This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
File:                     SV79PNQ-P-7r0irR3ep5817UePU.mft (raw, json)
Hash identifier:          bX1HQbNghWYSO9N5W05Hv+835YDgzeiwPidrA/JyIJY=
Subject key identifier:   4B:3F:BA:AA:43:71:97:43:4D:CB:9A:C3:BE:B7:4C:21:5E:E0:4A:5E
Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5
Certificate issuer:       /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
Certificate serial:       13DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
Manifest number:          13D2
Signing time:             Sat 06 Dec 2025 16:29:32 +0000
Manifest this update:     Sat 06 Dec 2025 16:29:32 +0000
Manifest next update:     Sat 13 Dec 2025 16:29:32 +0000
Files and hashes:         1: SV79PNQ-P-7r0irR3ep5817UePU.crl (hash: yyPaHC2CrFDKI2gFev0+ixp0Sh5ccDJKGCFnE//Ynfw=)
                          2: C569659C02DF11EBB54FAE29C4F9AE02.roa (hash: kR1dUvQfER2ySXRmsHMVP4v8+0H/2CkuEc7t3T+MN1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl
                          rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5084 (0x13dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A717, serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
        Validity
            Not Before: Dec  6 16:29:32 2025 GMT
            Not After : Dec 13 16:29:32 2025 GMT
        Subject: CN=693459ec-bf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:33:dc:d7:50:e3:a7:87:d8:f0:82:c6:3d:
                    4a:27:53:c0:d3:97:45:a1:4f:38:1b:74:54:47:51:
                    f7:2d:17:e0:7b:00:df:5b:2a:84:e2:2d:c5:15:17:
                    e5:2d:8c:2a:20:3c:e5:14:ac:71:73:ac:b0:7a:16:
                    8b:4b:b8:b4:87:49:7e:a9:b8:5a:b8:68:64:c1:a2:
                    68:dd:bc:84:80:99:18:1b:62:61:5a:8a:71:b2:1e:
                    f9:5e:c7:16:fd:ba:82:1d:71:dd:ba:21:93:8b:18:
                    0f:ee:09:ba:61:57:92:ae:f8:fb:65:d6:a7:d3:d5:
                    8d:f8:67:52:d5:fe:db:51:3d:f7:28:b3:48:72:c8:
                    3e:b0:23:8b:41:69:cc:40:94:b1:43:1b:a5:25:41:
                    94:ac:b1:92:67:62:ed:3f:de:90:f1:cc:61:33:4f:
                    17:07:2b:92:cd:d3:9f:c7:39:6e:fd:29:c0:0d:92:
                    ff:d4:be:c4:37:6a:e6:9a:11:6f:ae:53:f7:26:5d:
                    60:43:db:64:8a:eb:77:fa:47:2d:c0:1f:8c:82:ed:
                    ca:d2:5c:02:05:ed:f9:16:89:e1:e7:1d:97:6d:f3:
                    5f:3b:a7:20:ec:9d:1f:01:d5:a4:62:70:f9:77:ad:
                    32:c3:97:9a:99:6e:8e:df:c4:2e:68:a5:25:c5:ad:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:BA:AA:43:71:97:43:4D:CB:9A:C3:BE:B7:4C:21:5E:E0:4A:5E
            X509v3 Authority Key Identifier:
                keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:dd:1e:9c:90:c6:b0:46:ff:1d:2c:66:6b:10:56:19:40:
         72:8e:6a:b1:8a:03:7a:df:1f:09:08:99:b8:ac:3b:15:c7:a9:
         91:44:3d:59:7e:31:41:9f:c5:93:9a:fe:3d:72:1c:49:42:32:
         df:f6:e6:37:ef:44:46:a2:10:9e:43:5f:17:5b:f6:bc:7f:87:
         8b:0a:e0:f5:7e:67:48:66:68:1b:e1:05:15:b1:ad:e0:65:dd:
         3a:7a:79:4e:a5:1a:5e:fd:60:45:27:8d:1d:61:fb:c4:8b:d7:
         5d:b5:3a:0b:49:4a:35:31:03:5f:03:90:00:9f:d2:ca:61:00:
         75:bd:22:dc:04:f7:14:9b:f5:df:40:22:fb:26:75:3c:e5:df:
         57:b1:47:cf:3b:8e:d4:04:6e:37:e6:44:af:f9:2e:ec:ba:99:
         da:f9:fe:fc:b7:b1:66:08:c5:be:58:ac:b5:e3:6c:36:b4:bc:
         62:ef:c1:ec:47:a4:69:8a:7c:ef:a3:d5:94:a5:1b:a1:ce:e1:
         75:ce:0e:a1:3f:34:52:58:e4:f9:cb:31:0e:0c:35:41:1e:62:
         5d:76:46:b8:7e:5e:85:a8:7a:0f:a9:e8:2b:c3:ec:40:b2:83:
         a4:d2:1f:68:c2:d5:43:68:8f:5b:89:87:84:1f:04:17:c1:5f:
         dd:fc:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:58 2025 by rpki-client