This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
File:                     8630DB364752FB672480309F11531C73BFEDD599.mft (raw, json)
Hash identifier:          KrnnPcnhOfGtx/eWz00V5rblVkzVqc4gsN83e2QWSEs=
Subject key identifier:   9D:80:5E:56:E4:67:24:DC:1F:32:50:FD:B5:B7:D7:AE:CB:C4:7F:F1
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Certificate issuer:       /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial:       6660CA380B492CF7279943DC89B5A92177FEFB53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
Manifest number:          76
Signing time:             Sun 14 Dec 2025 11:30:22 +0000
Manifest this update:     Sun 14 Dec 2025 11:25:22 +0000
Manifest next update:     Mon 15 Dec 2025 14:08:22 +0000
Files and hashes:         1: 34392e3231332e36332e302f32342d3234203d3e20313534313535.roa (hash: lxmJhnE/3u/mEMAudnAPfckbhfAAPLZoqr3Lo3NuO8c=)
                          2: AS154185.asa (hash: MSTDk6sQ0aUvgIKaaCi2tXZiRmodm4WOU/kaxjVdQ1M=)
                          3: 34392e3231332e36322e302f32342d3234203d3e20323130343430.roa (hash: iyW/ljRQsKCO9JHAhgKUjRKGu4Bwdq2FqesU5BPiDEE=)
                          4: 34392e3231332e36322e302f32342d3234203d3e20323133363035.roa (hash: O+O3ngvT2eRgjWysCEGH5MTbHUuNdWckcsQv0KzXeTs=)
                          5: 8630DB364752FB672480309F11531C73BFEDD599.crl (hash: uN5fpjoFyqOsYHVgpWYwTDE21vixbvsKWK14wKqivMc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:ca:38:0b:49:2c:f7:27:99:43:dc:89:b5:a9:21:77:fe:fb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
        Validity
            Not Before: Dec 14 11:25:22 2025 GMT
            Not After : Dec 15 14:08:22 2025 GMT
        Subject: CN=9D805E56E46724DC1F3250FDB5B7D7AECBC47FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:12:92:1a:3f:d7:13:13:6a:d5:fd:ea:65:
                    c5:45:ef:b2:e9:e9:b5:65:35:93:c4:3c:5e:a2:c6:
                    0b:16:f8:a0:86:7e:f5:0e:5c:46:54:1d:f6:3b:81:
                    40:0f:53:02:fb:fd:23:f6:ee:7b:0c:d6:9f:80:6d:
                    c0:e7:78:67:05:ce:17:29:b4:25:83:b9:20:d6:34:
                    e3:85:f6:54:88:5a:d3:36:8a:8b:ea:c4:e3:af:75:
                    ea:bb:37:26:e2:48:e3:c6:7c:fb:6f:45:67:ba:46:
                    e7:c9:ff:44:7f:18:46:d9:dd:fa:23:8d:ad:3a:0b:
                    99:81:bb:27:4a:db:64:8f:29:13:ab:ad:ea:62:28:
                    29:47:41:64:d7:28:32:f9:ab:f3:4d:0b:90:a3:b0:
                    99:63:3b:9d:50:c5:52:1a:4c:29:1d:b7:db:d4:a4:
                    67:a2:49:d6:aa:85:89:a3:66:c3:15:9e:84:2e:73:
                    da:26:c5:2c:1a:22:86:0b:37:31:19:30:bf:f3:45:
                    03:87:45:58:17:7d:1a:90:61:e2:71:e3:96:c8:18:
                    12:a6:59:68:77:fc:e7:8e:b9:66:fb:89:52:56:4c:
                    97:36:92:2c:d6:f7:b6:85:19:59:7a:18:68:3b:1a:
                    55:b4:87:c4:9c:69:df:7d:79:9b:c4:b0:23:67:77:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:5E:56:E4:67:24:DC:1F:32:50:FD:B5:B7:D7:AE:CB:C4:7F:F1
            X509v3 Authority Key Identifier:
                keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:05:36:c9:76:9b:98:31:4b:90:eb:ed:a5:ec:4c:e7:2f:4b:
         b4:8b:fa:39:49:b7:aa:20:de:a3:ed:7d:4c:13:dc:3f:61:d1:
         02:ca:22:3e:e2:3f:4a:ee:ae:ca:f7:c7:94:4e:19:b2:50:a5:
         77:67:53:f1:be:2a:0d:21:9a:67:31:5b:93:aa:01:7f:d7:3c:
         16:2b:72:c8:cb:13:7f:22:b9:15:b4:c3:2c:2e:06:96:4d:19:
         ef:21:8c:a3:c4:65:b2:6e:05:ef:90:54:0b:6a:5f:da:e6:ef:
         b3:36:b4:dd:28:d5:f2:bb:8f:c1:4f:95:26:58:b3:b0:67:72:
         0d:1f:73:b6:28:85:e4:e5:44:f8:a1:b4:e0:2d:c9:6e:c5:63:
         b1:d7:fb:1a:ac:fa:e1:9d:83:c2:8d:d1:a7:78:81:2d:83:58:
         14:5b:99:54:4c:64:5d:8a:42:19:13:b3:be:71:67:92:d7:cc:
         94:73:88:f7:a2:0f:07:46:dc:b9:f1:75:3e:72:d3:36:de:3f:
         16:b7:27:ef:20:56:8a:83:7a:b6:30:64:b0:d5:3a:2d:7f:66:
         91:f8:2e:b2:40:7d:38:47:af:0a:5f:ad:66:74:26:31:59:dd:
         40:5e:fb:71:a2:50:8f:93:d6:dc:62:a0:25:13:1b:17:9d:68:
         25:36:4b:74
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZmDKOAtJLPcnmUPcibWpIXf++1MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkZDMUQwMDAwMTEwLwYDVQQFEyg4NjMwREIzNjQ3
NTJGQjY3MjQ4MDMwOUYxMTUzMUM3M0JGRURENTk5MB4XDTI1MTIxNDExMjUyMloX
DTI1MTIxNTE0MDgyMlowMzExMC8GA1UEAxMoOUQ4MDVFNTZFNDY3MjREQzFGMzI1
MEZEQjVCN0Q3QUVDQkM0N0ZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhLEpIaP9cTE2rV/eplxUXvsunptWU1k8Q8XqLGCxb4oIZ+9Q5cRlQd9juB
QA9TAvv9I/buewzWn4BtwOd4ZwXOFym0JYO5INY044X2VIha0zaKi+rE46916rs3
JuJI48Z8+29FZ7pG58n/RH8YRtnd+iONrToLmYG7J0rbZI8pE6ut6mIoKUdBZNco
Mvmr800LkKOwmWM7nVDFUhpMKR2329SkZ6JJ1qqFiaNmwxWehC5z2ibFLBoihgs3
MRkwv/NFA4dFWBd9GpBh4nHjlsgYEqZZaHf85465ZvuJUlZMlzaSLNb3toUZWXoY
aDsaVbSHxJxp3315m8SwI2d3co8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSdgF5W
5Gck3B8yUP21t9euy8R/8TAfBgNVHSMEGDAWgBSGMNs2R1L7ZySAMJ8RUxxzv+3V
mTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMxRDAwMDAvMC84NjMwREIz
NjQ3NTJGQjY3MjQ4MDMwOUYxMTUzMUM3M0JGRURENTk5LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9oakRiTmtkUy0y
Y2tnRENmRVZNY2M3X3QxWmsuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMx
RDAwMDAvMC84NjMwREIzNjQ3NTJGQjY3MjQ4MDMwOUYxMTUzMUM3M0JGRURENTk5
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEApQU2yXabmDFLkOvtpexM5y9LtIv6OUm3qiDeo+19TBPcP2HR
AsoiPuI/Su6uyvfHlE4ZslCld2dT8b4qDSGaZzFbk6oBf9c8FityyMsTfyK5FbTD
LC4Glk0Z7yGMo8Rlsm4F75BUC2pf2ubvsza03SjV8ruPwU+VJlizsGdyDR9ztiiF
5OVE+KG04C3JbsVjsdf7Gqz64Z2Dwo3Rp3iBLYNYFFuZVExkXYpCGROzvnFnktfM
lHOI96IPB0bcufF1PnLTNt4/Frcn7yBWioN6tjBksNU6LX9mkfguskB9OEevCl+t
ZnQmMVndQF77caJQj5PW3GKgJRMbF51oJTZLdA==
-----END CERTIFICATE-----