This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File:                     Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier:          yYdHDZwuD7gWG911MIkhhNPmE0xuyY8YiTN5XUcR5oo=
Subject key identifier:   9F:B2:89:B4:85:AD:EA:D2:ED:5C:26:D6:1A:49:83:BE:FA:B6:E0:5E
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number:          0798
Signing time:             Sat 06 Dec 2025 20:31:09 +0000
Manifest this update:     Sat 06 Dec 2025 20:31:08 +0000
Manifest next update:     Sat 13 Dec 2025 20:31:08 +0000
Files and hashes:         1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: KTgYDYOLXofvGYxcqSdXq9FQbj76Rsau7cllRMtMLxI=)
                          2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: F9SWB+aMa8yAFDLLoHpTZLS07WYExS6i1iQ0h3SINVA=)
                          3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: uJaHPmu5b/LTwhSQC3Yb+mo7Y9maBsfJr86vHvf1sw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Dec  6 20:31:08 2025 GMT
            Not After : Dec 13 20:31:08 2025 GMT
        Subject: CN=6934928c-001d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:55:fa:8f:fc:08:6b:d1:8f:ca:19:18:cd:
                    c8:7b:82:8a:1a:65:60:9b:0e:80:61:d6:bf:ab:29:
                    be:e7:72:6b:f1:73:7e:91:c8:83:13:a8:b0:81:65:
                    99:bf:dd:cb:a0:71:e9:ce:d8:26:5b:73:16:d8:8a:
                    ab:46:a3:86:99:0e:bc:fa:54:67:59:eb:93:4c:ff:
                    2a:f9:91:92:e5:f6:61:0c:0f:f2:bd:18:78:eb:65:
                    e3:6f:8b:d3:af:fd:d5:be:55:14:a8:cf:bb:38:f8:
                    41:ce:30:c5:98:52:a9:a9:f6:fd:2b:66:71:3f:1c:
                    71:f0:47:72:33:ce:ba:09:79:6e:bf:70:ef:8d:a0:
                    d5:b7:9a:db:6a:1d:ed:66:d2:03:02:c3:99:ec:46:
                    ac:38:9e:17:1d:20:8e:81:13:0d:69:04:6c:b2:3d:
                    ea:b2:07:c0:26:5f:92:01:0b:c2:a1:16:5d:5d:49:
                    b0:33:b0:3f:ee:ef:b0:dc:fd:55:7f:b7:94:2a:60:
                    cd:13:ed:d4:07:05:ee:db:a4:d8:1e:5d:6a:a4:6f:
                    36:e1:1f:96:d2:65:8b:ef:1f:2b:12:4d:59:2e:40:
                    5c:f8:8e:84:29:b8:51:84:d7:fe:96:16:a2:55:3d:
                    3c:87:24:52:0f:55:d9:9a:73:f8:b3:6b:6b:7e:36:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:89:B4:85:AD:EA:D2:ED:5C:26:D6:1A:49:83:BE:FA:B6:E0:5E
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:19:08:de:c3:c0:41:7f:95:5a:b3:1d:50:ec:fb:ce:9b:
         99:6c:f0:de:c7:2d:3f:5a:41:ae:79:f4:0e:e6:d6:c9:4f:90:
         e0:e9:21:9c:2f:4c:b1:e8:80:76:31:c9:37:cf:c1:8d:c5:e2:
         18:3f:21:d7:f4:dd:35:00:40:45:b8:43:99:5e:b2:02:3f:db:
         22:c8:35:7d:64:81:0f:33:a5:ca:b5:67:35:7c:12:a7:27:89:
         09:bb:dd:e9:f6:f6:a0:a0:39:44:72:b2:db:2c:44:26:70:29:
         d7:29:e6:43:5c:ab:6d:bf:5a:a7:9e:5b:68:78:60:53:18:05:
         fc:d4:11:b7:d2:b8:d2:87:36:e9:4f:65:b9:bf:a0:3e:30:7f:
         f5:10:8c:dc:b2:ab:0d:a0:c0:d2:cf:32:0f:5f:07:53:e8:b7:
         60:ce:d2:86:24:87:c7:36:dc:93:7a:28:1c:f6:97:d0:1b:21:
         0c:2d:bb:97:e3:91:3a:c2:e9:8c:fb:a6:12:5e:32:46:d1:5c:
         15:9a:ee:07:4e:b9:cb:6f:98:28:c3:05:b7:02:b9:d8:1b:d2:
         7c:b5:13:ec:19:c8:0c:0f:11:1e:f9:ce:8f:ac:f0:10:9d:78:
         64:13:f0:68:40:ad:48:40:5e:39:b1:7f:f2:ff:4b:27:71:71:
         d2:66:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:41 2025 by rpki-client