This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File:                     P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier:          EMWdyIO01qjvU3gowjj+mtUCpPdrggQ8xJmzLv14Ito=
Subject key identifier:   78:60:0F:2D:FE:1A:7A:39:B2:50:00:7F:80:15:2B:82:C6:8A:B2:B0
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer:       /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number:          0228
Signing time:             Tue 23 Dec 2025 01:06:18 +0000
Manifest this update:     Tue 23 Dec 2025 01:06:17 +0000
Manifest next update:     Tue 30 Dec 2025 01:06:17 +0000
Files and hashes:         1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: imztNUZLQWggeDseXDv02rPEpjzsAe/sqru4zTjgpD4=)
                          2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: DFdPG99faL2Uy7SH7Qallz1187Os6wr5b2O19nIz8q8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
        Validity
            Not Before: Dec 23 01:06:17 2025 GMT
            Not After : Dec 30 01:06:17 2025 GMT
        Subject: CN=6949eb0a-ccd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:c4:77:62:64:7a:84:8d:a9:87:1e:37:f3:
                    79:f7:7b:67:00:7c:74:94:d3:32:c0:0f:6f:06:33:
                    09:e0:cd:48:b8:e3:a1:b5:34:c1:c3:48:a8:1b:04:
                    fe:8c:50:44:a2:56:24:68:e4:57:31:d5:f1:64:b5:
                    00:ce:c8:ee:b6:be:29:e3:86:9d:0b:b6:8d:39:1a:
                    71:53:af:05:c6:49:0f:fb:e5:75:f2:da:d6:50:9d:
                    ed:82:25:96:fb:7b:85:98:ae:0e:8c:89:d7:bc:c3:
                    c9:d2:0e:03:08:f0:f9:d7:af:85:41:32:6a:f9:ac:
                    10:17:00:e2:da:57:a9:d1:51:de:e9:ee:fc:61:a6:
                    d7:f5:53:93:63:76:6b:75:f1:91:35:2b:b9:b9:61:
                    3e:bb:3a:42:d0:57:bf:6a:f0:6a:c4:7f:e6:28:77:
                    29:38:a8:4b:ca:b3:fe:9a:12:f2:b8:d1:c4:a6:06:
                    14:2a:d7:ed:3e:47:f7:d7:13:7c:96:d2:02:3c:b6:
                    46:95:8f:fb:87:b5:39:5f:5b:7d:27:c3:81:5d:83:
                    a6:dc:de:9c:7b:47:3f:b2:5c:9f:2f:4e:83:f7:99:
                    27:5f:fa:09:75:1f:5d:35:96:3b:a9:65:a7:40:22:
                    34:43:7b:c1:5c:70:c3:f3:f4:0f:5e:22:90:5a:eb:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:0F:2D:FE:1A:7A:39:B2:50:00:7F:80:15:2B:82:C6:8A:B2:B0
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:c7:77:6d:ae:c2:8b:f3:ed:ac:a0:c4:f9:90:cb:f9:44:
         79:17:0f:a5:83:3c:1d:16:91:12:33:6a:da:ca:02:ac:e5:23:
         bd:ee:02:31:57:a9:87:b3:79:68:49:03:13:37:3c:67:81:5c:
         b0:3d:6e:ed:fe:ef:88:5d:02:ff:9c:da:61:43:ff:0c:c8:a2:
         65:19:71:49:c1:ec:b9:6a:b6:07:32:05:58:6d:d7:d5:5d:af:
         33:ad:89:26:41:83:71:cd:cb:4e:83:f6:d5:a5:89:a6:af:6c:
         1a:0b:09:ea:a6:81:2c:e0:95:d8:03:1a:89:28:e7:77:3b:7a:
         ef:24:72:40:d0:79:5c:94:f0:d6:99:55:67:fe:e5:e0:8e:f5:
         da:1a:a5:fc:5f:4f:30:70:bf:a9:3e:3c:3a:f6:5e:9e:d5:57:
         e7:c5:b3:d1:a8:6e:7c:de:b5:4d:23:7b:ea:62:17:bd:72:fc:
         f4:12:0a:a4:ea:cc:91:c2:30:88:af:f4:01:6e:a5:7f:12:75:
         48:78:a6:6f:f3:1d:d1:57:bb:30:fa:bf:d1:43:4c:d3:91:c2:
         e5:4c:d2:11:75:8f:b5:7e:fa:c2:e7:e2:b2:f4:1d:0e:c4:72:
         c5:dc:42:a2:ac:e5:89:10:29:db:d6:09:23:4a:ee:ae:4a:a3:
         04:08:43:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2
RjJCMDYxNDgwHhcNMjUxMjIzMDEwNjE3WhcNMjUxMjMwMDEwNjE3WjAYMRYwFAYD
VQQDDA02OTQ5ZWIwYS1jY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvE3Ed2JkeoSNqYceN/N593tnAHx0lNMywA9vBjMJ4M1IuOOhtTTBw0ioGwT+
jFBEolYkaORXMdXxZLUAzsjutr4p44adC7aNORpxU68FxkkP++V18trWUJ3tgiWW
+3uFmK4OjInXvMPJ0g4DCPD516+FQTJq+awQFwDi2lep0VHe6e78YabX9VOTY3Zr
dfGRNSu5uWE+uzpC0Fe/avBqxH/mKHcpOKhLyrP+mhLyuNHEpgYUKtftPkf31xN8
ltICPLZGlY/7h7U5X1t9J8OBXYOm3N6ce0c/slyfL06D95knX/oJdR9dNZY7qWWn
QCI0Q3vBXHDD8/QPXiKQWuuvGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhgDy3+
Gno5slAAf4AVK4LGirKwMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG
REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds
dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDrMd3ba7Ci/PtrKDE+ZDL+UR5Fw+lgzwdFpESM2raygKs5SO97gIx
V6mHs3loSQMTNzxngVywPW7t/u+IXQL/nNphQ/8MyKJlGXFJwey5arYHMgVYbdfV
Xa8zrYkmQYNxzctOg/bVpYmmr2waCwnqpoEs4JXYAxqJKOd3O3rvJHJA0HlclPDW
mVVn/uXgjvXaGqX8X08wcL+pPjw69l6e1VfnxbPRqG583rVNI3vqYhe9cvz0Egqk
6syRwjCIr/QBbqV/EnVIeKZv8x3RV7sw+r/RQ0zTkcLlTNIRdY+1fvrC5+Ky9B0O
xHLF3EKirOWJECnb1gkjSu6uSqMECENq
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:23:57 2025 by rpki-client