This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          oEuwkONIPAIG2DGRi541Nbr6bP6N97v+B5JKl+04PdE=
Subject key identifier:   CF:7A:C8:14:1B:19:BB:D8:2A:86:04:96:8D:EB:72:E4:9B:7E:AA:C3
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       11E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          204F
Signing time:             Mon 22 Dec 2025 16:52:52 +0000
Manifest this update:     Mon 22 Dec 2025 16:52:52 +0000
Manifest next update:     Mon 29 Dec 2025 16:52:52 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: gvt3FUY618x1zZXmDrwJCK3S18ck8CH57scO8Q40nbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4579 (0x11e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Dec 22 16:52:52 2025 GMT
            Not After : Dec 29 16:52:52 2025 GMT
        Subject: CN=69497764-9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:76:8f:b2:96:8f:66:3c:fc:c2:d0:97:b3:
                    d7:cd:03:97:07:9d:58:3d:97:f6:22:6a:28:e8:8e:
                    5b:65:78:dc:c5:91:7c:c9:46:87:27:18:d6:ac:96:
                    32:c1:86:69:89:02:17:6e:a4:cb:9a:6b:cd:3b:6b:
                    ed:71:cd:06:be:64:42:12:ca:4c:62:3e:ce:9d:bc:
                    50:fb:07:13:bc:fe:a5:d7:92:97:0f:41:7a:13:d4:
                    f8:a8:28:89:01:59:f9:eb:4c:c1:9a:87:78:0a:84:
                    3c:36:af:61:b3:e8:23:04:8c:e7:ce:ed:40:a4:db:
                    13:f1:5b:c1:27:71:1c:fc:d2:29:c9:c7:5a:23:ad:
                    5f:6f:5a:40:8c:33:a9:3a:47:5b:72:8c:33:a6:e4:
                    41:68:fb:fc:df:dd:29:c3:9e:72:1c:2c:5e:a5:47:
                    f2:6f:80:cb:14:6a:3f:94:9f:16:14:47:57:88:d6:
                    62:5b:b2:78:4e:3f:1c:c0:06:d6:61:47:fc:30:44:
                    18:40:49:b1:12:2c:f0:d7:87:6c:b7:5f:04:00:a6:
                    6a:77:9a:27:16:44:5c:56:6c:99:e7:9e:d2:56:4d:
                    c0:72:27:5f:38:2b:26:9c:8d:f0:ac:23:94:e0:f5:
                    62:c9:ca:1e:64:54:d0:ab:7a:f7:69:f8:fd:48:8d:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:C8:14:1B:19:BB:D8:2A:86:04:96:8D:EB:72:E4:9B:7E:AA:C3
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:de:60:0a:b4:b1:34:51:4c:c4:d9:15:c5:02:30:a2:9a:
         96:51:38:18:c7:72:ca:8f:44:d1:cc:cf:f1:aa:3b:a5:2f:2e:
         92:4b:3d:86:7e:db:dc:70:0e:30:f7:26:24:d8:f5:c8:5b:34:
         c4:90:3a:10:4b:b0:6d:68:85:51:79:33:d0:aa:ad:99:65:bc:
         a0:36:af:92:a5:05:9d:f4:f7:ca:6f:e3:7d:b8:c1:d7:73:45:
         28:ef:a4:ae:48:d1:3e:0f:14:e8:07:d0:68:b4:2a:0f:dd:e6:
         3a:77:22:1e:da:f8:71:0e:95:28:22:f7:be:ff:b4:5a:55:8f:
         4b:82:a7:1b:c5:c6:78:86:92:66:af:29:84:fd:23:87:39:ce:
         98:ca:22:f9:45:96:1c:c9:30:ba:12:3d:5b:c8:77:6a:46:52:
         3c:99:54:39:92:4c:39:68:a8:ea:6d:f3:e4:f8:fe:17:85:22:
         e9:6c:8c:d2:51:cf:5d:34:cd:a8:2f:5b:97:1c:6d:d8:4e:2d:
         d3:35:4c:f5:ff:99:ae:ee:96:38:7d:9b:26:a5:37:fb:93:d0:
         eb:49:a9:96:01:f2:43:56:97:96:e8:16:74:d2:d3:b7:66:3c:
         c7:b9:5e:50:19:01:ec:47:6f:4d:73:5d:5f:bf:ee:bc:8a:cd:
         c9:d8:59:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD
MDk5MEE4NTMwHhcNMjUxMjIyMTY1MjUyWhcNMjUxMjI5MTY1MjUyWjAYMRYwFAYD
VQQDDA02OTQ5Nzc2NC05NzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOp2j7KWj2Y8/MLQl7PXzQOXB51YPZf2Imoo6I5bZXjcxZF8yUaHJxjWrJYy
wYZpiQIXbqTLmmvNO2vtcc0GvmRCEspMYj7OnbxQ+wcTvP6l15KXD0F6E9T4qCiJ
AVn560zBmod4CoQ8Nq9hs+gjBIznzu1ApNsT8VvBJ3Ec/NIpycdaI61fb1pAjDOp
OkdbcowzpuRBaPv8390pw55yHCxepUfyb4DLFGo/lJ8WFEdXiNZiW7J4Tj8cwAbW
YUf8MEQYQEmxEizw14dst18EAKZqd5onFkRcVmyZ557SVk3AcidfOCsmnI3wrCOU
4PViycoeZFTQq3r3afj9SI3lFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM96yBQb
GbvYKoYElo3rcuSbfqrDMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF
QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1
Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQACPN5gCrSxNFFMxNkVxQIwopqWUTgYx3LKj0TRzM/xqjulLy6SSz2G
ftvccA4w9yYk2PXIWzTEkDoQS7BtaIVReTPQqq2ZZbygNq+SpQWd9PfKb+N9uMHX
c0Uo76SuSNE+DxToB9BotCoP3eY6dyIe2vhxDpUoIve+/7RaVY9LgqcbxcZ4hpJm
rymE/SOHOc6YyiL5RZYcyTC6Ej1byHdqRlI8mVQ5kkw5aKjqbfPk+P4XhSLpbIzS
Uc9dNM2oL1uXHG3YTi3TNUz1/5mu7pY4fZsmpTf7k9DrSamWAfJDVpeW6BZ00tO3
ZjzHuV5QGQHsR29Nc11fv+68is3J2Fko
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:29 2025 by rpki-client