This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File:                     qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier:          sDNVNXoNbiGUXRIpfYA1u7PtNAQVHJr2P2ZzUMLT/+g=
Subject key identifier:   8F:15:04:77:97:E9:E4:03:2B:32:37:C5:E9:DE:5E:5E:84:86:82:50
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer:       /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial:       1A5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number:          1A56
Signing time:             Wed 24 Dec 2025 16:09:15 +0000
Manifest this update:     Wed 24 Dec 2025 16:09:14 +0000
Manifest next update:     Wed 31 Dec 2025 16:09:14 +0000
Files and hashes:         1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: YjFwpMmJ2DN6t+FBceL1EY79RtRUNA36EO3MADvzilQ=)
                          2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
                          rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 16:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6749 (0x1a5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
        Validity
            Not Before: Dec 24 16:09:14 2025 GMT
            Not After : Dec 31 16:09:14 2025 GMT
        Subject: CN=694c102a-9328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:ba:4f:67:0b:49:aa:8f:0a:ca:10:69:45:
                    cb:f6:ca:70:09:0d:fa:8d:10:4d:e8:dc:6f:ee:01:
                    df:38:43:e9:1a:dc:13:d4:7f:96:96:b1:fd:a0:fc:
                    05:2c:62:3b:78:0d:2b:7c:b6:46:ee:19:33:00:c6:
                    21:00:09:7a:10:0e:3c:6a:2e:6e:ba:f2:09:70:32:
                    ef:81:18:42:f4:9c:b8:83:c5:28:98:8f:13:86:95:
                    00:03:4b:28:7d:9b:58:34:53:45:96:94:2c:a0:50:
                    db:b8:c6:6f:99:52:e7:c4:73:67:4a:f0:2f:a1:b5:
                    66:c6:8c:ae:b5:1a:5c:ad:3b:5e:68:d2:1b:c8:a3:
                    ae:65:1f:7c:89:29:3f:b0:79:82:58:2c:77:d8:09:
                    81:d2:86:44:d2:04:43:3c:cd:b5:7c:c3:a4:51:78:
                    d4:2e:c8:cd:d3:0e:db:25:72:e1:9b:a2:a3:ec:e7:
                    b8:e5:d5:8a:85:9b:64:3f:5b:05:c1:f9:18:91:68:
                    77:bb:65:ce:9e:c5:fe:6d:59:cb:d3:a7:38:71:3d:
                    91:94:51:f9:9a:65:bd:73:df:62:3a:57:49:0b:47:
                    32:5a:69:b2:bf:eb:4d:cc:e6:8c:45:aa:fe:f9:68:
                    ed:c8:18:e3:b4:69:3c:35:ea:08:a5:af:b5:34:1a:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:15:04:77:97:E9:E4:03:2B:32:37:C5:E9:DE:5E:5E:84:86:82:50
            X509v3 Authority Key Identifier:
                keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:c8:c7:ca:5b:4c:70:aa:d8:69:90:87:1b:fa:11:34:7d:
         06:71:6b:95:14:fc:16:36:8d:bb:f5:37:86:d6:03:0b:c7:0b:
         bb:5b:63:15:4c:07:bc:5b:aa:d0:5e:a9:ea:30:de:5b:3b:24:
         14:8b:e5:d3:1e:c3:d8:c7:a8:35:6a:40:21:0f:d1:86:f1:00:
         b4:35:ad:ad:41:d6:6b:86:f3:83:be:94:0a:e3:45:d8:cc:c9:
         b6:55:4b:7f:a0:1d:d8:9a:5f:9e:3a:6a:a7:c4:0e:37:23:91:
         37:2c:fc:15:3a:c8:af:e7:30:b4:a3:0b:a0:e0:75:2e:d8:95:
         25:3b:e1:ff:98:c2:78:bf:25:67:43:fa:d2:94:d5:b2:56:63:
         39:00:6c:3d:21:9f:c1:b5:9d:0a:6f:2a:05:0e:e9:84:e3:1c:
         7f:31:49:0f:54:f1:a2:18:01:23:94:7d:d2:bf:1b:71:38:28:
         ef:f4:34:37:6b:6d:32:71:a5:48:70:ef:d2:17:22:23:e4:c3:
         5d:6f:fc:ee:b0:ec:80:85:5a:d5:3c:e6:9c:0e:cd:12:e6:96:
         df:75:68:29:87:5f:69:5d:a2:cd:c9:1c:f7:5f:d6:82:fb:14:
         f7:55:e2:79:f1:37:42:7c:a1:f8:9e:21:43:9e:fb:4d:3c:bb:
         8a:37:a4:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1
OTgxRUU4RUMwHhcNMjUxMjI0MTYwOTE0WhcNMjUxMjMxMTYwOTE0WjAYMRYwFAYD
VQQDDA02OTRjMTAyYS05MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UO6T2cLSaqPCsoQaUXL9spwCQ36jRBN6Nxv7gHfOEPpGtwT1H+WlrH9oPwF
LGI7eA0rfLZG7hkzAMYhAAl6EA48ai5uuvIJcDLvgRhC9Jy4g8UomI8ThpUAA0so
fZtYNFNFlpQsoFDbuMZvmVLnxHNnSvAvobVmxoyutRpcrTteaNIbyKOuZR98iSk/
sHmCWCx32AmB0oZE0gRDPM21fMOkUXjULsjN0w7bJXLhm6Kj7Oe45dWKhZtkP1sF
wfkYkWh3u2XOnsX+bVnL06c4cT2RlFH5mmW9c99iOldJC0cyWmmyv+tNzOaMRar+
+WjtyBjjtGk8NeoIpa+1NBpE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8VBHeX
6eQDKzI3xeneXl6EhoJQMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1
M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2
T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2
ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLtMjHyltMcKrYaZCHG/oRNH0GcWuVFPwWNo279TeG1gMLxwu7W2MV
TAe8W6rQXqnqMN5bOyQUi+XTHsPYx6g1akAhD9GG8QC0Na2tQdZrhvODvpQK40XY
zMm2VUt/oB3Yml+eOmqnxA43I5E3LPwVOsiv5zC0owug4HUu2JUlO+H/mMJ4vyVn
Q/rSlNWyVmM5AGw9IZ/BtZ0KbyoFDumE4xx/MUkPVPGiGAEjlH3SvxtxOCjv9DQ3
a20ycaVIcO/SFyIj5MNdb/zusOyAhVrVPOacDs0S5pbfdWgph19pXaLNyRz3X9aC
+xT3VeJ58TdCfKH4niFDnvtNPLuKN6Qv
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:11 2025 by rpki-client