This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File:                     qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier:          j9XPvtq7NIKirKLb90uCxAXSqANuwWUF1xMFbtxqPDc=
Subject key identifier:   9B:53:8A:03:A3:85:04:90:2B:69:35:AC:BC:4D:FF:50:0C:88:F5:9A
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       0902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number:          08EA
Signing time:             Thu 04 Dec 2025 19:32:41 +0000
Manifest this update:     Thu 04 Dec 2025 19:32:40 +0000
Manifest next update:     Thu 11 Dec 2025 19:32:40 +0000
Files and hashes:         1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: A7jElSlpPhbplKjJePIOmT0AndltDWQfrjnW56U309Y=)
                          2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=)
                          3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=)
                          4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=)
                          5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Dec  4 19:32:40 2025 GMT
            Not After : Dec 11 19:32:40 2025 GMT
        Subject: CN=6931e1d9-c67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:36:52:de:19:e7:82:6b:2a:19:85:56:87:
                    9f:bb:80:ff:c6:bf:15:e8:34:ef:f5:bd:93:ad:a5:
                    a9:ea:05:c1:d2:35:77:14:0b:3f:46:49:3f:39:82:
                    e4:f1:84:87:6a:2b:6b:e4:51:e1:0e:a8:98:dc:df:
                    47:38:2a:f5:a3:67:57:80:37:2f:00:cd:c9:e3:c7:
                    49:55:cd:35:51:6c:d8:79:0e:7c:8d:4b:42:85:ef:
                    a3:f3:66:ae:3a:a3:d8:bc:e3:7a:16:2a:75:fb:07:
                    32:86:d4:60:db:13:17:5e:30:86:a2:e3:93:06:09:
                    43:59:9f:7f:ad:de:e6:4c:c8:e5:26:df:29:cd:3c:
                    01:e2:98:be:5b:b7:b6:a9:d0:5f:43:a5:f8:ce:b3:
                    32:b7:8d:32:88:eb:f7:28:a2:44:0c:a7:c2:65:60:
                    4d:65:5f:90:d9:84:1f:c3:f3:b7:26:b1:6f:9a:3a:
                    80:43:6e:8c:85:f9:48:e0:8d:2d:b1:fa:c2:74:60:
                    12:ab:41:9e:65:08:3d:06:06:ca:18:54:c1:b5:42:
                    cb:7a:86:a2:b0:88:a7:08:06:97:2a:ac:6f:26:33:
                    9e:ce:db:c4:0b:7a:2c:02:c3:86:82:f0:46:2c:87:
                    8f:70:28:27:4c:22:e6:47:43:f6:0f:34:78:86:1f:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:8A:03:A3:85:04:90:2B:69:35:AC:BC:4D:FF:50:0C:88:F5:9A
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:9c:24:f5:26:af:27:6a:6b:db:44:2d:a2:36:6e:c8:a2:
         0b:b2:46:93:66:dd:6a:07:81:7b:06:0d:f3:a7:88:cc:72:c4:
         8e:3f:f9:2d:a2:71:1e:e4:f7:99:96:f6:ce:63:ac:db:a0:6c:
         c0:91:29:41:67:1f:1f:9b:60:65:a0:13:75:12:07:f9:4b:47:
         3c:f3:af:6f:76:c5:2a:12:37:fd:aa:58:c1:08:67:66:12:06:
         c7:92:be:11:8b:98:0d:68:73:7b:7c:c3:b1:be:16:91:2b:30:
         73:ba:db:d7:5d:ac:8d:6f:63:c2:38:ff:1a:f0:9b:26:2d:ad:
         17:dd:ed:ee:57:c1:13:82:33:3e:ec:8a:df:df:58:17:af:d6:
         d6:02:a4:56:14:0c:7b:e6:3e:f6:7f:8f:dc:53:24:03:ed:34:
         3c:8c:12:b6:d7:8d:ec:31:a5:42:a5:a3:4e:21:ba:e5:2e:8f:
         7a:b8:19:d8:c4:73:70:47:3c:2c:d8:de:17:2c:c3:d8:63:cd:
         9a:7f:7f:6a:c5:9b:19:29:e7:bb:4b:ed:46:e8:89:bb:01:d2:
         cc:3a:6a:ee:77:16:7f:36:c1:bf:e1:66:7b:7c:16:07:bb:cf:
         70:83:d7:ae:2c:d2:9c:8b:fa:9c:b2:c7:d3:7b:01:ac:cc:10:
         55:ec:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:45:38 2025 by rpki-client