This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File:                     fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier:          SIo+pINdKaVYxrqWPi3VFi2nTjDsBhNxqHFwUZZ1JhM=
Subject key identifier:   F4:95:97:03:D2:ED:CD:EA:AB:98:FB:54:FF:D3:E1:DA:3E:F0:B4:3D
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer:       /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial:       1538
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number:          1527
Signing time:             Mon 22 Dec 2025 15:24:04 +0000
Manifest this update:     Mon 22 Dec 2025 15:24:04 +0000
Manifest next update:     Mon 29 Dec 2025 15:24:04 +0000
Files and hashes:         1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: VkRep9G5ShO2MzQO0pDU8WFMf1fx/JSqsJdop1TYQFw=)
                          2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5432 (0x1538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
        Validity
            Not Before: Dec 22 15:24:04 2025 GMT
            Not After : Dec 29 15:24:04 2025 GMT
        Subject: CN=69496294-0f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:54:7c:b6:b0:81:8b:5b:f8:79:ec:c0:65:
                    f4:f9:5a:b6:82:62:40:56:3a:6a:96:35:3a:38:46:
                    78:c3:bd:67:be:23:05:d7:31:a3:13:52:14:a4:13:
                    e3:5a:6e:40:30:8c:f4:33:77:02:c2:ac:a7:40:36:
                    28:a0:24:0a:69:28:71:78:4b:70:22:d1:9e:d1:7b:
                    eb:d1:d2:2d:a5:57:48:3d:12:aa:97:d9:d6:5d:45:
                    64:5b:17:a0:0f:4f:b2:04:35:51:9f:6d:ad:2f:cf:
                    4f:e3:0a:ea:f8:9b:1d:69:8a:5b:db:76:a6:bd:81:
                    4b:b3:99:f6:1f:d9:9f:e8:7c:8a:78:46:c8:49:4d:
                    a7:1e:7a:38:5b:29:d0:50:a2:b8:5f:58:ac:27:85:
                    e2:68:ba:e7:a5:db:4a:b2:bf:0f:ef:7b:45:8c:32:
                    67:ff:f7:9a:c7:01:5d:fa:a9:14:3c:af:1a:b3:09:
                    93:59:a5:0e:d9:fd:35:97:99:84:bf:b3:e5:55:33:
                    7b:bd:ee:ec:dd:1e:99:30:a7:1c:c1:ca:9c:84:74:
                    e0:1a:38:fc:f9:6d:e9:59:d1:0b:43:44:df:00:a0:
                    03:65:9e:a7:0a:10:72:35:b0:36:22:3f:37:d2:fd:
                    68:8b:a6:9e:ef:72:e5:2f:9e:fa:f5:7e:a5:16:8a:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:97:03:D2:ED:CD:EA:AB:98:FB:54:FF:D3:E1:DA:3E:F0:B4:3D
            X509v3 Authority Key Identifier:
                keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:d9:ba:da:64:53:79:ca:65:58:6b:30:58:17:a7:43:a8:
         ea:85:90:01:fe:65:61:e5:c7:a5:ab:03:2f:a3:59:a7:a5:91:
         97:49:d1:7b:bf:bc:30:0b:7c:18:8d:fd:61:ad:07:03:7e:b3:
         b7:af:9e:a5:28:1c:47:00:48:41:b6:e4:91:46:89:68:5e:28:
         6b:2a:e6:04:ed:89:98:a6:b0:80:84:67:fa:11:31:b2:f7:5b:
         89:36:81:a9:df:6a:51:f4:73:20:d5:5c:64:8a:6d:45:e7:b5:
         0c:c3:85:67:8e:ee:10:84:29:cc:8a:af:d2:9c:5a:82:6d:c1:
         df:0e:dd:32:5b:cd:6a:87:df:03:8b:00:9b:f6:5d:9b:00:0d:
         a9:38:ad:96:bd:cb:f0:ab:e0:01:9f:bd:c0:7b:8a:4e:f3:15:
         a9:96:21:51:5e:ba:d9:0a:a6:09:74:0b:9c:f4:22:aa:eb:76:
         66:d9:7c:a9:7a:3a:fd:c1:af:57:f3:b1:65:b6:ac:16:75:48:
         89:64:71:79:17:a8:02:e8:db:87:a4:08:bc:32:36:f9:89:91:
         81:32:47:15:8d:3d:d2:97:81:fe:d0:a8:54:b8:ba:c8:77:e8:
         bf:62:30:52:80:7b:62:20:86:b4:79:00:d7:bb:3b:cc:4f:3d:
         32:35:15:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0
RTY5OURERjQwHhcNMjUxMjIyMTUyNDA0WhcNMjUxMjI5MTUyNDA0WjAYMRYwFAYD
VQQDDA02OTQ5NjI5NC0wZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqktUfLawgYtb+HnswGX0+Vq2gmJAVjpqljU6OEZ4w71nviMF1zGjE1IUpBPj
Wm5AMIz0M3cCwqynQDYooCQKaShxeEtwItGe0Xvr0dItpVdIPRKql9nWXUVkWxeg
D0+yBDVRn22tL89P4wrq+JsdaYpb23amvYFLs5n2H9mf6HyKeEbISU2nHno4WynQ
UKK4X1isJ4XiaLrnpdtKsr8P73tFjDJn//eaxwFd+qkUPK8aswmTWaUO2f01l5mE
v7PlVTN7ve7s3R6ZMKccwcqchHTgGjj8+W3pWdELQ0TfAKADZZ6nChByNbA2Ij83
0v1oi6ae73LlL5769X6lForYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSVlwPS
7c3qq5j7VP/T4do+8LQ9MB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD
QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H
N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCD3Nm62mRTecplWGswWBenQ6jqhZAB/mVh5celqwMvo1mnpZGXSdF7
v7wwC3wYjf1hrQcDfrO3r56lKBxHAEhBtuSRRoloXihrKuYE7YmYprCAhGf6ETGy
91uJNoGp32pR9HMg1Vxkim1F57UMw4Vnju4QhCnMiq/SnFqCbcHfDt0yW81qh98D
iwCb9l2bAA2pOK2Wvcvwq+ABn73Ae4pO8xWpliFRXrrZCqYJdAuc9CKq63Zm2Xyp
ejr9wa9X87FltqwWdUiJZHF5F6gC6NuHpAi8Mjb5iZGBMkcVjT3Sl4H+0KhUuLrI
d+i/YjBSgHtiIIa0eQDXuzvMTz0yNRWo
-----END CERTIFICATE-----
Generated at Tue Dec 23 20:40:44 2025 by rpki-client