This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
File:                     anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json)
Hash identifier:          3ktofAfsC6iJC8i8BeqBpLznaNOzMPl/NifcIcp2yyo=
Subject key identifier:   54:05:E3:B6:96:64:8B:81:AA:3D:DB:5E:6D:E7:44:59:47:7F:F4:3C
Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
Certificate issuer:       /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Certificate serial:       0D1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
Manifest number:          0D13
Signing time:             Mon 22 Dec 2025 17:39:55 +0000
Manifest this update:     Mon 22 Dec 2025 17:39:54 +0000
Manifest next update:     Mon 29 Dec 2025 17:39:54 +0000
Files and hashes:         1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: hC12BXIBK888kgNCWxKKzPtzs1d6YxisQwGq+O4w+rQ=)
                          2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: Wr1nIVXklBpPXHRfvPiRNdEC8EzroDNqpMylbn6Uxs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
                          rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
        Validity
            Not Before: Dec 22 17:39:54 2025 GMT
            Not After : Dec 29 17:39:54 2025 GMT
        Subject: CN=6949826a-db40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:3b:fe:93:71:6c:a2:ef:d4:c4:23:fb:14:
                    5a:b4:8f:74:d8:e0:32:69:6a:21:8b:48:d2:88:ee:
                    67:27:a1:76:77:c8:75:36:43:a2:4c:61:c6:e6:23:
                    c6:b7:b5:5b:18:ca:d6:11:f6:6f:03:b0:87:d9:cb:
                    59:39:98:f7:45:84:32:3f:a2:72:f0:21:92:67:15:
                    59:4b:ad:84:09:f1:93:7d:4b:1e:af:85:24:31:3f:
                    5e:d1:f9:67:5e:7f:86:e8:a0:a0:99:3a:35:85:c9:
                    f6:08:b3:2b:57:85:58:63:7d:89:b4:11:bd:f7:9e:
                    0d:1a:24:5b:92:50:a4:4e:d9:44:fc:af:91:7d:ee:
                    e8:40:25:23:67:6f:1c:60:5d:b2:07:b2:22:57:d6:
                    df:79:ce:36:ba:ad:25:94:ac:f6:ec:03:7c:e0:c9:
                    d9:66:dd:7d:36:48:88:75:ef:57:92:d2:b5:0a:11:
                    ab:34:31:cd:78:37:7f:92:6e:f1:05:13:3b:52:2d:
                    5c:00:cd:7a:ef:c3:c9:7b:86:8d:97:a7:8f:ee:18:
                    17:6a:09:77:fd:55:d0:c9:e9:3a:3c:0d:32:38:7d:
                    c9:c2:50:b7:d8:e4:09:11:b1:0f:49:b4:55:73:b0:
                    2c:f8:4e:71:76:f1:e4:64:83:7d:10:e3:47:64:73:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:05:E3:B6:96:64:8B:81:AA:3D:DB:5E:6D:E7:44:59:47:7F:F4:3C
            X509v3 Authority Key Identifier:
                keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:91:87:89:07:e0:c0:65:f0:c3:a1:90:d5:0e:9a:49:4d:
         c4:dd:77:85:b9:23:36:2c:6f:a8:33:06:67:1a:df:f7:e7:42:
         0c:f5:3c:8d:9c:16:8b:9b:81:b9:fe:ab:c1:c4:10:5a:3b:27:
         aa:05:12:b1:b1:2a:ee:4f:27:68:5b:d8:93:90:34:9d:37:cd:
         12:1f:bf:dc:46:cf:ef:78:92:9e:34:a9:23:63:eb:5d:0d:b6:
         72:ab:8a:65:ed:7a:2f:ea:77:0c:ea:85:45:8a:87:4a:d2:78:
         3b:c5:c5:1e:07:a1:2c:15:ca:a8:ea:2b:56:d6:e1:60:07:e7:
         1d:88:db:8b:02:f5:4a:b4:1e:cf:d2:e6:7c:91:41:5a:29:4b:
         62:f7:ba:84:0c:ab:b9:13:fb:33:e6:dc:45:4d:ca:91:2c:46:
         02:83:fa:f0:8e:44:bc:da:26:6d:12:f4:47:c0:40:5f:a0:c0:
         62:78:ed:32:0d:ed:85:9c:0e:a5:83:f6:5d:9e:4f:a4:94:f0:
         4f:b9:0c:89:b4:db:a2:0c:08:d7:6b:99:5a:94:ae:1d:d1:d3:
         86:bd:18:8d:21:ba:64:5f:a8:83:67:c0:3f:63:be:9a:c7:37:
         ae:a7:5d:1c:01:58:e3:1a:e6:60:a5:f0:60:ba:75:4b:1a:b3:
         87:4c:22:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB
OTIxMEZENzYwHhcNMjUxMjIyMTczOTU0WhcNMjUxMjI5MTczOTU0WjAYMRYwFAYD
VQQDDA02OTQ5ODI2YS1kYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk4c7/pNxbKLv1MQj+xRatI902OAyaWohi0jSiO5nJ6F2d8h1NkOiTGHG5iPG
t7VbGMrWEfZvA7CH2ctZOZj3RYQyP6Jy8CGSZxVZS62ECfGTfUser4UkMT9e0fln
Xn+G6KCgmTo1hcn2CLMrV4VYY32JtBG9954NGiRbklCkTtlE/K+Rfe7oQCUjZ28c
YF2yB7IiV9bfec42uq0llKz27AN84MnZZt19NkiIde9XktK1ChGrNDHNeDd/km7x
BRM7Ui1cAM1678PJe4aNl6eP7hgXagl3/VXQyek6PA0yOH3JwlC32OQJEbEPSbRV
c7As+E5xdvHkZIN9EONHZHMOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQF47aW
ZIuBqj3bXm3nRFlHf/Q8MB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw
QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU
V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTbJGHiQfgwGXww6GQ1Q6aSU3E3XeFuSM2LG+oMwZnGt/350IM9TyN
nBaLm4G5/qvBxBBaOyeqBRKxsSruTydoW9iTkDSdN80SH7/cRs/veJKeNKkjY+td
DbZyq4pl7Xov6ncM6oVFiodK0ng7xcUeB6EsFcqo6itW1uFgB+cdiNuLAvVKtB7P
0uZ8kUFaKUti97qEDKu5E/sz5txFTcqRLEYCg/rwjkS82iZtEvRHwEBfoMBieO0y
De2FnA6lg/Zdnk+klPBPuQyJtNuiDAjXa5lalK4d0dOGvRiNIbpkX6iDZ8A/Y76a
xzeup10cAVjjGuZgpfBgunVLGrOHTCLT
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:33 2025 by rpki-client