This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File:                     Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier:          XBgkX7pT1+K5BngKNOx0oA80RHueMfuCM0ZdfzGFqv8=
Subject key identifier:   58:D1:65:3C:C7:E6:6C:89:99:A2:38:41:58:1D:5A:B7:D9:D2:63:5F
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       078F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number:          0785
Signing time:             Thu 04 Dec 2025 18:44:59 +0000
Manifest this update:     Thu 04 Dec 2025 18:44:59 +0000
Manifest next update:     Thu 11 Dec 2025 18:44:59 +0000
Files and hashes:         1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: e3pmmRZ6xtZwZwVgwQyE64GOlAi9+5J29/iUkgVo2HY=)
                          2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Validity
            Not Before: Dec  4 18:44:59 2025 GMT
            Not After : Dec 11 18:44:59 2025 GMT
        Subject: CN=6931d6ab-3f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:0f:8f:7c:b5:c8:b7:0f:dc:b4:2f:dd:3b:
                    be:f4:95:cf:64:8c:90:eb:8c:1b:f5:a5:d2:2f:2d:
                    a0:04:15:db:e9:82:dd:b4:ba:cc:f1:3a:e2:d2:a8:
                    ec:da:b2:7b:20:f5:3b:90:54:d5:79:0d:a8:63:f8:
                    8b:c4:16:d2:81:35:5a:6d:36:f4:f4:f0:52:b4:1a:
                    7d:a7:06:ed:df:b9:90:eb:a7:c0:a7:b8:15:8b:33:
                    54:b8:b6:2d:bf:ec:ac:b9:8a:ad:45:d1:5b:1c:8f:
                    41:46:85:c7:95:ea:59:33:04:be:d0:a8:27:4a:da:
                    49:45:e6:69:80:44:93:be:e8:0b:7a:25:da:88:02:
                    f9:c8:02:ea:11:39:50:a3:26:3f:a4:62:80:05:2b:
                    f5:a3:01:4a:13:7d:ca:34:9d:37:5e:d4:fe:74:08:
                    50:93:3e:2c:c0:00:28:3b:fa:32:5d:a7:12:ae:d9:
                    92:b1:dc:09:96:bd:06:2d:c2:8b:d7:b5:07:16:7f:
                    22:41:f3:8c:27:0a:ac:8f:a5:36:33:0f:ca:8b:c2:
                    e3:e7:24:ec:07:8e:bd:d5:f8:2b:c7:41:6a:0a:64:
                    7f:e0:fe:0c:87:18:49:8f:68:05:ef:b8:36:e1:28:
                    f3:2b:9a:85:fb:0d:8b:65:d9:8c:8f:e1:9f:73:24:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D1:65:3C:C7:E6:6C:89:99:A2:38:41:58:1D:5A:B7:D9:D2:63:5F
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:05:62:bc:d2:3c:bb:2a:27:1a:23:b1:6f:3c:f1:14:e3:
         18:0e:9f:84:ba:f1:52:cf:e7:fc:ce:40:1c:f2:7b:88:a3:f6:
         5b:62:2a:b9:35:92:f4:25:2d:6b:d7:0c:03:44:26:d2:ae:b4:
         b1:3c:1f:f3:9f:e5:32:f6:fe:d1:22:da:e9:2f:99:bc:13:d7:
         a0:dd:4e:c0:e9:c9:16:64:c8:c6:3c:26:48:f1:16:df:a5:12:
         bd:7e:33:67:29:49:2c:66:97:da:b5:42:18:05:d7:2d:cf:f7:
         c1:29:bd:e3:db:5a:4a:f3:5e:05:11:85:ea:c0:b3:f4:2c:ea:
         5f:c6:7d:d1:ed:69:3d:47:f6:09:da:9e:39:b6:6a:cb:6a:55:
         66:82:47:81:e6:9b:59:c4:09:da:75:fe:ae:b6:27:54:2f:c1:
         e2:b0:5c:49:e3:46:c3:1e:a1:b1:30:4d:55:50:0a:3b:bf:e8:
         75:34:c8:5a:85:cc:a9:7c:4d:6b:6c:56:4b:ca:b4:2a:f6:cc:
         20:eb:d3:83:33:bf:12:f6:e3:46:94:51:54:20:5d:4c:5f:ac:
         89:4b:9c:96:5b:df:44:75:bb:30:3b:28:c2:14:d7:17:84:6c:
         b6:f1:8f:ca:b9:29:f8:ae:8a:2a:91:92:7e:e6:54:22:08:d3:
         8b:3c:9a:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjUxMjA0MTg0NDU5WhcNMjUxMjExMTg0NDU5WjAYMRYwFAYD
VQQDEw02OTMxZDZhYi0zZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEAPj3y1yLcP3LQv3Tu+9JXPZIyQ64wb9aXSLy2gBBXb6YLdtLrM8Tri0qjs
2rJ7IPU7kFTVeQ2oY/iLxBbSgTVabTb09PBStBp9pwbt37mQ66fAp7gVizNUuLYt
v+ysuYqtRdFbHI9BRoXHlepZMwS+0KgnStpJReZpgESTvugLeiXaiAL5yALqETlQ
oyY/pGKABSv1owFKE33KNJ03XtT+dAhQkz4swAAoO/oyXacSrtmSsdwJlr0GLcKL
17UHFn8iQfOMJwqsj6U2Mw/Ki8Lj5yTsB4691fgrx0FqCmR/4P4MhxhJj2gF77g2
4SjzK5qF+w2LZdmMj+GfcyRJOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjRZTzH
5myJmaI4QVgdWrfZ0mNfMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBb3gVivNI8uyonGiOxbzzxFOMYDp+EuvFSz+f8zkAc8nuIo/ZbYiq5
NZL0JS1r1wwDRCbSrrSxPB/zn+Uy9v7RItrpL5m8E9eg3U7A6ckWZMjGPCZI8Rbf
pRK9fjNnKUksZpfatUIYBdctz/fBKb3j21pK814FEYXqwLP0LOpfxn3R7Wk9R/YJ
2p45tmrLalVmgkeB5ptZxAnadf6utidUL8HisFxJ40bDHqGxME1VUAo7v+h1NMha
hcypfE1rbFZLyrQq9swg69ODM78S9uNGlFFUIF1MX6yJS5yWW99EdbswOyjCFNcX
hGy28Y/KuSn4rooqkZJ+5lQiCNOLPJod
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:29 2025 by rpki-client