This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          +Ch88PstZ6RGt0t2B++orDOkzDLhIIPrAv2CtGPMFRo=
Subject key identifier:   F4:4E:75:E0:E2:19:26:F2:BD:ED:67:2A:8F:72:E7:73:24:0F:AD:4D
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          078B
Signing time:             Fri 12 Dec 2025 20:53:48 +0000
Manifest this update:     Fri 12 Dec 2025 20:53:48 +0000
Manifest next update:     Fri 19 Dec 2025 20:53:48 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: p1dhRG8FlESZgJVkaLsWvZe3MvCx4x4oVbg2BEv1vqs=)
                          2: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
                          3: 56D3C71687AB11F095613811C4F9AE02.roa (hash: aD2CLMizmkDNhBVFcvaNkcRkyod1i+1AjvAvs5tf+7Q=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 20:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Dec 12 20:53:48 2025 GMT
            Not After : Dec 19 20:53:48 2025 GMT
        Subject: CN=693c80dc-2dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:b7:c5:bd:93:14:00:d7:33:22:1b:00:3d:
                    19:80:c3:72:3d:54:e0:5a:db:6b:07:d3:f8:b2:69:
                    c2:c2:c2:ff:0c:55:59:62:85:6f:14:65:cd:d6:02:
                    87:2a:a4:8c:7a:1d:21:33:7e:dc:63:25:e3:3d:c7:
                    bf:7a:a7:04:32:d0:e3:b4:de:c7:69:9f:cb:86:a7:
                    83:30:ca:2a:1e:3f:1d:67:1b:32:5f:50:e4:be:c9:
                    d1:fd:60:6a:db:4a:f0:b4:b4:37:0c:a9:94:05:b2:
                    39:f0:3d:92:28:08:a5:fa:25:28:8f:5e:1c:2b:6f:
                    10:fa:71:bf:90:2d:8d:39:1f:9e:2c:b8:11:31:8b:
                    64:ef:7f:4a:ef:72:27:17:a1:e1:d5:39:c3:6f:9b:
                    50:11:c5:d5:08:88:9c:c3:20:d2:74:c0:57:64:dc:
                    7a:1a:a6:54:e6:ba:c7:5b:9d:d9:44:06:6e:f2:e0:
                    39:54:fa:38:95:2d:ff:c2:29:03:0e:42:66:15:5d:
                    a9:5b:ca:28:50:68:8b:3b:93:ee:a3:4c:56:f7:4b:
                    88:fd:0d:b4:25:81:7e:fc:f7:45:be:6f:e7:e8:8c:
                    0f:52:26:80:8a:97:e8:e2:d9:2c:95:77:bd:45:9e:
                    cb:02:3f:2d:e3:b3:3b:73:38:0b:7f:33:d7:4f:d4:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4E:75:E0:E2:19:26:F2:BD:ED:67:2A:8F:72:E7:73:24:0F:AD:4D
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:55:fb:ba:38:a0:c1:3c:a4:2f:cc:ef:16:8c:e7:0b:91:
         1a:8a:01:a9:25:59:86:74:c4:c3:ed:80:87:4d:cb:65:86:d2:
         58:15:92:e4:7a:db:21:0a:83:c3:23:a1:40:5c:3b:62:76:c3:
         e7:59:62:2b:d8:45:39:24:6d:bc:a3:c9:2e:1f:4a:a7:00:7b:
         4c:60:03:a5:22:83:6e:fb:84:9e:f4:68:e0:b2:e2:59:51:1e:
         67:38:a5:97:4f:37:3f:29:f8:70:31:1c:af:50:64:99:2e:08:
         e1:fd:9f:ea:dc:92:01:4d:78:16:f8:3d:8c:cf:52:f2:0a:72:
         62:67:88:d7:2b:87:52:6a:cb:df:46:cc:ba:a4:72:c1:be:03:
         20:89:35:46:42:cb:a9:db:6e:4b:26:15:fb:fc:a3:20:91:78:
         bb:20:c5:86:e3:4d:24:08:3f:a0:b4:88:7c:61:cb:cf:46:45:
         48:84:63:bb:fd:6c:27:2b:38:c1:5a:ea:bc:1c:f3:fc:30:8a:
         27:b7:f3:1b:41:61:a6:86:b0:17:e9:f3:76:a5:3a:02:7a:15:
         06:d5:54:00:5e:f3:5c:98:fc:ed:63:be:44:6d:26:50:d5:4f:
         5d:4d:16:d3:e4:5f:a9:55:ac:56:bf:07:fb:98:85:bf:50:85:
         55:35:7f:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5
Nzc2NUU3QTkwHhcNMjUxMjEyMjA1MzQ4WhcNMjUxMjE5MjA1MzQ4WjAYMRYwFAYD
VQQDDA02OTNjODBkYy0yZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroG3xb2TFADXMyIbAD0ZgMNyPVTgWttrB9P4smnCwsL/DFVZYoVvFGXN1gKH
KqSMeh0hM37cYyXjPce/eqcEMtDjtN7HaZ/LhqeDMMoqHj8dZxsyX1DkvsnR/WBq
20rwtLQ3DKmUBbI58D2SKAil+iUoj14cK28Q+nG/kC2NOR+eLLgRMYtk739K73In
F6Hh1TnDb5tQEcXVCIicwyDSdMBXZNx6GqZU5rrHW53ZRAZu8uA5VPo4lS3/wikD
DkJmFV2pW8ooUGiLO5Puo0xW90uI/Q20JYF+/PdFvm/n6IwPUiaAipfo4tkslXe9
RZ7LAj8t47M7czgLfzPXT9Q+AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPROdeDi
GSbyve1nKo9y53MkD61NMB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB
OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUYxNS9GRkVEMjc5NDNBOTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZL
TkY5NjlwRTZzS09YZGw1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrjFX7ujigwTykL8zvFoznC5EaigGpJVmGdMTD7YCHTctlhtJYFZLk
etshCoPDI6FAXDtidsPnWWIr2EU5JG28o8kuH0qnAHtMYAOlIoNu+4Se9GjgsuJZ
UR5nOKWXTzc/KfhwMRyvUGSZLgjh/Z/q3JIBTXgW+D2Mz1LyCnJiZ4jXK4dSasvf
Rsy6pHLBvgMgiTVGQsup225LJhX7/KMgkXi7IMWG400kCD+gtIh8YcvPRkVIhGO7
/WwnKzjBWuq8HPP8MIont/MbQWGmhrAX6fN2pToCehUG1VQAXvNcmPztY75EbSZQ
1U9dTRbT5F+pVaxWvwf7mIW/UIVVNX8w
-----END CERTIFICATE-----
Generated at Sun Dec 14 13:45:40 2025 by rpki-client