This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File:                     70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier:          SMgduGxUjeIbBeilXV4SZqNrRm8DC4s83aQI+n9Y8LQ=
Subject key identifier:   0B:8C:F7:FF:17:5D:8B:0E:BB:E5:6F:21:8C:98:AE:FA:87:88:C6:77
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       0744
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number:          0722
Signing time:             Thu 18 Dec 2025 21:18:12 +0000
Manifest this update:     Thu 18 Dec 2025 21:18:12 +0000
Manifest next update:     Thu 25 Dec 2025 21:18:12 +0000
Files and hashes:         1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: MpHGsav9o9SWISkPf+qNZ+l6mxnKZ9HTBpDObVRu7Ec=)
                          2: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: 2hIQWvs5gCQjNeqkzYCi7IsHJw8uYq2a3BY4+uJn8rA=)
                          3: 34956990D75511EF80E68A39C4F9AE02.roa (hash: dxCqVoSNOkIPa8mn9WccbxZTxKG1nVMRR4a4UGacE9I=)
                          4: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: ZHB5HyWHIeMUdK8FQ83iXhPDeHhVdive57aqWkTwI34=)
                          5: 05F05106586011EE9399A92EC4F9AE02.roa (hash: uE1Fce5x0iyRAmN0knxTtSotHjcQGH0Wea/3oUShZPs=)
                          6: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: E255PQy8J0Om1w8sX22dbtF3FegoajHcFmWtic98DmU=)
                          7: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: lRSKSHnJ9I173rhXzeEXncsQoFojPmJc5tNaNSnncqo=)
                          8: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: TnWWrKTfNekbVi6pIzTrH/qhvsHIadymtQxdXn+0jBk=)
                          9: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: hXI7auCZSPvAdHOfiV427I6HYIQHsMDxA6gjGw/HO3w=)
                          10: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: u+3Kqlk1/ablMkybk1cn19GMLJzdy6UlNuONo3CbZ6Y=)
                          11: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Dec 18 21:18:12 2025 GMT
            Not After : Dec 25 21:18:12 2025 GMT
        Subject: CN=69446f94-864d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:29:85:37:e5:b9:f4:fa:9f:fe:9f:d5:7c:
                    6d:45:85:51:80:df:60:49:19:4a:fc:12:75:19:70:
                    5e:cb:b6:74:32:0d:6c:dd:ff:38:55:b9:75:21:d0:
                    91:48:62:92:8e:b3:07:12:59:ba:f4:9b:41:92:87:
                    27:d5:12:0e:25:29:65:71:5e:09:dd:49:a7:5a:b1:
                    88:09:99:5c:7d:b8:23:d3:f3:d6:c6:ae:91:3d:6c:
                    6f:75:94:eb:33:3c:01:a5:75:cb:e9:ec:ab:6c:f7:
                    4a:1b:b8:86:51:a1:06:8f:1e:af:31:28:a8:b2:30:
                    08:d1:41:ce:e5:02:c6:a3:43:f2:66:85:30:c6:45:
                    45:d5:f5:10:78:e2:0e:f9:81:0d:b8:aa:c1:51:f1:
                    d9:f5:32:e9:be:96:32:f5:09:59:25:5c:5d:ba:66:
                    24:ae:86:9e:96:b2:24:ae:61:c8:32:fa:ad:51:d4:
                    4d:11:d9:de:81:5e:f3:1f:72:58:9b:89:44:49:08:
                    d2:a1:f9:05:47:08:0a:60:73:42:fe:e7:97:bb:27:
                    21:75:a1:12:91:a6:76:3d:7a:69:b6:e2:10:be:30:
                    fc:d1:59:57:ac:84:fb:65:2f:75:70:c9:45:76:9a:
                    c9:96:4f:b4:21:7b:49:80:9e:f0:7f:2d:6b:19:8d:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:F7:FF:17:5D:8B:0E:BB:E5:6F:21:8C:98:AE:FA:87:88:C6:77
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:be:f8:a4:e8:e7:26:4f:b0:6d:c1:1b:eb:12:67:16:5d:
         62:ff:6a:8e:91:59:e7:ad:05:1a:bf:05:ab:ca:30:75:6d:08:
         2c:a7:52:22:bd:cc:f7:e9:83:c4:0c:2f:99:6c:6a:7a:29:89:
         ef:47:3d:52:26:9f:b1:c1:9e:2b:5c:ae:ea:42:ce:ad:ba:ae:
         da:33:e2:a7:0c:f0:b6:e1:4d:b4:b0:12:f7:87:ec:c4:70:ac:
         ee:5a:e1:e6:b9:e5:fd:fa:1a:99:5d:60:99:0d:3a:0a:65:57:
         f8:7a:fc:cf:24:99:b0:0e:21:9c:1c:59:0d:c6:8b:90:b4:27:
         d6:41:46:ab:3b:3e:2e:64:73:16:e2:81:5e:ed:b7:36:6c:93:
         98:83:e7:3e:4a:0f:3e:15:19:6f:f3:4b:74:dc:fd:ba:33:99:
         24:0e:80:77:47:20:17:c6:18:01:69:a2:10:65:a1:63:46:ee:
         56:3d:4e:43:6c:7e:22:df:9b:a0:01:62:5f:d2:c6:06:1a:00:
         bf:65:10:f8:ef:b0:be:6e:ca:88:96:92:60:02:d2:ce:b2:9d:
         ca:b1:45:62:a2:f9:6e:59:db:3f:78:b5:06:91:39:73:ab:0b:
         e7:ba:36:bf:b4:78:12:72:66:2d:f0:44:df:8f:1c:4d:f6:56:
         ab:fd:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:32:37 2025 by rpki-client