:c6:
                    20:54:88:14:5b:ad:b3:28:ea:ce:63:e5:d4:d7:86:
                    94:f7:f5:c8:54:1d:26:2d:dd:39:64:fb:c0:93:be:
                    1f:23:17:35:00:d0:4c:56:60:5b:05:30:24:6b:93:
                    6e:a1:c9:e3:97:95:47:fa:f5:10:b3:33:5c:5a:56:
                    12:25:fc:e4:f0:e1:e4:68:3f:a3:1d:11:81:1f:e0:
                    ce:d9:fa:82:99:3b:35:74:b6:e5:35:2b:0b:1e:0b:
                    dd:7b:de:3c:c0:25:d3:ed:38:37:98:c1:66:83:a3:
                    51:4a:4e:43:99:7b:54:da:47:cc:b0:00:96:a7:7b:
                    c8:e4:ac:c4:c2:b8:06:77:fc:ef:55:bc:3c:01:53:
                    bf:4b:8f:8e:bc:7e:e7:c1:a7:16:5a:96:d1:af:89:
                    38:fb:52:a3:c8:51:92:2f:d9:fd:d7:29:70:f1:b5:
                    e9:f5:9f:65:d2:84:ef:11:99:a7:7f:b5:41:b1:1c:
                    94:96:e9:d6:4f:e8:d7:98:a7:e0:8d:4c:dc:d8:2d:
                    61:2c:a0:0a:e5:9f:3a:af:c0:d5:96:4e:27:6f:4c:
                    e7:15:58:78:55:87:37:c7:d8:c6:08:f9:e6:be:10:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:60:CE:C4:95:00:5D:16:79:BB:9C:64:D3:F8:F3:D4:B6:1F:38
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:a0:19:61:c6:7a:2a:e7:1d:79:ae:03:4e:c9:db:88:d9:
         13:02:48:27:38:fa:16:b6:b0:b7:d8:95:51:8f:f0:01:47:d0:
         50:2b:c0:66:d2:0e:63:48:46:99:b1:e9:b9:b6:f1:3d:c0:d5:
         22:d9:bf:e6:a1:76:33:bd:6d:93:95:7f:6e:2e:12:6d:6f:7b:
         42:44:23:7d:06:6c:75:6a:13:4c:35:81:dd:b6:4f:23:f0:63:
         e9:a4:e1:0d:5e:9d:47:7f:61:b7:bd:1d:61:c9:13:f2:06:36:
         54:75:18:40:85:4e:c6:c0:2e:12:c5:9e:85:29:cc:a2:5f:53:
         e1:c5:61:38:9f:3e:ba:2c:f4:eb:0b:d6:b1:b9:ed:32:a2:dd:
         16:6b:67:08:2a:01:44:ac:ab:43:1e:79:8c:d8:17:05:17:16:
         db:21:b0:f2:c4:7d:09:0e:5b:a0:87:b8:20:b7:24:78:26:33:
         83:39:f0:e2:d6:c4:bd:d0:98:e5:f7:5e:f7:b5:86:79:a8:fa:
         3d:c8:e5:2d:86:3d:6c:4a:ef:fc:1b:17:fa:3d:f6:1e:e4:bd:
         42:6c:17:c0:0a:ae:9f:9c:dc:3c:77:1b:d6:f1:37:68:b3:93:
         c6:4a:83:4a:18:bd:2a:cc:22:cc:86:94:3c:e1:6f:a4:44:cd:
         77:cb:89:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE
NDdEMENCQTQwHhcNMjUxMjE2MTk1NTU0WhcNMjUxMjIzMTk1NTU0WjAYMRYwFAYD
VQQDDA02OTQxYjk0YS02ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFmoD4C9SfzEq/wggRLjenDK1FMWK++uqgV7R8YgVIgUW62zKOrOY+XU14aU
9/XIVB0mLd05ZPvAk74fIxc1ANBMVmBbBTAka5Nuocnjl5VH+vUQszNcWlYSJfzk
8OHkaD+jHRGBH+DO2fqCmTs1dLblNSsLHgvde948wCXT7Tg3mMFmg6NRSk5DmXtU
2kfMsACWp3vI5KzEwrgGd/zvVbw8AVO/S4+OvH7nwacWWpbRr4k4+1KjyFGSL9n9
1ylw8bXp9Z9l0oTvEZmnf7VBsRyUlunWT+jXmKfgjUzc2C1hLKAK5Z86r8DVlk4n
b0znFVh4VYc3x9jGCPnmvhC5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpjYM7E
lQBdFnm7nGTT+PPUth84MB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD
NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP
S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzv6AZYcZ6Kucdea4DTsnbiNkTAkgnOPoWtrC32JVRj/ABR9BQK8Bm
0g5jSEaZsem5tvE9wNUi2b/moXYzvW2TlX9uLhJtb3tCRCN9Bmx1ahNMNYHdtk8j
8GPppOENXp1Hf2G3vR1hyRPyBjZUdRhAhU7GwC4SxZ6FKcyiX1PhxWE4nz66LPTr
C9axue0yot0Wa2cIKgFErKtDHnmM2BcFFxbbIbDyxH0JDlugh7ggtyR4JjODOfDi
1sS90Jjl9173tYZ5qPo9yOUthj1sSu/8Gxf6PfYe5L1CbBfACq6fnNw8dxvW8Tdo
s5PGSoNKGL0qzCLMhpQ84W+kRM13y4k0
-----END CERTIFICATE-----
Generated at Wed Dec 17 04:17:37 2025 by rpki-client