This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
File:                     qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json)
Hash identifier:          NVQtsJfER/i/rtS9wPn2a2TZg2XxImCFXA2GiTcK1AM=
Subject key identifier:   9C:F1:B1:2C:26:FA:60:72:83:60:A3:05:51:51:68:5C:D9:C1:EE:BB
Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
Certificate issuer:       /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
Manifest number:          72
Signing time:             Fri 05 Dec 2025 04:45:47 +0000
Manifest this update:     Fri 05 Dec 2025 04:45:46 +0000
Manifest next update:     Fri 12 Dec 2025 04:45:46 +0000
Files and hashes:         1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: B5QunZRX05OVtf4Z66pV8OBdX1MDb8K54v/7r+B1r+E=)
                          2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
                          rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
        Validity
            Not Before: Dec  5 04:45:46 2025 GMT
            Not After : Dec 12 04:45:46 2025 GMT
        Subject: CN=6932637a-94ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:61:1b:5c:9b:65:86:5a:0f:ec:86:10:5e:
                    c6:9d:4c:35:d5:57:4e:3c:72:12:af:00:bb:4b:bf:
                    da:d6:09:a2:a7:3c:4a:03:ca:18:75:27:15:4b:04:
                    00:25:17:64:b4:02:0b:bb:da:ed:cc:09:48:b9:b6:
                    37:fd:4b:f5:ee:5e:b5:4d:ed:89:ed:38:1a:2a:5b:
                    3f:79:e3:17:ea:d3:7f:44:9b:7e:1a:89:7f:33:53:
                    75:16:f2:e6:19:58:45:9d:50:bc:c4:dd:46:c6:7f:
                    83:bd:99:59:49:05:fb:9b:c4:12:9e:bb:7c:c2:74:
                    f3:ca:d8:6f:15:a1:de:45:e2:19:43:b1:46:f1:78:
                    89:46:ff:9c:9c:6f:2b:66:2d:c7:98:1b:ad:2f:d2:
                    9b:08:de:8d:da:46:0f:9d:1e:65:3d:b9:05:ec:c6:
                    e5:65:63:9e:6b:66:06:5e:e6:24:2d:65:3f:9d:4f:
                    ba:14:69:d2:87:50:43:75:96:79:0e:8f:72:25:a4:
                    70:c2:04:6d:4d:ac:1f:9d:6f:f7:b3:6d:e1:57:50:
                    ec:06:f5:df:50:b0:2d:73:2d:b7:04:92:a6:3a:ed:
                    9f:a3:10:2a:33:52:64:e9:e3:32:25:b3:84:e6:96:
                    0d:ce:43:79:87:a1:a5:f9:28:93:16:cc:1b:d3:d1:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F1:B1:2C:26:FA:60:72:83:60:A3:05:51:51:68:5C:D9:C1:EE:BB
            X509v3 Authority Key Identifier:
                keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a9:c5:0d:b8:fd:0f:a8:2a:6a:08:c7:a3:e8:4f:07:d0:94:
         04:73:2c:7a:dd:98:c3:b3:65:80:af:02:96:50:b0:55:5e:3b:
         cd:3a:4c:9f:cc:2e:fc:0f:96:c7:6f:7b:c8:63:bf:14:b9:6b:
         11:1f:09:d7:1d:38:e8:1f:50:f6:14:22:bf:41:6a:5e:a0:7c:
         b5:79:3d:b6:be:04:92:59:cb:26:e1:43:b2:de:1e:e1:4c:f4:
         35:59:9e:58:c2:5b:aa:06:b0:10:52:f2:80:a6:d9:42:04:e0:
         c0:5c:14:a6:51:4b:18:72:41:56:84:7c:01:fc:0a:30:56:26:
         0c:36:03:60:23:7f:aa:32:21:d5:08:d9:93:5c:dc:c1:2b:13:
         07:b1:5f:50:d1:2f:2d:5c:a3:ae:fc:1c:50:4b:fe:82:13:b8:
         12:f3:79:86:70:a3:4c:f0:5c:f8:e3:a6:ea:6d:46:96:2a:df:
         59:96:af:7d:ad:08:0b:da:60:54:9e:d6:b4:75:71:42:57:fc:
         30:68:01:f4:43:05:31:61:3a:df:38:a4:b5:99:00:3c:75:79:
         29:62:8b:98:9a:e7:02:2f:e4:e3:da:d6:39:47:79:7b:82:6e:
         e5:89:b8:2d:a5:db:e4:66:28:e1:18:8a:4b:58:c4:ca:c6:85:
         e5:38:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:11:08 2025 by rpki-client