This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
File:                     B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json)
Hash identifier:          +eAYVUpSb6m1xLeiPzNJL2wNHRFhFgNzH2u+E95WE4o=
Subject key identifier:   9F:ED:E2:42:7D:CC:2E:40:2A:D5:22:ED:FC:6B:FC:E5:63:8E:2B:EF
Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
Certificate issuer:       /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Certificate serial:       0853
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
Manifest number:          0848
Signing time:             Mon 08 Dec 2025 19:51:37 +0000
Manifest this update:     Mon 08 Dec 2025 19:51:37 +0000
Manifest next update:     Mon 15 Dec 2025 19:51:37 +0000
Files and hashes:         1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: sqZ5UDLiVX6nJXm0VMzy9M9russhcxFqhduL1v1y2rg=)
                          2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: UXvIkLvoYKlKtaN8MzDWhl7hqC5GqZzxRFT3cXR5kww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
        Validity
            Not Before: Dec  8 19:51:37 2025 GMT
            Not After : Dec 15 19:51:37 2025 GMT
        Subject: CN=69372c49-0f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:cb:4c:93:64:4a:03:7a:f0:ea:80:16:2d:
                    64:f8:c0:16:cc:23:2b:df:36:be:95:ec:30:5c:c0:
                    35:06:8c:15:1f:ff:98:ee:8f:8a:f6:a7:79:da:5e:
                    f5:a8:c8:c6:10:89:f2:dd:23:3a:c5:80:48:4f:a8:
                    66:54:58:8c:31:6d:40:b3:3e:e0:8a:36:b7:e2:b2:
                    ea:95:0c:b7:27:7b:41:23:a8:bd:82:7d:00:82:95:
                    fe:d9:a5:91:1f:f4:8f:8c:aa:70:64:7c:a7:17:cb:
                    56:b0:16:75:bb:00:e4:18:f3:8e:31:ba:40:a6:49:
                    17:9b:7e:5f:23:df:77:46:de:fd:67:80:2f:2f:fd:
                    ad:d9:cd:5a:8f:e7:6c:a6:16:38:cf:04:77:47:ff:
                    86:3c:d3:b8:95:f7:cc:19:a6:ea:a1:77:fe:1d:68:
                    dd:cc:92:aa:26:ef:59:88:66:fc:e7:53:0b:de:5b:
                    9e:3b:a2:cf:ab:8e:5c:77:99:28:15:f3:a0:d9:a1:
                    eb:a8:d6:3d:b6:86:12:74:74:81:5a:4f:ec:08:31:
                    69:14:9f:08:4f:fc:06:99:cf:8c:22:25:66:71:86:
                    5d:cf:47:3b:be:8c:6d:65:54:4d:11:18:f5:62:0a:
                    79:47:58:93:c4:d0:ba:68:b3:84:a0:43:b5:78:1e:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:E2:42:7D:CC:2E:40:2A:D5:22:ED:FC:6B:FC:E5:63:8E:2B:EF
            X509v3 Authority Key Identifier:
                keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:36:66:ba:6b:0a:06:a2:4c:86:2f:0d:c0:d0:88:24:bd:40:
         27:6a:b1:19:7e:01:24:83:35:73:01:22:91:74:d4:68:e0:98:
         7b:26:86:0c:58:82:d0:0a:79:db:c0:a7:4f:1b:3d:bd:dc:f0:
         44:2e:b8:9c:d8:08:d2:b1:ae:92:2a:2e:1c:cb:d8:21:27:09:
         25:ea:fb:80:ee:63:d6:0f:d4:cd:67:e7:d3:4d:16:b7:af:b9:
         24:92:a8:b2:05:96:27:54:7a:32:e2:cc:07:bb:0e:e6:3f:62:
         74:67:c3:9a:03:ac:fc:81:f4:d0:d9:1b:8f:b8:9e:7c:71:18:
         55:89:9f:21:3e:be:20:71:4f:21:9a:0d:fa:7c:0a:e9:38:bf:
         3c:7f:5c:3c:0f:ea:31:b1:29:81:e9:3c:47:62:63:5b:b5:29:
         12:25:85:60:0b:e9:25:33:31:d1:8a:08:a8:b1:46:26:83:bd:
         3e:fc:c3:8b:fb:6c:30:4e:47:2b:82:79:61:64:fe:9b:1b:51:
         71:8b:80:be:36:23:ac:2c:d4:7b:91:bb:f0:be:62:ac:9f:b3:
         4e:ae:fc:f0:78:b1:32:ee:16:e6:e3:31:80:83:86:fc:e1:23:
         5a:2c:11:89:e4:e0:cf:38:8f:fe:99:3a:c8:94:6c:34:41:c6:
         c9:84:72:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC
MjdFQTg4MUYwHhcNMjUxMjA4MTk1MTM3WhcNMjUxMjE1MTk1MTM3WjAYMRYwFAYD
VQQDEw02OTM3MmM0OS0wZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1QrLTJNkSgN68OqAFi1k+MAWzCMr3za+lewwXMA1BowVH/+Y7o+K9qd52l71
qMjGEIny3SM6xYBIT6hmVFiMMW1Asz7gija34rLqlQy3J3tBI6i9gn0AgpX+2aWR
H/SPjKpwZHynF8tWsBZ1uwDkGPOOMbpApkkXm35fI993Rt79Z4AvL/2t2c1aj+ds
phY4zwR3R/+GPNO4lffMGabqoXf+HWjdzJKqJu9ZiGb851ML3lueO6LPq45cd5ko
FfOg2aHrqNY9toYSdHSBWk/sCDFpFJ8IT/wGmc+MIiVmcYZdz0c7voxtZVRNERj1
Ygp5R1iTxNC6aLOEoEO1eB5ZsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/t4kJ9
zC5AKtUi7fxr/OVjjivvMB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD
MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp
cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiNma6awoGokyGLw3A0IgkvUAnarEZfgEkgzVzASKRdNRo4Jh7JoYM
WILQCnnbwKdPGz293PBELric2AjSsa6SKi4cy9ghJwkl6vuA7mPWD9TNZ+fTTRa3
r7kkkqiyBZYnVHoy4swHuw7mP2J0Z8OaA6z8gfTQ2RuPuJ58cRhViZ8hPr4gcU8h
mg36fArpOL88f1w8D+oxsSmB6TxHYmNbtSkSJYVgC+klMzHRigiosUYmg70+/MOL
+2wwTkcrgnlhZP6bG1Fxi4C+NiOsLNR7kbvwvmKsn7NOrvzweLEy7hbm4zGAg4b8
4SNaLBGJ5ODPOI/+mTrIlGw0QcbJhHK9
-----END CERTIFICATE-----
Generated at Wed Dec 10 04:19:12 2025 by rpki-client