This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File:                     Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier:          Eq2U45f2F1z7VmTaZKiSRbsXlno17bnTnwAfpCFutUU=
Subject key identifier:   70:C1:A7:CB:E0:CD:D0:96:4F:E5:B4:FD:43:1C:F6:BD:A1:98:64:D8
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer:       /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial:       1B73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number:          1B6E
Signing time:             Tue 02 Dec 2025 16:06:39 +0000
Manifest this update:     Tue 02 Dec 2025 16:06:38 +0000
Manifest next update:     Tue 09 Dec 2025 16:06:38 +0000
Files and hashes:         1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: 2Kne820Frtp/8BbEBTYBoRRK49moqf4ceW2cmHoDOwg=)
                          2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: f7v965g9bOSdEznd3YTHpzh8If/rvk4WHQj9sYnabU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 16:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7027 (0x1b73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Validity
            Not Before: Dec  2 16:06:38 2025 GMT
            Not After : Dec  9 16:06:38 2025 GMT
        Subject: CN=692f0e8f-6d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f4:f3:d2:8d:f7:d3:50:af:c2:e4:13:10:34:
                    6d:29:11:ff:3e:af:9e:fc:94:1b:05:2c:18:1e:46:
                    2f:a0:19:5d:31:1a:01:8d:52:d3:c5:54:81:93:da:
                    f7:d1:6c:da:a7:e7:0c:a3:bc:2f:4d:d2:5a:1d:a5:
                    ae:5c:26:d7:61:74:47:04:d1:86:79:b5:39:fe:0d:
                    c7:12:e6:6a:c0:3c:88:f3:ff:35:59:95:d6:20:5d:
                    93:35:e0:de:78:4b:e6:d0:1f:60:03:78:3e:c8:26:
                    c8:8b:60:d8:c5:50:1c:20:5f:54:a4:33:ba:50:9b:
                    f2:1b:99:81:d3:18:c6:f1:52:79:4a:4c:4c:f1:9b:
                    8b:38:ba:ff:26:1d:79:10:07:14:00:63:cd:ca:98:
                    2a:b2:60:ad:43:f3:45:ec:62:fe:7e:65:c0:93:57:
                    b4:7a:ed:53:0f:67:f7:ae:ff:40:af:f6:23:29:45:
                    32:6f:ac:43:3f:98:b6:ee:e9:a9:7e:7a:97:2f:43:
                    66:40:7f:88:dd:57:e4:05:11:3c:d5:50:f3:57:26:
                    ad:8b:0a:7f:eb:00:9d:76:b0:09:18:d5:c9:27:e5:
                    5c:4d:4b:d7:58:f8:45:77:2b:58:d2:31:55:e4:e1:
                    30:0c:27:29:1b:dd:89:be:23:6b:7e:52:a1:86:b8:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C1:A7:CB:E0:CD:D0:96:4F:E5:B4:FD:43:1C:F6:BD:A1:98:64:D8
            X509v3 Authority Key Identifier:
                keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:70:0c:94:71:aa:b2:be:46:9c:49:0f:17:a2:3f:b5:33:fe:
         86:fb:42:49:c4:dc:61:36:2f:6f:ca:13:0c:7b:a8:ca:6d:f2:
         a3:b9:7d:d0:81:44:ec:83:13:70:1b:0a:54:9f:46:54:d2:c4:
         f2:ad:d4:97:09:e2:c2:95:23:a8:5e:3e:08:db:bd:7d:ce:2c:
         f7:67:e6:31:df:83:ae:8b:7d:22:ab:28:27:56:c2:8a:a5:dd:
         be:df:ee:3a:95:d9:58:28:a3:06:1b:c3:b1:fc:28:fb:d2:54:
         d6:4d:6e:da:92:e3:63:0d:16:f7:6a:3a:94:8f:d3:46:ed:be:
         0d:c3:2f:25:f0:11:e8:8d:d7:c3:fe:aa:7c:9e:93:04:32:bf:
         61:dd:94:49:6c:8f:8b:7a:69:59:f0:ae:92:01:7e:cd:9e:87:
         a4:cb:9d:d7:2c:ba:db:e3:f7:71:e1:6d:46:4f:8a:8f:7e:95:
         eb:eb:fc:21:a5:59:b4:e7:05:fc:68:06:cd:bd:9e:ad:e0:95:
         2f:46:7f:ba:af:45:76:bf:19:0e:d7:00:4f:f6:e8:27:c3:64:
         37:98:e2:ae:7a:46:a4:e5:e2:2a:c7:2b:12:38:26:c6:1f:92:
         d6:88:07:61:13:79:6c:06:88:1a:f6:5e:dd:05:d6:20:c0:31:
         1c:06:96:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2
NDg2MDIwMTgwHhcNMjUxMjAyMTYwNjM4WhcNMjUxMjA5MTYwNjM4WjAYMRYwFAYD
VQQDEw02OTJmMGU4Zi02ZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+vTz0o3301CvwuQTEDRtKRH/Pq+e/JQbBSwYHkYvoBldMRoBjVLTxVSBk9r3
0Wzap+cMo7wvTdJaHaWuXCbXYXRHBNGGebU5/g3HEuZqwDyI8/81WZXWIF2TNeDe
eEvm0B9gA3g+yCbIi2DYxVAcIF9UpDO6UJvyG5mB0xjG8VJ5SkxM8ZuLOLr/Jh15
EAcUAGPNypgqsmCtQ/NF7GL+fmXAk1e0eu1TD2f3rv9Ar/YjKUUyb6xDP5i27ump
fnqXL0NmQH+I3VfkBRE81VDzVyatiwp/6wCddrAJGNXJJ+VcTUvXWPhFdytY0jFV
5OEwDCcpG92JviNrflKhhrjG2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDBp8vg
zdCWT+W0/UMc9r2hmGTYMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT
U3hFUWxseWM5UGxraGdJQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZcAyUcaqyvkacSQ8Xoj+1M/6G+0JJxNxhNi9vyhMMe6jKbfKjuX3Q
gUTsgxNwGwpUn0ZU0sTyrdSXCeLClSOoXj4I2719ziz3Z+Yx34Oui30iqygnVsKK
pd2+3+46ldlYKKMGG8Ox/Cj70lTWTW7akuNjDRb3ajqUj9NG7b4Nwy8l8BHojdfD
/qp8npMEMr9h3ZRJbI+LemlZ8K6SAX7Nnoeky53XLLrb4/dx4W1GT4qPfpXr6/wh
pVm05wX8aAbNvZ6t4JUvRn+6r0V2vxkO1wBP9ugnw2Q3mOKuekak5eIqxysSOCbG
H5LWiAdhE3lsBoga9l7dBdYgwDEcBpbH
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:34 2025 by rpki-client