This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
File:                     qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json)
Hash identifier:          LwBj/Royj0HW6F6CoRDAFGENNvjsTCqcw3xpGhCoaG8=
Subject key identifier:   04:AF:23:6F:2B:2F:BE:4A:D7:14:AF:7A:FC:C4:2F:C4:21:27:89:8A
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Certificate issuer:       /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
Manifest number:          072B
Signing time:             Thu 18 Dec 2025 21:14:07 +0000
Manifest this update:     Thu 18 Dec 2025 21:14:06 +0000
Manifest next update:     Thu 25 Dec 2025 21:14:06 +0000
Files and hashes:         1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: N3VyEaXR3dBCRZGNRmXzfBdXud5mP2nA+1TSV+lLAXY=)
                          2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: FRIMYZ0ymb4xNk4HDg1e5QrcA1pECIMjsb8IPP33VK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
                          rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
        Validity
            Not Before: Dec 18 21:14:06 2025 GMT
            Not After : Dec 25 21:14:06 2025 GMT
        Subject: CN=69446e9f-4285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:0a:37:9f:d5:ee:72:e7:c5:29:2e:30:e3:
                    9e:49:f7:ac:51:d2:23:85:af:08:4c:67:07:e7:78:
                    66:19:68:a7:f5:d0:17:b5:94:3d:69:f8:98:f7:87:
                    bb:e1:fb:47:e8:da:f2:87:08:6a:20:19:74:39:a1:
                    42:bf:db:5c:63:e4:53:ac:fd:21:cd:02:59:86:fe:
                    f9:11:4c:fb:8e:7e:54:40:21:3f:58:ae:04:32:1e:
                    69:13:8a:38:ef:8d:e0:3f:fa:cb:9f:c3:ad:6d:9d:
                    ca:d0:e9:42:2c:85:d1:ee:cd:f0:1d:b4:0a:0c:0c:
                    66:49:af:fc:87:b8:3e:c9:1b:bf:db:d5:df:88:0e:
                    8b:81:c1:73:4e:4a:fe:85:1e:29:c9:d1:d1:ce:ec:
                    02:82:aa:2d:97:7e:31:0f:69:ba:1a:43:e2:73:a3:
                    1e:0f:b5:86:33:1f:64:ee:fc:90:7e:82:8b:c7:df:
                    b2:20:43:c4:cb:87:31:46:3e:7a:68:b9:ae:a4:5e:
                    d9:e7:42:fa:60:04:14:15:de:a3:8b:3e:af:d3:9e:
                    e2:2c:85:2b:f0:85:9d:0c:92:0e:f8:dd:bf:4b:29:
                    53:a0:05:8b:40:27:b1:88:51:98:01:1f:36:6d:bb:
                    fb:1b:9f:48:b3:9b:47:b4:a1:4c:bd:d3:ce:6f:b2:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AF:23:6F:2B:2F:BE:4A:D7:14:AF:7A:FC:C4:2F:C4:21:27:89:8A
            X509v3 Authority Key Identifier:
                keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:f0:6b:e6:90:33:e2:81:d7:62:f0:72:3e:cd:b5:d6:c0:
         cd:30:08:ae:b5:68:8b:ff:6a:24:cc:7a:b6:32:65:0b:ce:40:
         bc:5b:21:27:cc:e4:4c:02:d6:f4:62:84:88:6f:d8:e5:4b:7a:
         ac:78:19:21:1b:ec:85:78:38:5e:12:71:9d:a7:47:85:33:de:
         6f:66:98:99:fb:c8:ec:3a:ff:49:04:d0:6e:4f:89:53:5b:db:
         57:36:db:ca:ce:66:85:b1:87:da:f6:7c:07:f2:f3:35:54:03:
         8b:21:28:55:2f:59:c8:5c:fb:19:18:6e:cc:d6:57:e1:60:bb:
         66:64:55:df:24:62:21:3e:09:e6:fd:da:19:51:8e:69:09:89:
         23:aa:bd:fc:2c:0b:36:80:00:43:8b:8c:61:55:3b:17:5c:f1:
         8e:8c:df:00:e4:bc:e6:ac:fb:3f:f2:c1:d2:5e:65:3d:cc:5a:
         d5:8d:e0:b2:37:d7:46:b1:8b:d3:aa:f1:91:ab:c8:4b:76:b5:
         27:a9:5c:41:a3:f7:0c:43:e1:32:dc:c5:34:a0:87:eb:3d:22:
         2c:c5:0b:20:59:78:f7:80:d7:03:14:84:a0:d5:96:71:20:dc:
         88:8d:25:cc:d4:7d:fb:8a:19:18:45:81:aa:00:72:09:b0:fe:
         72:7c:d7:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5
MTU0Nzg2QkMwHhcNMjUxMjE4MjExNDA2WhcNMjUxMjI1MjExNDA2WjAYMRYwFAYD
VQQDDA02OTQ0NmU5Zi00Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEgKN5/V7nLnxSkuMOOeSfesUdIjha8ITGcH53hmGWin9dAXtZQ9afiY94e7
4ftH6NryhwhqIBl0OaFCv9tcY+RTrP0hzQJZhv75EUz7jn5UQCE/WK4EMh5pE4o4
743gP/rLn8OtbZ3K0OlCLIXR7s3wHbQKDAxmSa/8h7g+yRu/29XfiA6LgcFzTkr+
hR4pydHRzuwCgqotl34xD2m6GkPic6MeD7WGMx9k7vyQfoKLx9+yIEPEy4cxRj56
aLmupF7Z50L6YAQUFd6jiz6v057iLIUr8IWdDJIO+N2/SylToAWLQCexiFGYAR82
bbv7G59Is5tHtKFMvdPOb7IDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASvI28r
L75K1xSvevzEL8QhJ4mKMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC
QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV
SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKkPBr5pAz4oHXYvByPs211sDNMAiutWiL/2okzHq2MmULzkC8WyEn
zORMAtb0YoSIb9jlS3qseBkhG+yFeDheEnGdp0eFM95vZpiZ+8jsOv9JBNBuT4lT
W9tXNtvKzmaFsYfa9nwH8vM1VAOLIShVL1nIXPsZGG7M1lfhYLtmZFXfJGIhPgnm
/doZUY5pCYkjqr38LAs2gABDi4xhVTsXXPGOjN8A5LzmrPs/8sHSXmU9zFrVjeCy
N9dGsYvTqvGRq8hLdrUnqVxBo/cMQ+Ey3MU0oIfrPSIsxQsgWXj3gNcDFISg1ZZx
INyIjSXM1H37ihkYRYGqAHIJsP5yfNeB
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:57:19 2025 by rpki-client