This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File:                     Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier:          Eufy77LAKHa61ZRoK6fPtkWdBeMbgSJWLdR3v/gY9SI=
Subject key identifier:   43:0F:7C:8F:30:EF:6C:1E:36:FE:F5:F4:AD:29:EC:52:9A:46:20:79
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer:       /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number:          0142
Signing time:             Sun 21 Dec 2025 03:37:31 +0000
Manifest this update:     Sun 21 Dec 2025 03:37:30 +0000
Manifest next update:     Sun 28 Dec 2025 03:37:30 +0000
Files and hashes:         1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: Ud4G71Z9lc5Oxvjro2IzZaJ2xoXzQcV4gsPKbLWc1BQ=)
                          2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: sah200aOwYvH7hldekVzzUV/LvL4ckSI60/32eio3go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
                          rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
        Validity
            Not Before: Dec 21 03:37:30 2025 GMT
            Not After : Dec 28 03:37:30 2025 GMT
        Subject: CN=69476b7b-e9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:32:d0:4c:00:ac:31:ab:fa:42:55:6e:4b:0b:
                    e0:ae:b0:f5:ec:f1:73:34:b8:81:ff:95:ae:c8:2f:
                    a7:6e:17:5e:84:9b:55:54:a9:51:ae:f5:b9:ee:5a:
                    aa:2e:b0:4d:36:1b:4a:6e:f4:6a:f8:06:00:46:50:
                    de:33:d8:de:5d:af:1e:82:f1:9b:66:3b:ce:a0:ce:
                    ca:13:96:12:e8:be:f6:c0:66:30:ae:0b:68:96:74:
                    4e:45:1f:d8:e5:d5:bf:88:4f:b6:0a:76:71:5e:13:
                    84:f1:8a:cc:16:a8:a0:45:05:bd:d9:b8:e1:64:e0:
                    9e:57:d7:f9:c8:14:c9:f5:3d:15:07:81:50:6d:65:
                    da:df:99:f7:cd:67:2e:32:fd:e2:d1:64:8e:f0:d5:
                    4f:52:9a:27:92:4d:17:1a:39:ff:0a:ea:bf:dc:fd:
                    38:e4:02:62:7b:fa:c2:d8:1d:e9:0e:9c:e6:b3:c5:
                    14:53:e8:bc:e9:43:37:69:2a:63:0f:51:0f:60:eb:
                    92:4f:04:8b:94:eb:dc:14:0a:72:f9:49:b3:b9:51:
                    e2:07:05:e4:05:f5:a3:87:9d:05:93:15:cc:0b:de:
                    22:3a:ec:14:6c:fa:50:0a:b9:d5:a1:b9:bb:77:83:
                    70:6a:b0:32:61:ca:a1:36:72:d4:b6:df:56:b6:22:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0F:7C:8F:30:EF:6C:1E:36:FE:F5:F4:AD:29:EC:52:9A:46:20:79
            X509v3 Authority Key Identifier:
                keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:6d:82:20:da:f7:6a:f8:34:95:fd:fd:ff:ac:d9:fc:87:
         f8:51:0b:ab:c5:02:50:50:8f:86:74:a1:9a:99:7d:73:ef:8e:
         71:da:f8:54:d2:9c:ca:eb:53:5e:ac:18:6e:20:79:30:36:bd:
         e2:ad:c7:70:d8:98:9f:d2:10:fe:36:94:c3:17:ca:14:f0:07:
         95:ab:92:ee:e0:05:56:a4:a5:8c:df:4a:02:9a:25:0f:25:92:
         1b:89:b8:76:a2:f8:d2:10:a9:8a:8c:1c:fe:9d:bb:a4:59:70:
         c9:f8:7a:56:12:25:82:c4:f7:23:d9:7d:f3:ca:9d:68:7f:8e:
         d1:f3:6e:e2:76:c2:20:45:b0:60:49:04:ac:b2:a5:db:7f:88:
         55:35:ac:93:ea:c1:f9:ae:70:5b:6e:60:4f:82:cb:50:ec:05:
         b3:80:f4:c9:61:4f:1f:f9:64:e6:5f:21:85:66:95:f5:cc:bd:
         b3:d2:6c:e6:75:17:75:ac:35:65:4d:3d:c3:47:b6:da:5e:6c:
         a0:39:8f:01:40:c6:6c:3d:92:2b:68:29:b5:03:c0:17:66:57:
         56:96:80:30:28:27:2b:cf:00:e0:15:83:55:7b:0d:96:eb:19:
         17:b1:54:1d:77:eb:6b:11:08:62:8c:7a:35:09:5f:65:01:98:
         31:95:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:10:31 2025 by rpki-client