This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
File:                     G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json)
Hash identifier:          6JihhOjaJvqf2YHaFEkev+I/d51maH2Zonaiw/3uPtg=
Subject key identifier:   6C:34:13:1B:6B:AC:A3:27:8A:B5:72:D1:0A:7F:2C:4F:4F:C0:82:A0
Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
Certificate issuer:       /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Certificate serial:       0D97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
Manifest number:          0D80
Signing time:             Thu 18 Dec 2025 17:44:44 +0000
Manifest this update:     Thu 18 Dec 2025 17:44:44 +0000
Manifest next update:     Thu 25 Dec 2025 17:44:44 +0000
Files and hashes:         1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: dTOX41vupw9VnPnxYbE5G7CtprkHihR1sBCdHRv2rKg=)
                          2: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: JRQ7BF2DG2XDWDJQSYzrLycUZShYsOsnU2Hj3xscnfQ=)
                          3: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: xgrmtihEAIC7r7A0n9PNHwvlGM/iGDMTmZv2Djjmrdg=)
                          4: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: 0Y8jmQQMOsA8otW6hBByMKVBJCFql/NpiEG5lBKFsfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3479 (0xd97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
        Validity
            Not Before: Dec 18 17:44:44 2025 GMT
            Not After : Dec 25 17:44:44 2025 GMT
        Subject: CN=69443d8c-735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:a7:27:60:27:ab:ed:5c:7e:05:01:a7:be:
                    91:b9:0e:26:9e:fc:b9:8d:48:f0:b2:59:5d:fb:24:
                    de:5d:35:80:ec:08:47:27:90:32:41:24:6f:0c:86:
                    f2:b3:a5:c1:ba:71:59:6f:9f:3d:43:83:86:98:27:
                    d2:5a:05:f2:d0:74:9d:f3:50:67:1a:52:23:50:29:
                    36:6d:d1:ff:c0:d2:06:13:ab:6c:4a:f5:a9:75:4c:
                    29:70:c7:a5:3c:08:b7:cf:95:5e:fc:a8:4c:c7:5f:
                    69:26:3e:8f:41:e5:49:c5:12:11:fc:35:d3:59:5e:
                    e0:e5:1e:db:25:50:5c:c2:00:20:ef:0c:31:7d:a5:
                    2e:4c:1b:dd:0a:dd:12:33:a0:ce:88:ff:7f:bf:32:
                    da:7f:43:a8:e9:1f:18:c4:ea:d0:ae:c4:77:5f:95:
                    04:eb:00:e7:da:f7:69:89:3f:61:2d:66:d9:09:f9:
                    37:09:82:6f:65:ee:fb:b4:24:f1:aa:cf:d2:55:17:
                    d5:a5:58:29:52:d7:69:95:61:7d:15:64:b2:af:98:
                    ba:03:9b:ac:5d:29:69:5f:da:3e:68:3d:d4:5d:f0:
                    b0:22:89:5a:bf:13:8e:2a:eb:21:07:88:17:42:aa:
                    09:b2:f4:78:43:25:a2:20:a0:d1:78:fa:4a:19:5a:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:34:13:1B:6B:AC:A3:27:8A:B5:72:D1:0A:7F:2C:4F:4F:C0:82:A0
            X509v3 Authority Key Identifier:
                keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:43:f3:4d:4c:4d:01:93:b9:ae:10:ec:34:ea:59:7b:8a:8a:
         a7:c2:2d:5e:ac:b0:64:ef:6d:ea:a7:cf:9b:17:67:47:01:38:
         c3:90:c9:c4:30:ce:13:1c:46:18:54:91:0a:d8:3b:89:d2:4f:
         d5:03:9b:74:bc:47:7b:8e:1f:e9:e1:a9:b9:5e:2a:aa:ad:13:
         bc:2a:81:2b:6f:ac:6a:3b:bf:f8:0e:d4:cd:c6:1d:4e:09:fc:
         85:96:30:00:fa:3d:89:18:bd:f2:f3:c7:34:5a:0f:9e:42:c9:
         2f:a2:3b:35:13:f2:b0:19:cb:1c:7b:b7:bf:49:d1:34:09:e5:
         7d:23:15:73:30:8b:2f:e6:38:7f:a8:19:22:36:8b:5b:fd:08:
         01:a6:2d:cf:b2:ba:7b:d4:e8:ab:ce:0c:8a:b2:d4:c2:60:d7:
         e7:4b:3b:81:4b:57:8c:a5:b1:56:f1:43:97:1e:4e:e9:d6:b3:
         cf:4e:98:63:35:3e:9c:b1:92:37:5f:22:da:3a:43:8c:c5:5c:
         f7:e0:47:f0:4d:19:42:eb:e9:8e:69:ae:9b:46:a0:27:b6:73:
         26:73:b1:09:08:b7:b7:f2:7d:7d:ec:e5:eb:20:87:bd:50:26:
         c9:ae:f5:dc:d9:bb:cc:a0:29:0c:d4:ec:2c:85:2e:7b:44:f8:
         8f:ef:f3:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4
Mjg2NTRCMkEwHhcNMjUxMjE4MTc0NDQ0WhcNMjUxMjI1MTc0NDQ0WjAYMRYwFAYD
VQQDDA02OTQ0M2Q4Yy03MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdOnJ2Anq+1cfgUBp76RuQ4mnvy5jUjwslld+yTeXTWA7AhHJ5AyQSRvDIby
s6XBunFZb589Q4OGmCfSWgXy0HSd81BnGlIjUCk2bdH/wNIGE6tsSvWpdUwpcMel
PAi3z5Ve/KhMx19pJj6PQeVJxRIR/DXTWV7g5R7bJVBcwgAg7wwxfaUuTBvdCt0S
M6DOiP9/vzLaf0Oo6R8YxOrQrsR3X5UE6wDn2vdpiT9hLWbZCfk3CYJvZe77tCTx
qs/SVRfVpVgpUtdplWF9FWSyr5i6A5usXSlpX9o+aD3UXfCwIolavxOOKushB4gX
QqoJsvR4QyWiIKDRePpKGVoV8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw0Extr
rKMnirVy0Qp/LE9PwIKgMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC
OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK
TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhQ/NNTE0Bk7muEOw06ll7ioqnwi1erLBk723qp8+bF2dHATjDkMnE
MM4THEYYVJEK2DuJ0k/VA5t0vEd7jh/p4am5XiqqrRO8KoErb6xqO7/4DtTNxh1O
CfyFljAA+j2JGL3y88c0Wg+eQskvojs1E/KwGcsce7e/SdE0CeV9IxVzMIsv5jh/
qBkiNotb/QgBpi3Psrp71OirzgyKstTCYNfnSzuBS1eMpbFW8UOXHk7p1rPPTphj
NT6csZI3XyLaOkOMxVz34EfwTRlC6+mOaa6bRqAntnMmc7EJCLe38n197OXrIIe9
UCbJrvXc2bvMoCkM1OwshS57RPiP7/Pv
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:12:55 2025 by rpki-client