This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
File:                     lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json)
Hash identifier:          0YrcO3YAG55gftR4RoavjGNO83JQMVbkW3qwZ7oqlFA=
Subject key identifier:   5D:78:AB:98:6E:EE:D7:00:85:A6:20:3A:19:1F:90:2B:BC:43:6C:4F
Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
Certificate issuer:       /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Certificate serial:       105B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
Manifest number:          1785
Signing time:             Thu 04 Dec 2025 16:58:47 +0000
Manifest this update:     Thu 04 Dec 2025 16:58:46 +0000
Manifest next update:     Thu 11 Dec 2025 16:58:46 +0000
Files and hashes:         1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: FK93yduiR5gdO66R4tPWocSdXQa1q04ylvut5S2GK6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
                          rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4187 (0x105b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
        Validity
            Not Before: Dec  4 16:58:46 2025 GMT
            Not After : Dec 11 16:58:46 2025 GMT
        Subject: CN=6931bdc7-eaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:20:3c:94:2e:68:8b:0f:9f:ee:98:ca:00:
                    9d:01:03:5e:59:62:c1:31:ae:52:5b:c6:15:1a:da:
                    9b:05:01:7d:d0:4e:bd:e0:f7:69:96:19:fd:84:7a:
                    70:81:29:c2:54:8b:88:dc:e0:28:c4:fe:f8:d9:18:
                    55:cd:28:1f:59:e1:80:ff:0b:26:32:ac:13:00:9f:
                    10:26:29:ad:1d:9e:7b:2a:06:03:3f:c8:6e:32:1c:
                    a3:69:59:cb:be:47:c2:a6:5a:34:5a:04:3c:47:8e:
                    b2:32:dd:b3:2c:49:68:b9:cc:14:5e:0f:0f:4b:17:
                    35:43:5e:38:88:fc:27:b4:0c:71:43:8d:70:6e:d0:
                    b9:5c:8b:c3:57:29:da:8b:94:27:d2:47:3a:0b:69:
                    21:b0:e1:40:a6:83:b8:20:33:c0:19:76:60:97:68:
                    2b:c3:2a:bd:9b:d1:a9:dc:2b:f4:15:98:28:5f:91:
                    1b:e2:c6:a8:ed:20:6a:94:59:41:1b:fa:1a:13:32:
                    90:12:70:cd:76:43:b0:4c:00:d4:81:a8:64:f6:8b:
                    3e:1a:89:fd:f0:f5:77:45:f8:7e:41:01:af:29:99:
                    0d:cc:e5:e2:3c:e7:0c:89:72:4d:27:ac:92:e8:0d:
                    44:4c:6b:b5:47:af:7a:54:ae:0b:6b:48:7e:ae:52:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:78:AB:98:6E:EE:D7:00:85:A6:20:3A:19:1F:90:2B:BC:43:6C:4F
            X509v3 Authority Key Identifier:
                keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:18:ab:42:8c:0d:61:8e:17:73:5e:70:68:d2:0c:73:b9:92:
         a9:59:cd:8a:c7:28:29:59:f5:21:26:5d:bb:44:ed:3a:2d:37:
         8f:4b:4b:a5:f7:59:46:65:77:a4:e0:fe:a4:56:7d:4e:bd:38:
         fb:69:55:34:94:19:ac:a7:1d:00:32:09:09:b3:30:ff:0d:c2:
         9a:9d:3d:73:b5:e4:58:77:d3:87:fa:46:fc:bf:54:bb:c2:af:
         24:cc:84:da:04:d1:b6:da:f1:2a:76:af:39:d2:e9:9a:02:11:
         2b:54:99:a4:09:c6:e4:55:f7:d0:5a:13:c7:b6:73:ec:38:d1:
         d0:4e:7d:ac:6e:1b:31:5d:e2:9a:cf:05:f6:20:da:b4:fb:23:
         39:26:a4:96:91:07:08:e4:b0:43:e5:73:58:a7:27:29:ed:21:
         24:e6:c2:a5:f4:12:68:6f:a7:93:2b:71:fd:65:f6:ee:ed:af:
         92:4e:a2:97:5f:a6:d8:fe:1d:72:ba:ce:d3:a1:5b:8d:1b:3c:
         f9:35:5f:3a:78:06:86:9a:05:6e:5e:b6:71:01:6a:87:fb:9d:
         67:0e:ef:c8:2c:fb:fb:1c:ce:2c:91:a0:02:4f:bb:9b:34:f6:
         c5:4f:7d:1b:ab:cc:85:eb:8b:08:29:76:67:53:84:fe:15:90:
         38:bc:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:39 2025 by rpki-client