This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File:                     5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier:          136+gopHZhyYI2hcXZ5urtQmA0qJauJY62NdMQkD8nE=
Subject key identifier:   23:7F:AA:6A:4D:08:54:ED:FF:60:F8:0B:05:96:CA:1D:88:1D:88:47
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       0915
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number:          0908
Signing time:             Sat 20 Dec 2025 19:43:47 +0000
Manifest this update:     Sat 20 Dec 2025 19:43:47 +0000
Manifest next update:     Sat 27 Dec 2025 19:43:47 +0000
Files and hashes:         1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: aL+hmWO23mDYt7qqTM1YV5jwQuchSRcovbxmsSq3EAo=)
                          2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: qDuXN79IYo1ayNnk4ZRYUkR9U2DK4zQbiGKyGGdoBrg=)
                          3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: bgNv+IqWCSXLvojk2Z7PhxXcctTDA8/7IvD4X7CUQGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: Dec 20 19:43:47 2025 GMT
            Not After : Dec 27 19:43:47 2025 GMT
        Subject: CN=6946fc73-571a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:da:2c:47:6c:af:9c:94:d2:8f:ce:db:88:
                    93:b8:fc:d5:b5:16:10:7d:6e:2d:1d:52:e2:87:d6:
                    e6:42:bb:6a:73:1a:95:c5:fa:19:cc:26:21:b0:69:
                    6c:48:3c:1a:1a:07:c3:5a:7f:78:f9:77:29:00:38:
                    a9:f1:0b:94:23:f0:53:09:6b:21:d2:bf:89:3f:9d:
                    6f:f3:c1:a8:d7:89:46:57:d0:c2:13:8d:f0:18:d6:
                    67:64:94:23:30:d8:4f:5d:6e:18:f5:ec:20:8c:ce:
                    d4:99:25:a5:96:6b:59:bf:2a:47:c5:b4:1d:9a:4e:
                    31:12:1e:ae:f5:fb:53:fe:bc:f2:dc:6b:ac:69:de:
                    79:da:31:db:08:cf:0e:7c:73:c8:a1:24:7c:d6:4c:
                    d0:91:91:6e:b6:3b:2b:27:d5:e3:4b:29:5d:4f:b7:
                    96:df:03:75:05:dc:32:fc:11:ef:6f:b7:3b:fa:01:
                    fd:f4:17:78:01:bc:97:c5:97:51:82:56:c1:7a:4d:
                    f2:4f:62:cd:7f:66:a1:10:d6:f5:3d:32:a5:bb:53:
                    ec:56:95:04:8b:f3:7d:21:61:6b:7d:2e:c7:45:bb:
                    d8:82:e9:da:bd:29:2a:d3:eb:79:5a:f7:f8:d2:c5:
                    7a:1c:ee:4c:e8:1f:9c:65:76:a1:7f:94:28:7b:e6:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7F:AA:6A:4D:08:54:ED:FF:60:F8:0B:05:96:CA:1D:88:1D:88:47
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:29:ad:53:f0:e7:11:44:c3:c4:31:1d:02:db:78:1e:20:08:
         32:84:3c:fe:8c:e3:bc:b9:19:35:ee:ab:68:a0:a3:1b:40:0a:
         ba:0b:ed:d3:82:d7:4b:6f:3e:e8:4a:d0:e5:9a:ca:fd:71:77:
         1c:b5:9e:46:1d:e0:a6:6f:ee:41:2f:ef:0f:21:2d:f3:9c:28:
         cb:93:e4:b7:8c:33:04:e8:1f:32:3d:dc:87:e0:28:1d:71:fe:
         21:86:98:48:32:97:4a:3f:21:90:4c:f1:fe:e5:86:af:c0:bb:
         85:88:e5:c1:11:5c:75:97:d2:48:20:3d:64:93:15:2c:4b:71:
         02:ec:ba:68:49:ee:ba:70:af:99:4e:68:1f:4b:9e:86:f5:15:
         8a:50:dc:81:63:21:19:c6:36:4d:0d:0d:53:83:a9:06:1d:e1:
         c8:ce:9a:f5:33:4d:f4:a9:20:32:e1:20:f1:c4:39:83:c0:fb:
         2e:3e:00:72:aa:8c:a6:a5:cf:64:79:65:37:2e:0d:ab:88:d5:
         8e:19:64:9e:9b:2c:0f:12:e5:fa:94:60:3e:a8:c1:f0:3e:a5:
         58:a1:50:e5:6c:de:4a:bd:20:d8:27:bf:ac:44:92:67:c6:72:
         29:0b:ac:75:1a:06:7f:a9:7f:15:b7:48:7c:97:c8:b1:fd:75:
         32:8d:07:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3
QzNBRkU0MDMwHhcNMjUxMjIwMTk0MzQ3WhcNMjUxMjI3MTk0MzQ3WjAYMRYwFAYD
VQQDDA02OTQ2ZmM3My01NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3HaLEdsr5yU0o/O24iTuPzVtRYQfW4tHVLih9bmQrtqcxqVxfoZzCYhsGls
SDwaGgfDWn94+XcpADip8QuUI/BTCWsh0r+JP51v88Go14lGV9DCE43wGNZnZJQj
MNhPXW4Y9ewgjM7UmSWllmtZvypHxbQdmk4xEh6u9ftT/rzy3Gusad552jHbCM8O
fHPIoSR81kzQkZFutjsrJ9XjSyldT7eW3wN1Bdwy/BHvb7c7+gH99Bd4AbyXxZdR
glbBek3yT2LNf2ahENb1PTKlu1PsVpUEi/N9IWFrfS7HRbvYgunavSkq0+t5Wvf4
0sV6HO5M6B+cZXahf5Qoe+brewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN/qmpN
CFTt/2D4CwWWyh2IHYhHMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB
QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk
UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADKa1T8OcRRMPEMR0C23geIAgyhDz+jOO8uRk17qtooKMbQAq6C+3T
gtdLbz7oStDlmsr9cXcctZ5GHeCmb+5BL+8PIS3znCjLk+S3jDME6B8yPdyH4Cgd
cf4hhphIMpdKPyGQTPH+5YavwLuFiOXBEVx1l9JIID1kkxUsS3EC7LpoSe66cK+Z
TmgfS56G9RWKUNyBYyEZxjZNDQ1Tg6kGHeHIzpr1M030qSAy4SDxxDmDwPsuPgBy
qoympc9keWU3Lg2riNWOGWSemywPEuX6lGA+qMHwPqVYoVDlbN5KvSDYJ7+sRJJn
xnIpC6x1GgZ/qX8Vt0h8l8ix/XUyjQcN
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:45:58 2025 by rpki-client