This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File:                     sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier:          WB12tiWxWrB6OC3rlqqyCn4pPDThUUYNUEX+tpeNkYw=
Subject key identifier:   66:8B:85:40:84:D4:39:06:98:41:A2:B2:FD:72:AD:F3:52:7F:76:F0
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer:       /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial:       09A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number:          1625
Signing time:             Thu 18 Dec 2025 18:08:03 +0000
Manifest this update:     Thu 18 Dec 2025 18:08:02 +0000
Manifest next update:     Thu 25 Dec 2025 18:08:02 +0000
Files and hashes:         1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: cTX8cGyuCxQ+MfIXQhnglZjq5GDkYTbKdvlCK4SvKQQ=)
                          2: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=)
                          3: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=)
                          4: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
        Validity
            Not Before: Dec 18 18:08:02 2025 GMT
            Not After : Dec 25 18:08:02 2025 GMT
        Subject: CN=69444302-a092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:8f:ae:57:60:5c:da:fe:05:3b:68:db:b4:
                    36:5c:cf:e8:b3:ed:de:02:ed:8a:f8:3f:db:26:b7:
                    70:cd:8b:70:cf:f0:34:54:81:b1:c4:f6:5e:a9:0f:
                    9f:14:c6:7a:fa:d8:e0:76:52:2d:c4:be:e2:7f:94:
                    87:7c:1a:5c:3b:d6:f1:5e:d0:66:5d:6d:66:ab:62:
                    9f:ba:12:83:fa:6b:93:ae:d0:57:99:dd:92:c5:88:
                    d1:cb:8d:2b:25:35:3d:c6:5d:0b:8f:8e:c9:6f:0f:
                    7f:61:5b:a6:f5:e7:5b:23:ed:ab:ca:da:1d:59:7a:
                    7b:84:6d:53:34:8e:67:e9:0a:52:37:7d:e7:79:e8:
                    0e:f8:ee:9a:96:05:1b:d4:97:df:65:cc:ad:0f:42:
                    80:1b:af:b7:6b:94:02:17:0d:02:22:3f:b6:06:3f:
                    36:69:bd:e6:d8:79:4a:a7:49:f4:da:32:82:1a:ab:
                    59:e3:94:ac:9c:f0:44:bb:f8:b6:f9:c1:93:32:b9:
                    cc:74:cf:4c:8c:d4:e3:68:d9:ff:66:45:96:4f:20:
                    a6:eb:eb:0e:4c:a8:a4:0a:5b:45:96:6d:03:5f:3b:
                    dd:5b:6e:b7:fa:70:d4:9a:ec:3c:74:93:01:b2:dc:
                    16:11:c1:d9:ba:3c:dc:e8:4d:74:bb:01:aa:52:94:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:85:40:84:D4:39:06:98:41:A2:B2:FD:72:AD:F3:52:7F:76:F0
            X509v3 Authority Key Identifier:
                keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:b4:97:8a:2d:5a:a6:d8:83:61:39:8e:e7:9e:e1:7a:f1:
         c6:c4:6a:d4:e0:1a:51:c1:e8:ee:cf:7b:33:38:ae:cc:48:73:
         6c:99:83:c9:ff:af:b4:18:e2:31:cb:bc:22:ec:ee:19:37:46:
         7d:c4:32:30:a8:d5:44:42:ff:a1:2c:b4:ed:12:74:80:dd:76:
         4c:e5:2e:d0:fc:2c:bc:a2:7b:66:1a:c7:bc:ba:1c:34:18:7b:
         21:34:d0:b8:08:72:23:bc:15:f5:62:cb:2e:2e:f7:a7:e3:cc:
         ca:98:fd:cf:27:6d:7e:31:ec:dd:12:69:e8:98:ab:62:c6:8a:
         7c:16:08:08:bc:ae:c5:25:9a:e8:ff:d4:e1:64:05:ee:3f:43:
         df:58:50:c1:33:3f:17:77:bc:21:c1:d5:c8:c0:dd:1a:da:c0:
         9d:81:81:8d:9b:21:d5:d6:15:38:1f:f0:14:22:dc:78:01:03:
         0d:95:f1:70:6c:a0:29:7a:ba:85:02:73:28:49:9f:64:87:b2:
         9b:57:d8:b1:7d:7d:bd:22:dc:cc:13:92:f6:f1:9d:db:5a:d2:
         48:98:33:2b:5a:a3:a9:48:de:d4:0b:11:c5:77:f9:af:30:9e:
         a1:61:bb:5f:ad:51:56:8e:9b:94:29:18:6a:04:79:87:1d:70:
         16:cd:59:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG
MUMwMkY5MTEwHhcNMjUxMjE4MTgwODAyWhcNMjUxMjI1MTgwODAyWjAYMRYwFAYD
VQQDDA02OTQ0NDMwMi1hMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAot+PrldgXNr+BTto27Q2XM/os+3eAu2K+D/bJrdwzYtwz/A0VIGxxPZeqQ+f
FMZ6+tjgdlItxL7if5SHfBpcO9bxXtBmXW1mq2KfuhKD+muTrtBXmd2SxYjRy40r
JTU9xl0Lj47Jbw9/YVum9edbI+2rytodWXp7hG1TNI5n6QpSN33neegO+O6algUb
1JffZcytD0KAG6+3a5QCFw0CIj+2Bj82ab3m2HlKp0n02jKCGqtZ45SsnPBEu/i2
+cGTMrnMdM9MjNTjaNn/ZkWWTyCm6+sOTKikCltFlm0DXzvdW263+nDUmuw8dJMB
stwWEcHZujzc6E10uwGqUpRRqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaLhUCE
1DkGmEGisv1yrfNSf3bwMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3
RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt
UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0
Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAX1LSXii1aptiDYTmO557hevHGxGrU4BpRwejuz3szOK7MSHNsmYPJ
/6+0GOIxy7wi7O4ZN0Z9xDIwqNVEQv+hLLTtEnSA3XZM5S7Q/Cy8ontmGse8uhw0
GHshNNC4CHIjvBX1YssuLven48zKmP3PJ21+MezdEmnomKtixop8FggIvK7FJZro
/9ThZAXuP0PfWFDBMz8Xd7whwdXIwN0a2sCdgYGNmyHV1hU4H/AUItx4AQMNlfFw
bKAperqFAnMoSZ9kh7KbV9ixfX29ItzME5L28Z3bWtJImDMrWqOpSN7UCxHFd/mv
MJ6hYbtfrVFWjpuUKRhqBHmHHXAWzVnA
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:13 2025 by rpki-client