This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
File:                     QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json)
Hash identifier:          RWnDZVQuVFkE4xUOo5t/zDUBqzLXmJJPWZfLKoWrh00=
Subject key identifier:   B2:C7:29:DE:9A:A2:2D:3C:FF:D8:38:08:21:95:83:2C:C6:85:20:D7
Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Certificate issuer:       /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Certificate serial:       0979
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
Manifest number:          0972
Signing time:             Sat 06 Dec 2025 19:16:35 +0000
Manifest this update:     Sat 06 Dec 2025 19:16:34 +0000
Manifest next update:     Sat 13 Dec 2025 19:16:34 +0000
Files and hashes:         1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: Ec1M2IE8GsXhB8MvJGGFHCGqqeaNFKaRU20N3EirpWs=)
                          2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
                          rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E9AD, serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
        Validity
            Not Before: Dec  6 19:16:34 2025 GMT
            Not After : Dec 13 19:16:34 2025 GMT
        Subject: CN=69348113-68a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:c0:09:e6:3f:f6:72:68:54:24:51:6d:2f:
                    4a:c8:1c:7e:95:54:ad:cf:c2:34:f2:df:ef:c9:46:
                    f9:47:b3:9d:2d:d0:32:c4:27:7b:b2:c7:9d:14:fd:
                    4b:88:95:5b:49:c6:a0:b5:4e:7c:a7:b2:8b:5a:32:
                    04:58:82:64:33:d2:52:e8:29:28:a0:58:4c:16:f7:
                    ef:eb:d4:ba:17:10:3c:47:dc:7c:61:a7:1a:85:60:
                    7a:d1:f3:b0:a0:99:e9:07:43:43:92:5d:2a:d9:19:
                    02:2b:85:fc:ac:f9:b0:33:75:3d:5a:65:0f:7c:7d:
                    3a:8b:a9:47:85:9d:55:d8:7c:d9:cc:b5:cb:92:0c:
                    0e:b4:08:ab:2a:73:8b:d4:7a:b0:f8:e7:d3:17:b0:
                    db:fe:f0:c3:8c:d1:2b:c1:18:06:bb:73:42:8d:65:
                    81:5f:cd:68:d0:d3:14:b2:5f:74:af:f5:6a:79:20:
                    91:4a:e2:d0:94:1e:85:14:78:2e:70:e0:6b:71:80:
                    21:0d:c4:97:5b:a7:5a:84:bd:4f:91:8d:d3:d0:96:
                    5a:ae:f7:15:00:7b:ea:31:5e:b0:86:8d:e3:5b:24:
                    f4:46:f8:0a:e8:09:5b:cc:2a:3c:66:8a:45:26:c0:
                    af:aa:51:84:30:86:54:8d:1d:2d:03:66:94:94:a6:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C7:29:DE:9A:A2:2D:3C:FF:D8:38:08:21:95:83:2C:C6:85:20:D7
            X509v3 Authority Key Identifier:
                keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:bd:3d:50:02:0c:3f:e0:39:16:77:69:ae:d6:f9:d4:fc:
         41:2d:3d:33:e3:a7:23:d5:78:95:ca:41:01:cd:78:ae:dd:a6:
         cb:2e:b3:36:da:70:5c:92:f2:1a:80:97:20:ae:63:b4:98:82:
         c1:8a:51:8c:bb:fe:04:31:b1:b2:43:24:b6:0d:ad:9c:bf:03:
         01:af:a8:d8:23:a6:2f:07:11:cd:99:3b:c9:8c:51:ea:71:03:
         7c:c4:81:d9:66:b2:18:5c:2b:80:96:bf:77:51:6b:ef:be:f2:
         a9:46:90:8a:83:be:63:52:6f:cc:4b:1c:91:c0:a3:c4:68:17:
         3e:65:9f:15:cd:3d:b4:a0:21:a4:f8:11:55:d0:ef:97:d6:a5:
         e0:0d:38:ba:29:23:50:c4:a9:1d:06:b7:ca:4e:9c:29:9f:c7:
         b8:18:1e:c9:cd:98:c0:fa:0b:aa:4e:c0:41:ed:78:f3:50:12:
         31:15:5f:ed:c8:8b:d1:ca:51:08:6a:b6:af:5d:02:78:f6:2d:
         aa:1e:62:0d:5a:99:5d:92:b9:73:46:14:7a:f2:f2:07:a3:3f:
         4c:c4:1a:c0:81:31:9d:b2:3f:79:04:d5:f7:b0:39:6f:a0:90:
         f2:09:7b:c4:b2:97:8f:1d:37:1f:89:2b:db:d2:37:aa:93:6e:
         2d:bd:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:56 2025 by rpki-client