This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
File:                     j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json)
Hash identifier:          z+y9lkjzma8NuvBJRWbKEcfWt3Br8DIqTJLLKRuAkN4=
Subject key identifier:   18:08:D2:08:FD:5D:92:F9:60:98:D7:43:E1:5C:EF:0F:61:3F:96:17
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Certificate issuer:       /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial:       0C41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
Manifest number:          0C3A
Signing time:             Thu 18 Dec 2025 18:23:23 +0000
Manifest this update:     Thu 18 Dec 2025 18:23:22 +0000
Manifest next update:     Thu 25 Dec 2025 18:23:22 +0000
Files and hashes:         1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: Wva9vBJrxY7ufJ8vsWr37cJCcVAKIU15XI9SM9kdj8I=)
                          2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
                          rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3137 (0xc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
        Validity
            Not Before: Dec 18 18:23:22 2025 GMT
            Not After : Dec 25 18:23:22 2025 GMT
        Subject: CN=6944469b-5701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:b2:bf:11:18:90:2e:50:09:e5:0a:a5:32:
                    6e:69:d1:2a:13:ac:b6:44:b6:f6:5a:26:5f:61:1b:
                    6c:37:c1:6c:a7:6e:b9:b0:75:2d:03:69:55:0a:e5:
                    c0:17:9c:b7:a7:2c:e5:9b:88:0b:a3:bd:97:43:fc:
                    5c:8a:c4:6b:77:97:16:c5:18:6e:30:63:f6:cf:4b:
                    30:77:2e:20:14:3e:06:ef:7a:1c:30:43:cc:05:bb:
                    1c:d0:0f:72:52:48:6b:f6:db:61:ce:e1:88:c3:f1:
                    11:85:9b:1d:52:5a:48:02:d6:29:3d:e5:41:c7:b8:
                    4e:16:d4:7e:a8:48:b5:ad:2b:80:f8:b1:e4:ca:47:
                    9a:b5:56:82:14:97:40:24:85:88:3d:96:86:c0:b4:
                    d9:38:c6:49:95:d6:db:4a:2f:2d:d5:07:5b:bf:78:
                    8b:12:39:01:23:c1:e7:a9:ea:34:c6:cf:02:bd:d9:
                    59:bc:13:9f:62:76:c5:c4:2d:73:73:ea:a8:21:6c:
                    25:73:db:31:04:fa:de:6f:b7:97:f7:e8:09:66:3f:
                    55:06:d0:66:3a:4b:f1:2d:2e:c0:75:ce:4e:32:d5:
                    8b:4b:55:40:ae:22:db:78:97:52:b2:53:26:20:f6:
                    4e:2e:34:8f:85:ab:cf:c0:02:68:97:bb:de:aa:06:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:D2:08:FD:5D:92:F9:60:98:D7:43:E1:5C:EF:0F:61:3F:96:17
            X509v3 Authority Key Identifier:
                keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c0:e6:4e:4d:8c:cf:3d:8a:df:19:8d:3f:a9:e5:56:0e:86:
         bf:6e:98:64:1b:61:31:09:f4:a6:6f:3b:9e:54:f0:cf:69:31:
         44:35:97:49:7d:dc:7e:b0:6f:43:6f:49:b3:f7:7f:17:f2:96:
         9a:e9:35:9e:45:01:7e:06:a3:42:3b:2f:97:2a:f8:13:a6:37:
         52:e6:a3:b1:65:2d:9a:60:34:ce:61:8b:e5:8a:46:47:89:85:
         0d:11:cc:34:4c:2d:6f:80:de:e5:1b:71:ce:3d:22:68:6d:24:
         cf:bc:56:a2:50:7a:0c:6e:cc:56:00:06:fc:e5:88:14:75:b5:
         99:88:ec:55:3b:c0:2c:a0:ba:3e:2d:7b:51:ba:32:18:f7:c0:
         94:1f:c4:2b:f5:59:46:dc:98:77:07:7d:0a:4e:50:5b:d9:ba:
         fb:7f:7d:23:9a:13:c8:a2:54:d1:44:e3:7d:45:2b:c0:93:e7:
         d4:e1:22:56:05:5d:ea:38:b1:31:d1:56:b0:5c:9b:3b:a8:3f:
         5d:52:47:90:30:06:f3:8e:6d:d7:2c:02:16:ff:52:96:1b:b0:
         f0:32:bc:98:5e:74:5f:06:4d:0f:d2:8b:7b:27:75:cb:7d:7c:
         17:f5:73:0f:95:c2:e8:1c:ff:44:27:4e:2e:19:04:3a:04:75:
         77:a4:8c:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1
REZCODdEMUUwHhcNMjUxMjE4MTgyMzIyWhcNMjUxMjI1MTgyMzIyWjAYMRYwFAYD
VQQDDA02OTQ0NDY5Yi01NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9OyvxEYkC5QCeUKpTJuadEqE6y2RLb2WiZfYRtsN8Fsp265sHUtA2lVCuXA
F5y3pyzlm4gLo72XQ/xcisRrd5cWxRhuMGP2z0swdy4gFD4G73ocMEPMBbsc0A9y
Ukhr9tthzuGIw/ERhZsdUlpIAtYpPeVBx7hOFtR+qEi1rSuA+LHkykeatVaCFJdA
JIWIPZaGwLTZOMZJldbbSi8t1Qdbv3iLEjkBI8Hnqeo0xs8CvdlZvBOfYnbFxC1z
c+qoIWwlc9sxBPreb7eX9+gJZj9VBtBmOkvxLS7Adc5OMtWLS1VAriLbeJdSslMm
IPZOLjSPhavPwAJol7veqgYQ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgI0gj9
XZL5YJjXQ+Fc7w9hP5YXMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB
NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o
ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALwOZOTYzPPYrfGY0/qeVWDoa/bphkG2ExCfSmbzueVPDPaTFENZdJ
fdx+sG9Db0mz938X8paa6TWeRQF+BqNCOy+XKvgTpjdS5qOxZS2aYDTOYYvlikZH
iYUNEcw0TC1vgN7lG3HOPSJobSTPvFaiUHoMbsxWAAb85YgUdbWZiOxVO8AsoLo+
LXtRujIY98CUH8Qr9VlG3Jh3B30KTlBb2br7f30jmhPIolTRRON9RSvAk+fU4SJW
BV3qOLEx0VawXJs7qD9dUkeQMAbzjm3XLAIW/1KWG7DwMryYXnRfBk0P0ot7J3XL
fXwX9XMPlcLoHP9EJ04uGQQ6BHV3pIyx
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:36:32 2025 by rpki-client