This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          /7fnpwqQo5VIGWwe8StT1LiaIiNXAizRZx3nCrirUs0=
Subject key identifier:   E4:2F:E1:12:CC:14:E4:74:60:27:14:66:1C:2A:33:D0:14:19:93:67
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       267E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1A9D
Signing time:             Sat 06 Dec 2025 17:02:40 +0000
Manifest this update:     Sat 06 Dec 2025 17:02:39 +0000
Manifest next update:     Sat 13 Dec 2025 17:02:39 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: x1ZmXcsekasStCXwhAJS0lp00hIPChHnZKa3Z1scTfk=)
                          2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: jROfgwuidzLC7AWCncg9tK5p5d6kMRx0vRFp0MoP+qM=)
                          3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: SicvG0o1j0juozOpQdU8S9XPJYPD28r6BEH0ZZTMtCk=)
                          4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: t77TBLDyfQlYv1eUozdedtWkdGosmio8lx2OnfPqKn8=)
                          5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: sU4VNKoTZRC7rOgdrdAJ5l9zMf5qWmX/UOum5j9Op04=)
                          6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: kOwwKmaSB/pWq+rkgCsR0x3XY0Ne0hYk+1IKNpUUA88=)
                          7: B53FD334575411ECAA094876C4F9AE02.roa (hash: OatUXNH0fiEtO2+f1JbCOSZAp/tTotYDXstcjWZ2J2s=)
                          8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: XPXw9+MhOn0NRVGrugIJU94WGGzOQijXcxAqrFhTo84=)
                          9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: QPwmUi6Jbr6XpgG54LpHBRL5GHoE85qF3kMh45EU4DQ=)
                          10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: yAxgtWHScyaAo/qxWzcthUIvpu0Cn87KgHaSUfVCrIw=)
                          11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: G2D8FdL9HWaJ530qHLe4NXg0uwb3o4sRDKVT7tvGUhw=)
                          12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: 5SjvOm2kSOv31BBmDpmyPr0NIqcd7j1K10ShJA+7SSg=)
                          13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: MSzaop+NtM6eR5vhQ8IzHf7QK9SqJHOEvf0dM16xPxo=)
                          14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: 74IUgWh0EIbll6zM2oD6KnRo4IUzeZO6atmhM6ptuY8=)
                          15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: NeAes0ETd9mQEhgNnwzsPARoogq3sg8oM9diG1oYLcg=)
                          16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: +jREgbuLYhz8eMMx2O9Ksp1ti5wG9/pudLfwvmM6Cnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9854 (0x267e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec  6 17:02:39 2025 GMT
            Not After : Dec 13 17:02:39 2025 GMT
        Subject: CN=693461b0-ef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:47:af:62:d4:12:2e:93:3d:39:c4:36:db:
                    84:a1:3f:9e:47:77:36:38:22:8c:ee:cc:d9:32:07:
                    9c:a7:a8:e3:83:e0:9a:94:9c:75:bf:d4:5f:93:c2:
                    f9:d0:7f:32:22:2a:66:07:9c:05:f2:44:ca:74:d4:
                    c8:cc:1d:f0:80:80:48:4a:79:74:94:18:6b:c0:3b:
                    15:99:fd:57:58:09:43:f5:51:27:75:fb:ef:67:7c:
                    fd:dc:ef:6b:6b:ea:2a:6c:b2:f8:e1:0c:fb:cd:56:
                    63:4d:0f:ed:62:88:3a:e2:d6:6c:9a:be:dd:99:67:
                    29:4f:18:00:3f:6d:ee:63:35:9b:12:70:48:70:18:
                    bc:a9:bd:3e:d8:1c:46:54:5b:7b:ac:80:d1:14:ce:
                    76:a6:4c:67:0a:55:02:83:36:1b:03:f2:0a:d3:0f:
                    73:f8:39:a7:86:e1:e0:94:96:d7:78:5f:49:fb:f6:
                    62:fe:85:8a:52:8c:38:b4:4c:d5:0c:55:c9:5f:cb:
                    1e:18:1e:fa:52:94:33:30:b7:a4:06:b6:8f:db:c9:
                    c0:40:e6:f1:bd:c8:0d:2e:db:af:9d:47:cb:f1:2f:
                    c1:49:1e:0c:ab:47:84:78:61:e4:53:c8:91:ab:f9:
                    31:8c:eb:a7:99:f0:45:ab:23:53:a2:90:85:e6:db:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2F:E1:12:CC:14:E4:74:60:27:14:66:1C:2A:33:D0:14:19:93:67
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:3d:45:50:71:c6:c2:4e:5e:6f:85:94:7a:d2:d5:cb:05:
         cb:30:f7:75:48:e2:ff:57:0b:e2:a7:b6:ab:b3:77:4e:db:f8:
         c8:d0:14:a2:e2:a7:e7:1a:25:5b:71:d9:2b:2e:ff:5a:84:ab:
         e3:13:a2:e4:8b:7f:7c:18:57:47:1c:e6:19:1a:7f:91:bc:8d:
         18:d7:11:cd:88:99:8e:be:22:6b:cd:c1:1e:be:25:dd:59:b5:
         c7:db:83:29:7b:97:d0:66:31:61:9c:79:ee:0a:51:14:06:b3:
         3a:6e:44:f4:8c:26:af:d1:8e:11:41:8f:6d:85:68:3c:53:e6:
         a7:88:4a:ed:f1:71:45:97:82:1e:01:1a:ec:09:9e:eb:75:20:
         61:cd:45:f2:f8:5e:7a:de:37:cb:29:0b:9e:61:df:bc:83:6f:
         d6:1e:4c:b2:86:46:08:42:6e:96:50:57:5a:1a:ad:b7:ed:4d:
         36:16:27:f5:c0:d7:cf:bf:e1:98:a7:8a:3f:44:e6:f5:77:86:
         f2:6f:08:1a:64:1f:35:ab:13:8f:94:01:99:ed:9e:ad:72:7a:
         a5:bd:64:fd:77:1d:1c:b2:88:29:b9:20:d8:22:ce:29:0c:54:
         86:36:77:f3:cf:52:8d:0f:08:c2:ba:06:ce:5a:79:c1:92:be:
         64:37:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:45:35 2025 by rpki-client