This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File:                     Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier:          ZnbcPzVvP3oRdr2gIVZwXz4byKXmuPARJCh2YK0OZgU=
Subject key identifier:   FC:25:DC:8A:A9:5D:C0:3F:44:70:87:05:0D:1D:8B:AE:78:15:1D:11
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       07A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number:          079B
Signing time:             Fri 12 Dec 2025 20:49:12 +0000
Manifest this update:     Fri 12 Dec 2025 20:49:12 +0000
Manifest next update:     Fri 19 Dec 2025 20:49:12 +0000
Files and hashes:         1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: XEVMwCMUz5nDYwmFpQfIwIaEDU9WS5/S2jViN3ogDeQ=)
                          2: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: uJaHPmu5b/LTwhSQC3Yb+mo7Y9maBsfJr86vHvf1sw8=)
                          3: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: F9SWB+aMa8yAFDLLoHpTZLS07WYExS6i1iQ0h3SINVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 20:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Dec 12 20:49:12 2025 GMT
            Not After : Dec 19 20:49:12 2025 GMT
        Subject: CN=693c7fc8-01af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:fe:4f:45:7d:2f:d3:74:73:1d:25:a3:cc:
                    9d:47:c7:8d:17:d1:6f:ac:de:5d:50:f2:31:df:ab:
                    da:24:30:6d:b6:dc:ef:de:c9:c2:eb:af:48:61:f6:
                    9b:9b:7b:4d:d4:fd:b3:f8:db:a0:04:99:d3:9d:b3:
                    79:02:15:6f:06:4c:92:3b:75:72:b0:5d:a3:c4:99:
                    14:0c:73:27:31:46:b8:e6:0a:12:2a:00:0e:37:7c:
                    50:f6:8d:37:ee:5f:d0:a7:5d:75:fa:fc:38:55:da:
                    84:f1:1a:6d:61:51:e7:9d:02:c9:6a:42:89:22:30:
                    70:a2:79:a9:25:94:e4:43:7f:14:1d:13:33:d6:6e:
                    c9:6d:6f:7c:85:fd:74:86:72:80:92:a3:c9:a6:c4:
                    26:b7:0e:15:5a:0b:cb:46:f3:8d:04:d9:a3:77:65:
                    81:41:98:dc:06:6f:3b:6c:de:a1:b9:8e:33:70:7f:
                    2d:50:a9:e8:a0:d4:70:57:72:4b:55:ab:ce:20:81:
                    09:7c:ad:af:15:21:5b:32:2a:66:3c:28:93:b7:da:
                    37:1a:3b:11:06:aa:bf:c8:f8:00:f3:76:02:30:e4:
                    8b:dd:d6:a7:74:3e:fa:48:71:c9:2e:0c:e5:8b:eb:
                    72:9f:58:40:c9:7b:c0:33:da:30:50:60:44:fb:48:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:25:DC:8A:A9:5D:C0:3F:44:70:87:05:0D:1D:8B:AE:78:15:1D:11
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:24:93:5e:64:b3:2b:9a:71:17:f3:76:fa:55:da:a9:53:5c:
         eb:66:ee:11:c2:ba:4f:30:44:7d:6b:68:f6:38:dc:77:d1:aa:
         5d:33:fc:16:ae:e9:f4:c0:b6:eb:74:44:34:f1:4c:a7:6f:ff:
         93:4b:e0:cf:c9:b1:60:45:bf:d7:f6:70:27:76:2e:34:41:41:
         76:32:17:ef:7a:4e:8e:bc:ab:ab:b9:cc:1c:ba:ea:66:30:27:
         8d:16:54:e8:80:e8:79:14:f6:e1:42:1f:7c:76:ae:f0:ac:3a:
         22:5b:3e:63:49:e8:c3:f6:1d:e9:48:d7:57:46:8f:5c:e3:a8:
         25:a7:30:47:0c:b6:a8:b6:0a:33:7d:c6:da:d7:cd:37:2e:72:
         ea:a8:a8:01:35:d9:5f:11:33:83:8f:65:f0:9b:79:77:46:ce:
         f8:3c:23:79:2c:da:f0:4f:44:dc:40:ad:31:62:17:a8:50:d3:
         f9:ba:27:9f:02:1d:36:25:56:07:34:d3:76:fa:bc:9d:aa:3e:
         d4:c9:6a:d5:f2:33:e9:59:ba:d1:cb:38:6d:48:9d:76:cb:69:
         0e:8c:99:22:5e:58:45:0a:91:3c:ae:bd:30:be:fc:8c:5f:d1:
         41:b9:08:d4:42:0c:72:1b:d8:a3:4b:fe:b3:90:69:84:07:51:
         3e:d5:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:05:14 2025 by rpki-client