This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          HRtstMQgqYeZNvITLXolV9olJFxVj0FZlzvHK7F4rpg=
Subject key identifier:   F6:65:C3:34:F8:A7:E6:7B:B6:7A:55:D6:CB:56:3B:EC:F8:A0:6F:84
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0442
Signing time:             Thu 04 Dec 2025 23:22:45 +0000
Manifest this update:     Thu 04 Dec 2025 23:22:44 +0000
Manifest next update:     Thu 11 Dec 2025 23:22:44 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: tKc6FAIuTPgA8o57QMLT3BvTVuyg91m/cLmSmUANybY=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          10: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Dec  4 23:22:44 2025 GMT
            Not After : Dec 11 23:22:44 2025 GMT
        Subject: CN=693217c5-8250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:4b:32:82:06:be:d0:78:bd:00:f6:02:58:
                    11:e7:48:d8:da:a9:86:09:b3:aa:4a:55:5f:66:fd:
                    e0:30:71:80:22:4d:eb:fe:a2:2a:76:02:c5:3f:29:
                    e6:d8:2a:2b:e0:49:dd:d0:b1:34:49:e2:4c:f6:dc:
                    bc:9d:43:e2:04:e1:91:7d:0f:47:d6:c0:74:15:b1:
                    92:bb:c0:75:27:f3:b8:90:0f:e5:df:e4:97:ca:73:
                    bc:f9:57:06:56:2f:52:e4:86:2a:f8:70:9b:2b:43:
                    81:f8:ef:9e:ef:57:98:11:c0:a5:6b:89:aa:f9:4a:
                    19:57:2a:d1:72:48:92:74:3d:6a:79:3e:9d:91:13:
                    c0:bf:dc:56:89:81:c0:14:1d:01:3b:99:cf:34:f6:
                    eb:b0:f4:c1:43:4a:41:a2:ad:ea:e0:98:c0:38:9d:
                    8e:14:31:a0:58:df:b6:7b:d9:bf:b4:cb:58:6b:91:
                    a1:d7:81:54:b6:d3:f3:e0:53:15:8f:88:2b:b8:de:
                    6b:d7:39:0f:fa:b4:3e:d7:7c:8c:32:55:26:9b:c1:
                    cb:f7:29:d1:ea:e7:80:a0:2a:db:84:de:1d:c5:3d:
                    8b:ce:9b:19:bf:ab:16:49:c6:fa:c8:88:8b:32:04:
                    41:21:f4:4e:1d:d2:1d:16:b7:7e:ad:3a:46:2d:3b:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:65:C3:34:F8:A7:E6:7B:B6:7A:55:D6:CB:56:3B:EC:F8:A0:6F:84
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:df:1a:c4:4f:aa:0f:35:9e:26:35:21:59:33:b3:5f:83:
         20:11:82:18:0e:b1:fd:53:85:09:90:62:40:cc:0c:64:96:54:
         4e:4e:5b:3c:fd:af:fa:01:6c:83:22:f5:fc:a3:b9:f1:79:b3:
         7f:7b:f8:fa:6d:99:e9:80:dd:87:b2:87:f3:57:1f:2a:19:a1:
         aa:76:64:57:f5:87:fe:ee:e1:e4:fb:23:b5:c3:4d:ab:0b:bd:
         c5:02:61:8d:c2:40:9d:44:be:5e:a3:7e:c0:c4:a1:f3:b8:10:
         19:85:f2:71:c9:a2:34:01:92:57:93:9a:78:ac:ef:d1:8c:ea:
         68:22:fb:83:25:39:75:81:40:b4:c3:a2:a7:d6:d7:c4:a5:d0:
         51:cd:1e:91:c7:67:80:95:9c:08:bb:f2:52:d6:07:9b:2e:1c:
         2b:35:ad:26:ed:08:56:a1:1c:90:01:e5:78:34:21:e8:68:ce:
         02:27:1b:af:97:65:68:63:91:ea:06:f3:18:41:72:a4:07:1a:
         60:4c:eb:ce:a8:69:00:3d:d7:29:09:1b:93:bc:dc:8a:79:c1:
         46:cb:bc:f8:10:53:fa:60:fc:1e:23:fd:de:fc:8d:24:5a:8c:
         2e:6d:b7:d5:8f:77:a8:c1:99:33:d8:bb:02:6c:e0:e3:50:5a:
         a5:84:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 14:00:16 2025 by rpki-client