This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
File:                     AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json)
Hash identifier:          W6LYFK5itwcT54rQ9jz3H3yeVEIDihN/ncAORSWRnMI=
Subject key identifier:   9F:0B:22:AF:3F:88:AE:FD:D1:DD:86:05:A0:F2:83:8B:9F:B8:EB:72
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Certificate issuer:       /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial:       1734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
Manifest number:          1721
Signing time:             Sat 06 Dec 2025 16:13:52 +0000
Manifest this update:     Sat 06 Dec 2025 16:13:51 +0000
Manifest next update:     Sat 13 Dec 2025 16:13:51 +0000
Files and hashes:         1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: p9kv+YgyKcEdJSSaa95hjsQh1DcC76dh9cqFC/lHvVw=)
                          2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
                          rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5940 (0x1734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
        Validity
            Not Before: Dec  6 16:13:51 2025 GMT
            Not After : Dec 13 16:13:51 2025 GMT
        Subject: CN=69345640-75e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:f6:10:34:38:f1:3d:8f:95:6d:fe:14:90:
                    46:89:40:26:ed:5d:ba:c7:aa:41:b9:ec:34:10:a4:
                    df:d1:35:ab:36:0a:78:14:24:fe:d0:a9:4d:e7:fd:
                    39:91:32:90:88:54:93:d4:1e:dc:ba:6e:1a:03:29:
                    fb:44:8e:4c:30:c1:47:33:68:3b:82:e1:22:b8:65:
                    b8:89:4a:51:bc:da:db:3d:ea:e3:e3:9e:5d:af:71:
                    17:c4:8d:e9:53:c5:87:59:1a:ce:11:2f:77:ba:29:
                    a4:6c:42:e3:18:19:c9:fa:35:7d:fb:55:bd:91:0c:
                    99:e7:aa:57:db:21:1a:96:82:f8:0b:21:d1:da:35:
                    48:73:db:3c:3c:51:ec:82:c9:78:4b:de:49:59:59:
                    f8:d4:f7:56:de:a8:ae:5f:db:60:e8:b2:95:86:f7:
                    d1:b8:5f:cc:f8:41:4f:4c:4b:62:df:4a:13:64:47:
                    e7:78:05:20:cb:8d:1d:4a:09:d9:c6:71:9c:54:17:
                    72:c2:18:b8:df:fd:43:80:e3:26:d3:3b:8c:c0:42:
                    c0:b9:f4:53:67:d8:d9:f9:8a:ee:c4:6f:68:2d:cd:
                    e6:cb:c7:d9:f7:63:05:8f:6e:d3:29:3a:41:48:70:
                    3d:5a:1f:5e:c5:1e:d9:a8:63:0e:6d:f2:8a:51:a6:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:22:AF:3F:88:AE:FD:D1:DD:86:05:A0:F2:83:8B:9F:B8:EB:72
            X509v3 Authority Key Identifier:
                keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:57:fe:68:70:ea:ff:a9:85:7c:74:7a:4c:74:fd:26:a6:
         98:2b:b0:3d:92:43:3e:9d:6c:d2:0a:58:7d:5d:7a:07:8a:b1:
         77:fd:31:e5:d8:db:10:d0:9d:1b:ea:a3:3e:f7:07:49:34:f0:
         54:c5:e4:59:af:31:c5:ef:9a:fc:f0:44:2d:e2:8b:30:8d:ae:
         35:32:aa:c9:ca:c8:06:6b:6a:89:d9:2f:db:8c:7e:22:51:17:
         2e:1c:d9:4b:88:00:43:a0:d6:58:b8:e2:74:75:b4:c5:73:ca:
         2c:72:96:98:bd:91:98:b6:9f:be:07:a3:39:9f:02:43:95:70:
         dc:dd:f7:fe:f7:ca:aa:04:14:0c:a0:f5:83:86:86:c2:60:bd:
         8f:34:67:ce:c3:ba:f4:c2:ea:e4:3f:5e:00:42:d7:eb:d0:89:
         ff:6e:2c:3d:1c:cc:8f:41:b4:f0:22:c5:5d:87:92:b3:92:c7:
         ba:aa:59:b2:5f:15:90:e8:78:51:a8:14:9c:de:bf:dd:42:1c:
         f7:50:88:c9:b3:32:10:40:32:aa:24:9c:1c:6e:3f:73:3d:36:
         48:e6:03:fa:a6:73:73:ea:0d:dd:1f:5e:60:37:3c:6a:b3:7d:
         39:5f:fc:61:2f:52:b9:42:7d:34:9f:68:50:d4:fe:fb:c2:a9:
         63:3a:70:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD
M0MwMkVDRjQwHhcNMjUxMjA2MTYxMzUxWhcNMjUxMjEzMTYxMzUxWjAYMRYwFAYD
VQQDEw02OTM0NTY0MC03NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5iv2EDQ48T2PlW3+FJBGiUAm7V26x6pBuew0EKTf0TWrNgp4FCT+0KlN5/05
kTKQiFST1B7cum4aAyn7RI5MMMFHM2g7guEiuGW4iUpRvNrbPerj455dr3EXxI3p
U8WHWRrOES93uimkbELjGBnJ+jV9+1W9kQyZ56pX2yEaloL4CyHR2jVIc9s8PFHs
gsl4S95JWVn41PdW3qiuX9tg6LKVhvfRuF/M+EFPTEti30oTZEfneAUgy40dSgnZ
xnGcVBdywhi43/1DgOMm0zuMwELAufRTZ9jZ+YruxG9oLc3my8fZ92MFj27TKTpB
SHA9Wh9exR7ZqGMObfKKUaYOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8LIq8/
iK790d2GBaDyg4ufuOtyMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB
NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6
anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaYVf+aHDq/6mFfHR6THT9JqaYK7A9kkM+nWzSClh9XXoHirF3/THl
2NsQ0J0b6qM+9wdJNPBUxeRZrzHF75r88EQt4oswja41MqrJysgGa2qJ2S/bjH4i
URcuHNlLiABDoNZYuOJ0dbTFc8oscpaYvZGYtp++B6M5nwJDlXDc3ff+98qqBBQM
oPWDhobCYL2PNGfOw7r0wurkP14AQtfr0In/biw9HMyPQbTwIsVdh5Kzkse6qlmy
XxWQ6HhRqBSc3r/dQhz3UIjJszIQQDKqJJwcbj9zPTZI5gP6pnNz6g3dH15gNzxq
s305X/xhL1K5Qn00n2hQ1P77wqljOnBG
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:51 2025 by rpki-client