This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File:                     p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier:          m3hyBoqQXXwxsi+TvcgWqFd9fnsH9R9M761QOeTwCPU=
Subject key identifier:   96:F9:2E:93:5E:55:D5:3F:E4:8B:42:03:73:C1:2B:47:11:D3:29:B1
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer:       /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number:          010F
Signing time:             Thu 25 Dec 2025 03:58:48 +0000
Manifest this update:     Thu 25 Dec 2025 03:58:48 +0000
Manifest next update:     Thu 01 Jan 2026 03:58:48 +0000
Files and hashes:         1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: wtcpAujP+cZg1b/Zni4U0a4IGe3z40/L5j3gQbhnPig=)
                          2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 03:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
        Validity
            Not Before: Dec 25 03:58:48 2025 GMT
            Not After : Jan  1 03:58:48 2026 GMT
        Subject: CN=694cb678-007f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:2f:ba:0c:0e:8f:c7:8c:ba:72:03:7c:db:
                    76:90:50:ca:5a:a2:14:8a:4e:5e:8a:e1:d2:b1:70:
                    df:47:59:91:f8:bd:7b:67:86:f7:58:e6:3a:b0:1f:
                    28:ea:a0:0c:1d:3d:02:96:5d:f8:6d:51:8d:ff:bb:
                    2e:95:9c:28:01:bd:7a:59:3d:d3:0b:61:f6:6d:24:
                    4d:41:f8:e2:68:f4:39:a2:74:5d:12:7c:ad:86:9d:
                    b8:50:84:2e:03:7a:df:a8:0e:1d:e7:87:68:a7:94:
                    85:15:6c:e7:c9:89:74:0c:ff:a3:77:fe:80:d4:b9:
                    b0:5f:f6:ba:ca:37:22:6d:79:9b:24:49:77:6b:5b:
                    a3:bb:31:be:3d:bc:dc:77:f2:28:31:97:7a:2a:94:
                    96:53:6c:78:b6:bd:ef:40:9e:48:1e:d3:91:51:ad:
                    e1:29:15:51:ef:9f:36:d9:ab:d1:7c:ed:c3:0f:ef:
                    60:a9:32:cc:33:15:a6:21:d0:ca:68:cb:a2:ef:7a:
                    2b:bf:e6:48:b9:20:a1:8f:18:0c:69:85:55:7f:c0:
                    c7:10:fe:d8:12:dd:7e:d4:aa:74:56:40:fa:27:5e:
                    d1:9e:b3:28:4d:3c:15:c9:06:4b:6f:42:8c:1e:1c:
                    07:a6:8f:a9:6a:42:a2:fc:3c:15:8f:e6:c2:34:58:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F9:2E:93:5E:55:D5:3F:E4:8B:42:03:73:C1:2B:47:11:D3:29:B1
            X509v3 Authority Key Identifier:
                keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:7e:9d:1c:03:0d:55:99:8e:aa:c3:09:98:75:ea:ef:77:
         e8:fa:30:35:85:06:1d:2d:1c:05:39:b2:2b:74:c1:d9:2f:e4:
         53:f8:8d:ed:4f:54:0f:d0:22:06:9f:77:7f:e2:ba:62:93:e7:
         93:5d:58:c2:48:41:bd:12:e3:71:c0:5e:56:02:a0:fd:24:31:
         0a:1e:37:de:22:21:aa:ff:91:c6:bf:4c:1e:b6:48:e7:f7:4c:
         7f:10:c2:98:d3:8a:32:ea:02:58:40:bc:21:a0:6c:69:c4:77:
         59:12:ac:6e:dc:86:87:2e:cb:2e:5c:d9:1c:e8:a0:e3:6e:a0:
         a0:36:23:98:2b:1d:37:d1:ee:af:b8:d7:2a:97:ec:fc:a0:39:
         60:4c:3b:6c:74:14:b0:15:e0:b3:65:a4:12:9e:f1:fe:17:f7:
         b2:26:87:06:96:67:dc:6f:96:4b:33:dd:6f:59:79:1e:54:81:
         7e:19:5e:bf:10:72:0e:5d:6a:f4:52:97:8e:de:4f:8b:4c:a3:
         1d:3b:db:ef:4a:c2:64:dc:1f:0f:fb:aa:80:45:5d:42:7f:4c:
         38:01:8c:25:d0:6a:20:db:59:5b:90:d8:66:4e:a2:95:5a:f9:
         96:07:a6:63:71:86:a6:a3:12:86:fe:3b:8e:8b:74:4f:ef:a2:
         3f:6c:15:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5
ODgzOTY2MDQwHhcNMjUxMjI1MDM1ODQ4WhcNMjYwMTAxMDM1ODQ4WjAYMRYwFAYD
VQQDDA02OTRjYjY3OC0wMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgcvugwOj8eMunIDfNt2kFDKWqIUik5eiuHSsXDfR1mR+L17Z4b3WOY6sB8o
6qAMHT0Cll34bVGN/7sulZwoAb16WT3TC2H2bSRNQfjiaPQ5onRdEnythp24UIQu
A3rfqA4d54dop5SFFWznyYl0DP+jd/6A1LmwX/a6yjcibXmbJEl3a1ujuzG+Pbzc
d/IoMZd6KpSWU2x4tr3vQJ5IHtORUa3hKRVR75822avRfO3DD+9gqTLMMxWmIdDK
aMui73orv+ZIuSChjxgMaYVVf8DHEP7YEt1+1Kp0VkD6J17RnrMoTTwVyQZLb0KM
HhwHpo+pakKi/DwVj+bCNFiI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb5LpNe
VdU/5ItCA3PBK0cR0ymxMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz
MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp
NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAv4n6dHAMNVZmOqsMJmHXq73fo+jA1hQYdLRwFObIrdMHZL+RT+I3t
T1QP0CIGn3d/4rpik+eTXVjCSEG9EuNxwF5WAqD9JDEKHjfeIiGq/5HGv0wetkjn
90x/EMKY04oy6gJYQLwhoGxpxHdZEqxu3IaHLssuXNkc6KDjbqCgNiOYKx030e6v
uNcql+z8oDlgTDtsdBSwFeCzZaQSnvH+F/eyJocGlmfcb5ZLM91vWXkeVIF+GV6/
EHIOXWr0UpeO3k+LTKMdO9vvSsJk3B8P+6qARV1Cf0w4AYwl0Gog21lbkNhmTqKV
WvmWB6ZjcYamoxKG/juOi3RP76I/bBU6
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:12:15 2025 by rpki-client