This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          CG2Kva4UlIcxlCNEci99DORCr7ih6dV3qpV/BNyLoh8=
Subject key identifier:   06:4C:2E:2C:88:0B:D5:F3:D3:A0:CB:49:54:05:45:34:98:17:D1:DA
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          0204
Signing time:             Fri 05 Dec 2025 00:52:11 +0000
Manifest this update:     Fri 05 Dec 2025 00:52:11 +0000
Manifest next update:     Fri 12 Dec 2025 00:52:11 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: Ko07TdCNhAeyRz6yd++RdNOdTS0noNZ8JvB/JYHQss4=)
                          2: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: KtpeeMkouh4BeqprRpHiO5N0mOWLBqSII+5IcI34asQ=)
                          3: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: MfGkx1p+AR8LGngCGKaWy5VFMi2XvfPLd7Jh76cVq5o=)
                          4: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: RZlLR5rvnVhpVEd/FTriT/xUptzzKX1mswk/DreUGWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Dec  5 00:52:11 2025 GMT
            Not After : Dec 12 00:52:11 2025 GMT
        Subject: CN=69322cbb-d9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:04:ee:3d:b0:ba:2b:27:26:ec:09:81:6c:72:
                    96:67:dd:e4:3d:d4:91:20:86:15:40:1e:33:87:6a:
                    af:cc:ab:53:0b:a5:67:15:a2:fc:2d:59:5c:2b:01:
                    94:21:02:24:a6:e6:cd:63:c0:14:fe:4b:27:59:02:
                    e2:0a:f3:bc:7f:14:e5:ee:ff:2f:aa:6b:2c:1d:17:
                    3a:bb:c8:2b:30:10:9d:63:12:38:a2:62:2c:38:e5:
                    70:1f:38:49:ab:e9:44:38:f7:d1:1d:8b:fa:36:39:
                    f2:9e:66:ae:ba:80:78:16:a9:ea:6a:af:17:39:22:
                    f4:7b:c1:8b:24:81:d4:dd:eb:9c:02:6b:e6:53:3d:
                    cb:00:51:5d:2f:00:88:9a:36:af:f7:1d:d8:39:46:
                    78:aa:4b:15:4f:fb:e2:5d:c1:e0:b0:36:92:46:34:
                    8a:09:ad:91:43:5f:f1:0a:65:31:b1:71:d6:24:dd:
                    3e:34:5c:63:11:9c:55:5b:34:c7:6d:c6:ae:94:fa:
                    44:00:ec:e2:01:fa:13:69:6e:89:bc:ef:4b:73:bf:
                    67:46:d5:92:6b:b4:30:c3:e6:75:1b:36:8e:77:b3:
                    5f:a2:af:79:ce:84:63:63:8f:d9:da:a8:dd:02:f0:
                    a2:04:f2:f3:c7:93:29:17:f6:96:1e:26:ec:7b:28:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4C:2E:2C:88:0B:D5:F3:D3:A0:CB:49:54:05:45:34:98:17:D1:DA
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:91:e4:fc:9d:8e:57:40:cd:03:e9:61:c6:49:df:e0:da:f2:
         34:aa:4d:17:ed:1b:72:62:5b:82:36:2e:e4:09:bd:b9:4e:ad:
         12:e6:44:36:15:bf:22:e0:fb:32:b8:47:b5:31:7f:10:07:e2:
         a9:50:3c:05:55:08:99:0c:fa:88:8b:38:c0:70:e4:3d:d4:f5:
         60:b2:c3:6d:7b:0e:04:e1:69:43:d7:5d:82:98:cb:0a:10:7b:
         2a:ef:d9:15:1f:e4:f6:b9:2b:3e:17:d5:9b:76:d5:cc:93:61:
         0d:7c:e8:d7:a0:14:f8:f2:03:1f:c9:a0:b1:b7:42:a4:8d:ca:
         07:f0:a3:a5:03:0e:05:07:30:97:db:ce:92:e1:ea:4a:ff:79:
         52:a4:bd:f8:04:14:c8:84:c3:d3:31:e7:f4:b5:b7:cc:d4:86:
         f2:f0:7f:87:dd:e3:3f:59:77:77:29:5f:e3:c9:36:37:41:1b:
         78:9f:d5:1f:23:43:06:81:e1:74:18:03:d6:a5:fb:6e:03:76:
         0f:72:99:7c:49:32:79:72:1e:cf:82:ce:4e:49:3a:41:4b:32:
         d9:e3:f5:3e:99:a9:04:60:da:78:d6:d0:4b:77:6a:ce:96:26:
         84:83:c1:59:95:8a:be:bd:fc:33:60:c8:ed:88:cf:53:b5:5f:
         c4:f6:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:56:22 2025 by rpki-client