This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          v+PXKxVrtBNRylzra6xmYn7BwA+zl/16CQcGAsrQs/E=
Subject key identifier:   5E:67:C7:F1:3F:0A:C2:0C:8E:7D:58:58:68:29:3D:4F:2E:E5:9B:9A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          043E
Signing time:             Wed 26 Nov 2025 23:23:01 +0000
Manifest this update:     Wed 26 Nov 2025 23:23:00 +0000
Manifest next update:     Wed 03 Dec 2025 23:23:00 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: zrSeUceImEEYESU6M9thyKgre98LACHqvBkt01HZtxE=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          10: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Dec 2025 23:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Nov 26 23:23:00 2025 GMT
            Not After : Dec  3 23:23:00 2025 GMT
        Subject: CN=69278bd5-0c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:4c:fc:c3:54:61:e9:cf:95:bd:e2:36:04:
                    95:1d:e3:86:28:ea:fc:c0:b7:d4:d1:2d:52:bc:72:
                    13:1d:14:67:52:ff:2a:6b:5c:7b:18:a6:ca:45:77:
                    6a:30:e1:2c:9c:ea:89:d0:86:43:ed:ba:be:0e:b4:
                    1d:f0:19:d9:dd:c2:01:91:ed:fb:a9:01:5f:b6:24:
                    25:86:ea:c4:ff:50:35:0a:58:99:3c:e6:a4:8e:90:
                    62:10:f4:72:86:e8:4f:f2:a6:58:e6:2a:f3:c1:ab:
                    ab:cb:56:38:42:e4:95:4f:82:a5:ca:7e:e6:98:b0:
                    ac:1c:d4:20:31:3c:21:aa:9b:bb:de:3a:ab:a3:81:
                    fc:93:71:2b:87:bb:78:9c:a5:07:fa:30:b3:e4:74:
                    94:22:b1:d3:6e:c0:5d:0c:83:a5:c0:7e:7d:01:5d:
                    09:1e:46:e8:1b:31:54:d3:ec:80:71:cd:ba:e8:68:
                    51:50:b6:d2:c8:99:30:15:a4:14:18:ae:39:7e:80:
                    05:cb:1e:f2:dd:99:e7:2c:49:18:85:6e:f8:eb:8f:
                    b3:c8:82:00:26:83:a3:39:d9:e8:aa:98:20:91:c3:
                    f5:81:85:3e:a7:2f:69:6c:4c:85:e2:d7:ac:4a:19:
                    7b:54:db:5a:3e:15:c8:22:eb:05:a4:26:ac:26:9f:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:67:C7:F1:3F:0A:C2:0C:8E:7D:58:58:68:29:3D:4F:2E:E5:9B:9A
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:3d:40:02:12:d5:11:c5:a4:e8:cc:27:d0:7e:04:82:3a:
         71:82:c4:34:1e:f7:31:ca:96:28:8a:b2:f3:f4:1d:6e:ed:be:
         d8:78:7b:4e:63:27:d3:61:14:5d:81:81:67:77:12:51:ce:ce:
         6b:bc:94:6b:ad:bf:3b:aa:c7:f3:27:90:b9:1a:3c:9a:ec:f8:
         0b:41:a8:00:a5:44:92:63:71:79:7f:89:8c:cd:99:ef:6f:2f:
         68:a5:62:97:03:0e:f2:44:5e:bb:6c:79:28:b2:18:47:b6:c8:
         f7:a2:3d:cc:4c:08:af:da:6c:d3:14:d9:54:16:f4:f6:fe:45:
         46:65:a3:bc:21:85:90:fc:b3:00:3e:5c:b8:6c:0f:ef:9b:2f:
         44:48:cb:12:7c:0f:4d:36:14:d0:d5:e4:56:37:a8:50:58:fe:
         fb:90:0c:63:1a:8c:48:3a:54:ea:f7:e8:42:92:1d:b6:23:99:
         17:b7:18:cd:04:df:5c:7d:0a:03:3d:52:90:18:7d:92:fe:4a:
         a6:60:ea:2a:4e:32:ea:e9:a3:de:de:c1:e2:54:f9:15:01:ca:
         c3:f8:4f:a2:cb:05:03:9b:a4:49:30:d9:31:4a:4c:78:d2:36:
         b3:63:0f:2d:e5:31:e7:5e:74:fd:4e:99:6e:7b:05:92:64:f1:
         50:52:38:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjUxMTI2MjMyMzAwWhcNMjUxMjAzMjMyMzAwWjAYMRYwFAYD
VQQDEw02OTI3OGJkNS0wYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoNM/MNUYenPlb3iNgSVHeOGKOr8wLfU0S1SvHITHRRnUv8qa1x7GKbKRXdq
MOEsnOqJ0IZD7bq+DrQd8BnZ3cIBke37qQFftiQlhurE/1A1CliZPOakjpBiEPRy
huhP8qZY5irzwaury1Y4QuSVT4Klyn7mmLCsHNQgMTwhqpu73jqro4H8k3Erh7t4
nKUH+jCz5HSUIrHTbsBdDIOlwH59AV0JHkboGzFU0+yAcc266GhRULbSyJkwFaQU
GK45foAFyx7y3ZnnLEkYhW7464+zyIIAJoOjOdnoqpggkcP1gYU+py9pbEyF4tes
Shl7VNtaPhXIIusFpCasJp+VjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5nx/E/
CsIMjn1YWGgpPU8u5ZuaMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBWj1AAhLVEcWk6Mwn0H4EgjpxgsQ0HvcxypYoirLz9B1u7b7YeHtO
YyfTYRRdgYFndxJRzs5rvJRrrb87qsfzJ5C5Gjya7PgLQagApUSSY3F5f4mMzZnv
by9opWKXAw7yRF67bHkoshhHtsj3oj3MTAiv2mzTFNlUFvT2/kVGZaO8IYWQ/LMA
Ply4bA/vmy9ESMsSfA9NNhTQ1eRWN6hQWP77kAxjGoxIOlTq9+hCkh22I5kXtxjN
BN9cfQoDPVKQGH2S/kqmYOoqTjLq6aPe3sHiVPkVAcrD+E+iywUDm6RJMNkxSkx4
0jazYw8t5THnXnT9TpluewWSZPFQUjgL
-----END CERTIFICATE-----
Generated at Thu Nov 27 11:25:13 2025 by rpki-client