This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
File:                     bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json)
Hash identifier:          895C0qT3JrRuAiTsF6SRClNqEP4qMjIbfzhpuPdkW+Y=
Subject key identifier:   48:BA:0D:0E:1E:D0:40:11:4F:40:76:DA:AD:A7:7A:B1:67:AD:F3:1B
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Certificate issuer:       /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
Manifest number:          7B
Signing time:             Sun 21 Dec 2025 05:55:40 +0000
Manifest this update:     Sun 21 Dec 2025 05:55:40 +0000
Manifest next update:     Sun 28 Dec 2025 05:55:40 +0000
Files and hashes:         1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: 4JaVZUyxYrM8GCKq8TVPtNJZAI7A0zrzb9gJJwFtNjY=)
                          2: FAB0D026881F11F0AAA2086FC4F9AE02.roa (hash: p6QY5PVIvSx1qqEScHsp8RNr6LjcbKhzpMC+wNmfh+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
        Validity
            Not Before: Dec 21 05:55:40 2025 GMT
            Not After : Dec 28 05:55:40 2025 GMT
        Subject: CN=69478bdc-db4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:44:bb:75:fc:92:14:2c:b3:39:3a:e4:19:
                    be:b9:a1:d1:d0:c9:24:bc:31:d5:8c:7a:d4:d8:4e:
                    2b:67:b6:6e:dc:08:4e:22:b5:1d:0d:6f:f2:3e:9c:
                    46:6c:10:5d:c5:82:ed:24:ee:7f:99:52:d1:ec:e3:
                    8f:8e:24:a4:b5:1f:b8:be:63:b3:7d:af:7f:47:49:
                    24:53:c4:6e:c6:d7:f4:f3:3d:2c:16:34:dd:d1:4a:
                    d7:f7:ca:2e:ed:3f:91:8f:89:15:01:47:c2:e6:21:
                    01:79:9b:95:c7:3d:d9:d1:8c:17:dc:58:38:7d:ec:
                    cc:7b:a9:19:07:e2:27:62:0f:d9:2e:35:cd:b9:42:
                    80:19:4a:43:ff:7f:a4:11:08:4f:36:5f:c3:8c:34:
                    04:26:88:1e:c8:22:58:3b:a8:9b:67:44:3b:2a:c1:
                    c1:12:b7:25:c8:fc:1c:5e:e8:42:0e:34:23:ac:ff:
                    0d:d0:ff:0a:84:78:bd:d2:7e:7c:3e:23:b2:9e:81:
                    ac:9f:80:fa:ea:08:f1:37:3c:69:08:97:7b:50:d1:
                    36:de:b7:21:9d:63:1b:73:ef:22:7a:08:9a:dc:32:
                    82:a4:82:b0:56:66:16:69:a5:86:0d:4e:98:91:23:
                    ad:cf:c5:9c:d9:84:ce:88:64:3d:dd:fa:50:0b:cc:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BA:0D:0E:1E:D0:40:11:4F:40:76:DA:AD:A7:7A:B1:67:AD:F3:1B
            X509v3 Authority Key Identifier:
                keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0d:cb:b3:fd:1b:1b:58:fd:50:7d:12:31:6e:7c:a0:1f:ee:
         fe:ff:cc:a1:70:07:dd:6b:e0:95:2d:8f:6a:cb:3a:86:b8:14:
         2e:7a:0d:d5:32:1a:40:72:7c:bb:e5:86:56:1e:3c:1c:d4:bf:
         17:46:e2:5e:4f:60:cf:15:35:8b:cd:b3:19:e0:0b:66:f4:a1:
         af:b6:64:a2:d4:56:bd:83:28:ea:bc:9f:9c:3c:a0:08:09:e9:
         46:7f:a7:b7:87:0c:77:d7:bc:92:4a:b2:0e:cd:72:d7:5d:ea:
         4b:f8:aa:ea:9d:85:64:72:bb:9c:d6:23:bc:d5:6e:aa:bd:1a:
         c7:f4:ff:f0:0b:20:e0:25:c9:f1:b3:c8:68:be:43:95:28:88:
         d1:e0:1c:37:54:3f:6d:29:52:30:d3:4b:bc:3c:7d:ee:7e:57:
         b0:c6:0a:49:9a:f9:ff:06:34:78:d2:75:fd:13:fe:37:6d:1c:
         4b:5e:18:d2:f8:5f:dd:4a:1c:8a:8c:e6:41:68:1f:ac:4b:41:
         de:87:0c:b1:f8:23:aa:1c:84:87:68:4e:c6:03:2b:c8:47:b7:
         3c:ad:5a:55:64:d6:53:e8:5a:f1:88:08:3e:63:59:0d:88:09:
         d9:8c:68:aa:e3:07:b0:5f:fe:ce:ae:35:26:30:7c:d1:08:ad:
         3e:48:06:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA3NUUxMTAvBgNVBAUTKDZFQUM0MTY1RUM4Mjk5OEE4OThBQURGREQ1MTFDQzJB
MDQ2RkVFQTcwHhcNMjUxMjIxMDU1NTQwWhcNMjUxMjI4MDU1NTQwWjAYMRYwFAYD
VQQDDA02OTQ3OGJkYy1kYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9NEu3X8khQsszk65Bm+uaHR0MkkvDHVjHrU2E4rZ7Zu3AhOIrUdDW/yPpxG
bBBdxYLtJO5/mVLR7OOPjiSktR+4vmOzfa9/R0kkU8Ruxtf08z0sFjTd0UrX98ou
7T+Rj4kVAUfC5iEBeZuVxz3Z0YwX3Fg4fezMe6kZB+InYg/ZLjXNuUKAGUpD/3+k
EQhPNl/DjDQEJogeyCJYO6ibZ0Q7KsHBErclyPwcXuhCDjQjrP8N0P8KhHi90n58
PiOynoGsn4D66gjxNzxpCJd7UNE23rchnWMbc+8iegia3DKCpIKwVmYWaaWGDU6Y
kSOtz8Wc2YTOiGQ93fpQC8zDyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi6DQ4e
0EART0B22q2nerFnrfMbMB8GA1UdIwQYMBaAFG6sQWXsgpmKiYqt/dURzCoEb+6n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDc1RS9ENzA4QUIxQTMx
NkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9icXhCWmV5Q21ZcUppcTM5MVJITUtnUnY3
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDc1RS9ENzA4QUIxQTMxNkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9icXhCWmV5Q21Z
cUppcTM5MVJITUtnUnY3cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChDcuz/RsbWP1QfRIxbnygH+7+/8yhcAfda+CVLY9qyzqGuBQueg3V
MhpAcny75YZWHjwc1L8XRuJeT2DPFTWLzbMZ4Atm9KGvtmSi1Fa9gyjqvJ+cPKAI
CelGf6e3hwx317ySSrIOzXLXXepL+KrqnYVkcruc1iO81W6qvRrH9P/wCyDgJcnx
s8hovkOVKIjR4Bw3VD9tKVIw00u8PH3uflewxgpJmvn/BjR40nX9E/43bRxLXhjS
+F/dShyKjOZBaB+sS0Hehwyx+COqHISHaE7GAyvIR7c8rVpVZNZT6FrxiAg+Y1kN
iAnZjGiq4wewX/7OrjUmMHzRCK0+SAa5
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:25:13 2025 by rpki-client