This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File:                     q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier:          CW2orc4ijKkwjXHg3Fkrc4M5Qq+NbLc0E+VqtfkqFRQ=
Subject key identifier:   F5:3A:BA:36:4D:FA:2B:F5:09:F9:65:AF:47:94:8C:B0:0D:1F:E2:DB
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer:       /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number:          0707
Signing time:             Sat 06 Dec 2025 20:53:04 +0000
Manifest this update:     Sat 06 Dec 2025 20:53:04 +0000
Manifest next update:     Sat 13 Dec 2025 20:53:04 +0000
Files and hashes:         1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: 3MH+63sZE7UCUIUlG7R+8QN0ixhVXwuAqKvNVCem/Ds=)
                          2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: uL1H0QbwRjNu//kzatppv+a2Zrx1mIfoO1yF/DRChCo=)
                          3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: /T58KApZQd0ra/XBIJpEnSI47L1LMtselRFt+bUqiz8=)
                          4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: JdA5JlwXLIa+e4Ydsq+HvnuHIMVtQwL6RUUhoUIWZBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
        Validity
            Not Before: Dec  6 20:53:04 2025 GMT
            Not After : Dec 13 20:53:04 2025 GMT
        Subject: CN=693497b0-b525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:5c:94:d4:c7:bd:c3:ba:97:4d:33:da:74:
                    f0:3c:b6:bb:80:be:39:db:01:dc:18:58:d7:0f:ad:
                    c3:e8:b9:33:7b:e2:a4:4f:08:f9:ee:7a:2d:05:ae:
                    f7:11:f4:7b:90:f7:94:ce:86:5d:5a:bd:a4:f3:09:
                    a9:ac:aa:75:9b:0c:db:a2:15:d0:d0:42:ac:2f:34:
                    6b:f4:29:e7:92:b9:de:15:31:e4:81:49:00:ce:94:
                    fc:b5:ca:a6:00:8c:40:ef:c7:3a:62:3b:7b:5a:cc:
                    69:84:ce:8c:5a:08:f7:d4:6d:74:f8:00:97:ab:98:
                    cb:0d:fa:f3:b1:57:c3:12:bc:e2:42:4a:fd:77:59:
                    bf:e6:b9:53:ec:52:01:5a:ae:bf:81:50:a8:2e:ed:
                    ff:20:71:a8:e1:28:3d:f8:05:71:aa:ea:ef:22:4f:
                    b0:ce:e7:34:40:c8:ae:86:fa:e5:70:fa:4e:8c:d4:
                    14:47:f9:63:76:4c:e8:0f:45:27:33:0d:32:22:72:
                    4d:94:f2:2e:40:0e:53:34:39:78:73:34:4d:4c:4c:
                    0e:a9:c7:56:4b:ab:d0:f7:51:73:d3:c3:e8:55:40:
                    86:91:44:79:d7:2a:c0:21:a9:a5:a8:fb:d7:c2:6c:
                    1d:14:2e:98:3f:69:fa:30:69:62:8b:4b:a9:73:0d:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:BA:36:4D:FA:2B:F5:09:F9:65:AF:47:94:8C:B0:0D:1F:E2:DB
            X509v3 Authority Key Identifier:
                keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:19:6a:c2:83:71:10:bc:fa:6b:d5:82:e0:b3:00:76:2e:
         d9:40:13:f2:e7:5b:0d:48:19:8b:c1:bc:e5:17:39:d6:66:68:
         3d:27:95:14:fc:29:92:ff:e2:9b:ad:aa:e6:15:51:28:d8:9b:
         da:3a:2b:4c:ca:52:e6:8b:3e:a7:7d:1e:07:36:d9:fe:c2:ad:
         cd:74:66:14:49:3a:f1:d8:35:6b:05:fb:7b:1c:81:9a:88:7e:
         f4:74:f5:af:af:b9:a0:9e:20:58:7d:17:3e:2a:e9:30:ea:cb:
         46:f9:d8:20:1f:79:65:51:41:b3:3a:ad:33:02:3a:e0:44:71:
         c5:0f:7a:8f:62:68:03:0f:af:32:24:fe:46:7e:d9:d6:c8:df:
         5f:21:52:b4:54:74:9e:c5:e2:49:a7:09:b0:09:8f:e4:88:90:
         9a:05:86:05:59:84:80:e5:72:9f:0e:b1:c8:de:d4:db:f9:07:
         bb:69:73:19:72:ee:1d:6e:bf:76:70:44:5d:40:1e:7e:f8:80:
         43:b3:c5:6f:50:9b:0a:37:8c:73:f2:ca:1c:dc:80:34:e3:d7:
         c1:eb:7a:68:c1:7b:6e:14:7b:8b:57:ee:d6:b2:d4:06:45:f8:
         2d:ac:fe:b6:42:85:0f:ed:93:37:b8:c6:52:b9:97:0c:a0:14:
         c4:4d:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:13 2025 by rpki-client