This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
File:                     Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json)
Hash identifier:          e7kc7If2DmQKYGjIDAkGLqbht3cz6x5sxhriBdQYYGo=
Subject key identifier:   C9:4A:23:12:F7:92:AF:A5:11:00:F7:3D:F0:B3:B9:DD:FB:7E:C5:DF
Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
Certificate issuer:       /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Certificate serial:       0400
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
Manifest number:          03FB
Signing time:             Tue 23 Dec 2025 00:20:33 +0000
Manifest this update:     Tue 23 Dec 2025 00:20:33 +0000
Manifest next update:     Tue 30 Dec 2025 00:20:33 +0000
Files and hashes:         1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: xwoTSuGdKrGoWRc0Rcln7yTCS3Hharg1rjTPHZmNOJw=)
                          2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: DozQJ1dHmAg3g97IuJSuIhOMEdC6MQhv4ugGVIX2pIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
        Validity
            Not Before: Dec 23 00:20:33 2025 GMT
            Not After : Dec 30 00:20:33 2025 GMT
        Subject: CN=6949e051-85a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:9b:35:2a:6e:3d:7c:aa:3c:1a:e0:6a:f4:
                    a5:e4:b5:87:df:5e:23:cf:84:9a:71:7c:84:82:6a:
                    83:6e:46:10:57:95:56:fd:8e:3b:3e:25:e1:04:c5:
                    45:49:22:82:ba:34:4e:7c:ec:50:e7:2e:c5:e1:27:
                    ab:19:b7:b4:19:0a:c3:bd:8d:6e:6f:8f:a0:a2:69:
                    65:04:cb:05:78:dc:4a:ae:8c:4b:0b:9a:d1:90:9f:
                    d3:01:3a:d1:8f:9a:74:50:89:b6:15:06:5d:16:bc:
                    41:61:47:fb:b0:15:ba:9f:ee:1a:11:86:ac:b7:15:
                    12:d5:58:e0:11:26:7f:be:53:c4:8f:da:da:e4:4f:
                    27:b0:57:60:cf:ff:61:ac:15:b4:90:8e:12:7a:1b:
                    fa:8a:d7:14:97:2f:a1:dd:48:63:f9:43:b7:b3:c4:
                    61:ee:ab:77:5e:c6:f9:16:30:85:a8:8f:5d:1a:df:
                    d0:a5:05:1f:22:3f:3a:1d:aa:3b:8c:14:a1:52:aa:
                    43:80:82:8d:98:14:65:74:66:fa:4f:e6:ce:55:0c:
                    ab:dd:25:cb:ba:67:d4:dd:0e:c7:b7:f3:aa:7b:f3:
                    26:61:72:97:48:2e:c1:46:95:fe:fd:81:71:f9:39:
                    61:a1:b7:70:22:88:9e:1d:ec:f9:88:ab:b8:3a:3a:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4A:23:12:F7:92:AF:A5:11:00:F7:3D:F0:B3:B9:DD:FB:7E:C5:DF
            X509v3 Authority Key Identifier:
                keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:8a:fd:12:6b:7d:a4:a1:07:04:a3:b2:7f:6d:68:b4:8e:
         0f:53:ec:05:51:19:9c:1f:26:5c:c6:2a:42:7a:9f:83:bf:6c:
         df:a7:d8:7d:5f:d4:69:ee:3f:2e:df:e8:8a:21:d8:80:3b:2c:
         4d:86:9b:df:e2:f5:2a:27:aa:62:d1:61:d2:2b:3a:32:6a:0a:
         c3:b6:12:0f:a8:4e:2e:8f:ac:ee:88:30:3c:02:b5:4a:3d:70:
         f2:63:d7:1d:45:79:3b:0e:db:db:33:77:96:37:5a:a4:73:f6:
         85:f9:10:08:85:0d:4c:e6:f7:9d:71:aa:11:e1:a2:c1:da:e5:
         b4:b2:a9:41:78:09:8b:37:f5:4d:45:11:ff:74:02:7e:00:2d:
         64:6f:29:ec:fe:b0:58:1e:31:6a:d0:3b:eb:da:b3:d2:fa:e4:
         99:7f:47:a9:4b:5a:84:96:e3:7b:70:c7:70:c5:c6:4d:ce:25:
         a8:96:ca:f5:fb:ad:d6:0d:1d:62:cc:74:2e:a1:3a:35:1e:6f:
         83:52:86:47:3f:39:a6:a3:ef:31:5c:57:95:e3:9d:a6:65:8f:
         53:a4:05:0e:f0:8f:e1:88:62:38:03:dd:61:51:40:e5:dd:05:
         9d:b2:fb:68:f8:63:db:38:42:a8:67:5b:cc:aa:6a:89:4c:96:
         79:0d:12:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF
NjY3NjA0MDIwHhcNMjUxMjIzMDAyMDMzWhcNMjUxMjMwMDAyMDMzWjAYMRYwFAYD
VQQDDA02OTQ5ZTA1MS04NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxabNSpuPXyqPBrgavSl5LWH314jz4SacXyEgmqDbkYQV5VW/Y47PiXhBMVF
SSKCujROfOxQ5y7F4SerGbe0GQrDvY1ub4+gomllBMsFeNxKroxLC5rRkJ/TATrR
j5p0UIm2FQZdFrxBYUf7sBW6n+4aEYastxUS1VjgESZ/vlPEj9ra5E8nsFdgz/9h
rBW0kI4Sehv6itcUly+h3Uhj+UO3s8Rh7qt3Xsb5FjCFqI9dGt/QpQUfIj86Hao7
jBShUqpDgIKNmBRldGb6T+bOVQyr3SXLumfU3Q7Ht/Oqe/MmYXKXSC7BRpX+/YFx
+TlhobdwIoieHez5iKu4OjpagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlKIxL3
kq+lEQD3PfCzud37fsXfMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF
RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn
YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKIor9Emt9pKEHBKOyf21otI4PU+wFURmcHyZcxipCep+Dv2zfp9h9
X9Rp7j8u3+iKIdiAOyxNhpvf4vUqJ6pi0WHSKzoyagrDthIPqE4uj6zuiDA8ArVK
PXDyY9cdRXk7DtvbM3eWN1qkc/aF+RAIhQ1M5vedcaoR4aLB2uW0sqlBeAmLN/VN
RRH/dAJ+AC1kbyns/rBYHjFq0Dvr2rPS+uSZf0epS1qEluN7cMdwxcZNziWolsr1
+63WDR1izHQuoTo1Hm+DUoZHPzmmo+8xXFeV452mZY9TpAUO8I/hiGI4A91hUUDl
3QWdsvto+GPbOEKoZ1vMqmqJTJZ5DRKp
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:19 2025 by rpki-client