This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File:                     QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier:          1+xRpFl1mpK6sHwJIQZZmEjkBkx9+Q4dgD4ILViJfuk=
Subject key identifier:   95:C5:41:68:2A:5F:46:9E:8D:F7:7A:7C:AD:20:6C:11:0B:24:BC:F9
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer:       /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number:          34F4
Signing time:             Sat 06 Dec 2025 14:34:16 +0000
Manifest this update:     Sat 06 Dec 2025 14:34:15 +0000
Manifest next update:     Sat 13 Dec 2025 14:34:15 +0000
Files and hashes:         1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: 3ew7Hp2uniCpKL8oqrGH/AMWBA0CJQarGowdSNbLWmM=)
                          2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 06z9d5fjWqhjFaZliDpCRNH7Mjl/zpi5d4kXWnQYoQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
                          rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
        Validity
            Not Before: Dec  6 14:34:15 2025 GMT
            Not After : Dec 13 14:34:15 2025 GMT
        Subject: CN=69343ee7-de7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:4a:d8:31:8b:48:7c:21:97:3f:e7:71:71:
                    1f:0e:bf:17:8b:5c:4a:b2:7c:03:13:87:7e:26:f8:
                    63:d0:bb:fe:d1:8a:2b:2d:39:e5:64:e8:a3:4d:6e:
                    79:dc:86:41:36:9b:e1:d3:68:57:14:32:59:99:0a:
                    c6:79:21:2c:c9:58:9b:55:0b:a9:97:2b:8f:38:c1:
                    20:4d:b2:d4:28:68:54:fd:ab:fe:b4:30:fc:50:d0:
                    50:b7:f2:7c:4e:bd:e5:dd:56:fd:fd:7c:ac:9d:87:
                    9a:47:7f:67:bd:c6:ae:0f:ab:a1:1e:a7:e0:96:a6:
                    d2:52:f9:55:38:bc:e9:3d:bf:a9:7e:2f:8b:91:99:
                    21:c7:8d:4c:3c:c0:ff:40:dc:11:37:74:bc:87:71:
                    0d:50:03:84:85:c8:8e:96:39:01:77:db:a5:d6:66:
                    b7:90:63:b0:09:7c:c9:37:11:d0:bd:be:02:dc:7a:
                    9c:ad:2d:36:68:be:65:e1:3d:b8:ae:ea:d3:f2:f9:
                    55:48:fa:ac:33:2c:b2:40:3a:8e:46:9b:05:88:16:
                    2b:3f:db:67:3f:48:c8:bf:e1:e6:7e:a3:14:14:79:
                    56:19:b4:36:1e:39:86:62:48:1f:47:a1:ac:0f:e7:
                    97:2d:df:1e:99:96:26:be:db:07:22:03:fd:49:1c:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:41:68:2A:5F:46:9E:8D:F7:7A:7C:AD:20:6C:11:0B:24:BC:F9
            X509v3 Authority Key Identifier:
                keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:00:af:6c:a6:77:5f:fb:c1:cf:dd:2f:28:79:f7:43:16:
         37:cc:54:8f:0f:76:2a:09:8b:78:71:8d:0d:03:22:97:b9:70:
         6a:2a:7f:ef:10:84:1c:fe:bf:4c:f8:25:8c:f8:87:c0:bd:00:
         de:b4:2d:b7:fb:0a:c2:6b:58:74:58:b4:43:22:8c:21:eb:ea:
         fe:32:f1:6f:d3:4d:70:e7:d6:56:a2:7a:be:10:ac:32:f1:a2:
         a0:9c:30:e8:a8:51:d7:24:e8:10:37:0d:e1:6f:b0:52:54:14:
         d4:0e:23:db:3d:24:3d:4d:22:c2:68:2a:49:2a:2b:72:c0:d0:
         35:43:ed:ae:08:93:f9:7f:42:d9:1a:2e:61:df:80:09:9e:99:
         be:ce:50:f5:d6:5d:ba:26:aa:59:ec:0e:36:c2:cf:c0:55:77:
         ab:2d:4f:b6:23:bd:46:8f:d3:4f:b9:0a:f2:5c:3b:d7:bc:ee:
         a4:94:8c:41:5a:4c:c8:fe:f5:ba:50:14:51:13:2d:de:8b:13:
         0a:fb:75:19:d1:0c:23:db:51:c1:75:31:0b:89:6a:14:fa:8f:
         2b:8a:06:c1:95:45:ab:79:35:d6:5f:33:48:e8:0b:69:2f:83:
         ef:cd:d4:cd:b6:36:cc:42:2d:e2:d0:d5:3f:43:82:a2:b2:98:
         c1:df:a2:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG
OEYyMzhCMzEwHhcNMjUxMjA2MTQzNDE1WhcNMjUxMjEzMTQzNDE1WjAYMRYwFAYD
VQQDEw02OTM0M2VlNy1kZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA54VK2DGLSHwhlz/ncXEfDr8Xi1xKsnwDE4d+Jvhj0Lv+0YorLTnlZOijTW55
3IZBNpvh02hXFDJZmQrGeSEsyVibVQuplyuPOMEgTbLUKGhU/av+tDD8UNBQt/J8
Tr3l3Vb9/XysnYeaR39nvcauD6uhHqfglqbSUvlVOLzpPb+pfi+LkZkhx41MPMD/
QNwRN3S8h3ENUAOEhciOljkBd9ul1ma3kGOwCXzJNxHQvb4C3HqcrS02aL5l4T24
rurT8vlVSPqsMyyyQDqORpsFiBYrP9tnP0jIv+HmfqMUFHlWGbQ2HjmGYkgfR6Gs
D+eXLd8emZYmvtsHIgP9SRyjgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXFQWgq
X0aejfd6fK0gbBELJLz5MB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE
OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl
MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQACrACvbKZ3X/vBz90vKHn3QxY3zFSPD3YqCYt4cY0NAyKXuXBqKn/v
EIQc/r9M+CWM+IfAvQDetC23+wrCa1h0WLRDIowh6+r+MvFv001w59ZWonq+EKwy
8aKgnDDoqFHXJOgQNw3hb7BSVBTUDiPbPSQ9TSLCaCpJKitywNA1Q+2uCJP5f0LZ
Gi5h34AJnpm+zlD11l26JqpZ7A42ws/AVXerLU+2I71Gj9NPuQryXDvXvO6klIxB
WkzI/vW6UBRREy3eixMK+3UZ0Qwj21HBdTELiWoU+o8rigbBlUWreTXWXzNI6Atp
L4PvzdTNtjbMQi3i0NU/Q4KispjB36K3
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:45:24 2025 by rpki-client