This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File:                     QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier:          qNND4yzBti6eBevCvxTg4xHROdILGhT/Qay9RGvyR6o=
Subject key identifier:   A4:59:95:9F:FD:C6:6E:3F:83:12:FA:E0:FD:C7:BF:58:55:6E:C1:E9
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number:          E7
Signing time:             Fri 05 Dec 2025 03:29:10 +0000
Manifest this update:     Fri 05 Dec 2025 03:29:10 +0000
Manifest next update:     Fri 12 Dec 2025 03:29:10 +0000
Files and hashes:         1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: 8P//zZBn1YhgxFQTM96r6GqA+K++ADInlN6WgtvClT0=)
                          2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Dec  5 03:29:10 2025 GMT
            Not After : Dec 12 03:29:10 2025 GMT
        Subject: CN=69325186-9175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:34:40:34:7f:e3:0f:3e:dc:1c:95:3a:7b:
                    7a:d3:55:e3:3e:c4:f9:3b:f0:bd:bd:eb:7b:7a:f1:
                    37:7e:1e:09:40:21:38:6b:f7:24:b3:fc:7c:2a:93:
                    76:b0:ef:3c:0b:b0:98:4d:c6:a0:06:8a:7b:da:55:
                    aa:f8:cf:bf:57:88:66:6f:9b:49:71:9c:96:79:98:
                    6b:9f:81:74:67:b2:e0:fa:6e:81:59:f0:8c:10:c7:
                    ff:fc:b8:91:99:33:a3:65:59:37:7a:e6:ca:15:e0:
                    71:56:20:93:c9:8e:77:9b:be:d6:63:de:3d:8a:21:
                    d2:73:81:79:17:10:ec:eb:fd:72:5e:0d:53:9b:56:
                    d8:35:43:4f:15:06:ab:29:c6:f1:5e:f8:83:63:fc:
                    06:24:ac:3f:8d:72:cc:c4:25:a5:b7:17:14:b5:bf:
                    5f:7b:6e:02:03:64:2c:77:1e:55:1e:68:76:e0:a3:
                    eb:3c:65:70:97:29:4a:03:af:b9:5f:81:bc:e0:c9:
                    b3:94:af:9b:05:b7:26:f0:11:2d:e9:2b:ad:d8:77:
                    2a:6e:ad:9d:a2:07:3a:b5:a5:8a:88:4e:5a:53:d8:
                    62:49:06:92:b7:8f:17:7e:19:36:58:9a:12:fb:15:
                    9e:e5:bd:47:d4:cf:d0:a6:3d:98:8f:43:ba:66:17:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:59:95:9F:FD:C6:6E:3F:83:12:FA:E0:FD:C7:BF:58:55:6E:C1:E9
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:71:80:ef:d7:be:d5:6d:fc:c2:d7:90:af:89:1f:af:fa:bb:
         d1:c6:e5:97:54:6e:d6:fd:04:c5:c9:91:ac:f5:7f:1c:9a:f6:
         15:bc:6d:17:8b:40:7a:60:96:db:5b:95:17:05:76:dc:c8:87:
         b7:62:cc:5f:20:0b:67:7a:0d:9f:f5:3a:a3:37:53:fe:5f:10:
         18:20:3b:92:b8:14:59:96:73:a7:ed:81:3e:4f:ff:56:99:84:
         13:a3:1d:c1:3a:92:9b:3f:ca:96:4d:fc:31:4b:b8:a2:38:54:
         8d:7a:8b:40:9d:28:5a:87:91:36:15:78:b0:e1:07:74:66:a6:
         61:52:3b:5c:bb:e8:2b:b0:ed:3b:c3:7d:80:b1:45:fa:9e:bd:
         cc:10:19:db:41:e7:fd:1f:7b:6b:a9:a8:4c:ba:0e:3c:94:52:
         45:12:d7:20:50:a8:57:38:91:97:56:5e:85:d9:10:3e:4c:3a:
         a3:f3:b6:c0:7a:6c:ea:8c:3c:f0:68:79:18:56:80:46:4b:fc:
         54:eb:93:7f:42:1b:d1:54:4e:30:d9:76:62:56:37:0d:48:ea:
         8d:8f:bf:18:53:6f:04:fc:7b:de:90:d7:8a:01:03:5e:2a:f5:
         e1:4c:64:51:78:9f:c0:4b:63:67:3d:ff:98:ab:dc:ec:3c:4f:
         9c:5e:a3:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2
MUUwRUE4OTYwHhcNMjUxMjA1MDMyOTEwWhcNMjUxMjEyMDMyOTEwWjAYMRYwFAYD
VQQDEw02OTMyNTE4Ni05MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAse00QDR/4w8+3ByVOnt601XjPsT5O/C9vet7evE3fh4JQCE4a/cks/x8KpN2
sO88C7CYTcagBop72lWq+M+/V4hmb5tJcZyWeZhrn4F0Z7Lg+m6BWfCMEMf//LiR
mTOjZVk3eubKFeBxViCTyY53m77WY949iiHSc4F5FxDs6/1yXg1Tm1bYNUNPFQar
KcbxXviDY/wGJKw/jXLMxCWltxcUtb9fe24CA2Qsdx5VHmh24KPrPGVwlylKA6+5
X4G84MmzlK+bBbcm8BEt6Sut2Hcqbq2dogc6taWKiE5aU9hiSQaSt48Xfhk2WJoS
+xWe5b1H1M/Qpj2Yj0O6ZherKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRZlZ/9
xm4/gxL64P3Hv1hVbsHpMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2
NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K
X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAycYDv177VbfzC15CviR+v+rvRxuWXVG7W/QTFyZGs9X8cmvYVvG0X
i0B6YJbbW5UXBXbcyIe3YsxfIAtneg2f9TqjN1P+XxAYIDuSuBRZlnOn7YE+T/9W
mYQTox3BOpKbP8qWTfwxS7iiOFSNeotAnShah5E2FXiw4Qd0ZqZhUjtcu+grsO07
w32AsUX6nr3MEBnbQef9H3trqahMug48lFJFEtcgUKhXOJGXVl6F2RA+TDqj87bA
emzqjDzwaHkYVoBGS/xU65N/QhvRVE4w2XZiVjcNSOqNj78YU28E/HvekNeKAQNe
KvXhTGRReJ/AS2NnPf+Yq9zsPE+cXqPg
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:34 2025 by rpki-client