This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
File:                     x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json)
Hash identifier:          7dh8xoyh+8XrtCq7JpoFL0RgD3mivgLsyozY5KDJjlU=
Subject key identifier:   68:65:9F:E7:13:69:B0:A0:98:2A:3B:89:FC:29:3C:37:9F:D7:F1:AB
Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD
Certificate issuer:       /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
Manifest number:          6B
Signing time:             Sun 21 Dec 2025 06:01:21 +0000
Manifest this update:     Sun 21 Dec 2025 06:01:20 +0000
Manifest next update:     Sun 28 Dec 2025 06:01:20 +0000
Files and hashes:         1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: oA5oCgnEIUvJ+e1WoXxNm2wtOxbftUPc1D3zBI56daw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD
        Validity
            Not Before: Dec 21 06:01:20 2025 GMT
            Not After : Dec 28 06:01:20 2025 GMT
        Subject: CN=69478d31-1c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:6f:8a:9a:ad:29:53:6b:de:7a:11:b0:a2:
                    13:ef:07:9b:e8:09:fb:06:9f:3f:f4:79:96:7d:f8:
                    1c:18:f9:cf:ee:55:a8:89:9d:05:80:d4:21:37:c9:
                    b9:d4:6b:f2:33:92:a8:e4:58:21:45:05:13:79:dc:
                    86:d9:1c:4a:cc:42:1f:10:51:e0:84:da:bc:e4:d2:
                    a3:e9:f9:eb:e7:83:c9:a6:bf:d6:09:f5:1e:47:5d:
                    6d:52:1c:1e:79:88:9b:ee:e3:ab:d4:8e:bb:49:fb:
                    c5:5f:41:be:d1:bf:cb:e1:f2:f6:87:67:26:fa:1f:
                    71:9b:3f:41:71:63:49:ca:29:02:58:98:31:92:51:
                    25:ce:ef:c7:41:fc:1d:6e:95:0d:e1:9b:3f:0d:9d:
                    c3:9b:89:af:6e:6c:07:ae:3b:c9:3a:8c:c1:a9:3e:
                    c2:23:3e:d2:16:c1:47:cc:75:1d:48:bb:6c:b8:1a:
                    eb:93:0c:aa:e6:f7:eb:ed:cf:55:41:e3:bf:46:2f:
                    67:b2:db:46:03:fa:99:93:3c:7d:c9:58:21:3a:86:
                    0c:ca:e9:91:99:26:ef:ef:6b:01:6b:71:2f:6d:a0:
                    00:32:26:ab:55:7d:c7:07:c3:6d:39:9d:d5:ea:b4:
                    9f:9b:af:1b:03:40:cf:d0:62:47:a3:91:17:37:84:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:9F:E7:13:69:B0:A0:98:2A:3B:89:FC:29:3C:37:9F:D7:F1:AB
            X509v3 Authority Key Identifier:
                keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:05:d3:13:1e:e2:ee:40:35:fe:b8:0e:6f:6e:94:85:2c:
         52:6e:4b:12:c5:d3:d2:db:34:0b:68:0b:85:74:08:44:97:fe:
         30:3f:8b:73:c2:4d:6d:c5:8e:0e:02:32:23:f5:5d:d1:5f:88:
         b2:54:f9:b5:ed:2d:66:a6:d2:68:f8:01:50:41:9e:81:b6:6a:
         9b:8d:97:41:61:d5:3e:64:99:45:2e:13:5f:b9:15:28:42:ee:
         30:f8:ac:0f:ac:a3:7d:f3:78:c5:cd:73:9b:4a:1b:f0:14:32:
         d6:ae:74:f3:0e:2e:3c:34:13:9a:e8:21:0f:b5:a4:d0:42:fd:
         7f:ba:a6:da:85:37:b4:1f:78:d1:ff:53:25:fd:2a:87:c9:d3:
         95:78:47:6d:ce:8e:cb:62:f6:1e:06:2b:b5:5b:85:53:1e:f9:
         8f:35:5e:c8:95:de:98:6f:e7:8e:d3:d5:e8:db:ec:23:ab:4d:
         26:f2:3a:3e:27:9d:95:88:c5:06:b3:fd:79:5b:a5:4d:6d:fd:
         c8:74:ba:e5:20:9f:de:46:14:f9:bb:0a:8d:56:e4:44:18:70:
         4d:70:3c:7a:2c:e3:60:40:1c:36:36:e0:04:45:c0:ac:1d:bb:
         c7:58:d9:29:ba:1f:2b:31:2d:f2:cc:b9:e7:0d:f0:a0:4a:a1:
         78:bb:2d:e8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OEJCMTExMC8GA1UEBRMoQzdGMDI4MzdEMjQ1Q0I4RkFCQ0Q0NzQxQ0ZBMkI0QTVB
MkY3M0VBRDAeFw0yNTEyMjEwNjAxMjBaFw0yNTEyMjgwNjAxMjBaMBgxFjAUBgNV
BAMMDTY5NDc4ZDMxLTFjNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/a2+Kmq0pU2veehGwohPvB5voCfsGnz/0eZZ9+BwY+c/uVaiJnQWA1CE3ybnU
a/IzkqjkWCFFBRN53IbZHErMQh8QUeCE2rzk0qPp+evng8mmv9YJ9R5HXW1SHB55
iJvu46vUjrtJ+8VfQb7Rv8vh8vaHZyb6H3GbP0FxY0nKKQJYmDGSUSXO78dB/B1u
lQ3hmz8NncObia9ubAeuO8k6jMGpPsIjPtIWwUfMdR1Iu2y4GuuTDKrm9+vtz1VB
479GL2ey20YD+pmTPH3JWCE6hgzK6ZGZJu/vawFrcS9toAAyJqtVfccHw205ndXq
tJ+brxsDQM/QYkejkRc3hFhtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaGWf5xNp
sKCYKjuJ/Ck8N5/X8aswHwYDVR0jBBgwFoAUx/AoN9JFy4+rzUdBz6K0paL3Pq0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzVBRDc2OUIwM0Qy
NTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1Bx
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveF9Bb045SkZ5NC1yelVkQno2SzBwYUwzUHEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
QkIxLzVBRDc2OUIwM0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQt
cnpVZEJ6NkswcGFMM1BxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE8wBdMTHuLuQDX+uA5vbpSFLFJuSxLF09LbNAtoC4V0CESX/jA/i3PC
TW3Fjg4CMiP1XdFfiLJU+bXtLWam0mj4AVBBnoG2apuNl0Fh1T5kmUUuE1+5FShC
7jD4rA+so33zeMXNc5tKG/AUMtaudPMOLjw0E5roIQ+1pNBC/X+6ptqFN7QfeNH/
UyX9KofJ05V4R23Ojsti9h4GK7VbhVMe+Y81XsiV3phv547T1ejb7COrTSbyOj4n
nZWIxQaz/XlbpU1t/ch0uuUgn95GFPm7Co1W5EQYcE1wPHos42BAHDY24ARFwKwd
u8dY2Sm6HysxLfLMuecN8KBKoXi7Leg=
-----END CERTIFICATE-----
Generated at Sun Dec 21 15:39:16 2025 by rpki-client