This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
File:                     QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json)
Hash identifier:          qennsu7bKusR+MBlmR9dD+g2dh2/viEXPMrNNJBrc8Q=
Subject key identifier:   2B:6C:B1:B7:D0:9E:7C:54:E7:65:C8:AF:2C:FB:F1:D9:F2:5F:89:34
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Certificate issuer:       /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial:       08BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
Manifest number:          08A9
Signing time:             Sat 06 Dec 2025 19:39:44 +0000
Manifest this update:     Sat 06 Dec 2025 19:39:43 +0000
Manifest next update:     Sat 13 Dec 2025 19:39:43 +0000
Files and hashes:         1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: 1Uor2W3bXHoocF3F/4zyOy+L92e1EcRpLV8Wt6/TG6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
                          rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
        Validity
            Not Before: Dec  6 19:39:43 2025 GMT
            Not After : Dec 13 19:39:43 2025 GMT
        Subject: CN=6934867f-e89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:6e:13:e7:7f:14:c5:61:f8:07:89:6d:14:
                    8e:88:0d:ed:6e:93:dc:87:bd:0e:30:45:67:30:18:
                    8a:fe:d7:57:06:4f:5b:f3:3d:9f:43:07:27:7a:91:
                    b8:88:fe:18:2d:e4:c8:8d:f5:dd:cd:9c:f1:c1:0e:
                    3c:ac:d4:41:e3:17:18:0c:9e:59:0a:26:4c:bb:a3:
                    41:61:ec:67:1a:f6:26:5d:27:5f:c6:7d:32:63:6f:
                    c5:56:bc:ce:09:25:74:90:66:2d:c7:1c:d7:d5:a1:
                    46:19:8d:e3:19:5b:47:e8:05:8c:64:3e:51:69:22:
                    17:de:2b:bb:7d:06:0f:86:c9:fb:98:9f:ba:00:c4:
                    65:e1:a0:7b:84:10:a6:91:2a:21:09:25:da:26:c2:
                    81:63:1a:db:3a:e7:3c:2e:4f:4c:a4:62:06:76:6b:
                    f0:39:08:50:8b:37:d6:5c:cb:72:19:ff:fb:1a:38:
                    73:2f:29:7a:68:0c:40:cd:9e:26:9b:c6:c4:90:60:
                    30:8a:ae:ee:d3:3e:a8:14:d7:9d:a3:33:9e:a6:5d:
                    dc:fc:6d:22:06:b9:81:d0:bf:22:ad:52:77:43:fb:
                    29:a0:ac:22:f8:a9:96:42:8c:4f:34:82:8f:e1:7f:
                    69:7d:a8:ee:f4:39:a9:4f:b6:85:2c:c6:5c:c4:70:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:B1:B7:D0:9E:7C:54:E7:65:C8:AF:2C:FB:F1:D9:F2:5F:89:34
            X509v3 Authority Key Identifier:
                keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:cc:dc:37:90:bd:9f:b0:8e:77:fa:42:0b:7a:2f:16:ca:27:
         8e:9f:11:b8:81:7e:05:dd:d8:55:52:ea:35:8b:05:01:e9:af:
         6c:dc:a8:5f:e3:56:ea:ab:b5:f9:c7:42:56:11:91:22:b4:e7:
         60:f8:36:59:77:21:20:1f:64:bf:be:d5:86:e8:eb:ef:3f:ca:
         e8:9f:2d:94:65:98:ef:e0:a9:11:ac:af:f2:58:a3:c7:de:8d:
         d0:4b:ac:6d:a6:cb:2f:3f:8e:a5:83:7c:c8:fc:ed:95:ef:6a:
         e5:bb:f3:d4:66:50:08:85:64:72:df:fd:11:fe:d5:86:25:fe:
         7f:c5:9d:e3:40:30:5c:69:a7:a4:1d:ec:86:e5:0f:2b:1a:77:
         d9:f1:71:27:3c:db:f7:be:81:e4:58:36:59:ed:6a:0f:64:db:
         6d:6f:76:de:6b:3c:16:c4:af:ed:39:c2:5b:cc:2b:c0:8b:c2:
         61:71:7a:34:e0:87:69:00:40:ac:53:0f:f9:d5:d6:9f:1c:c6:
         49:5f:58:4d:01:49:eb:a5:b8:03:02:b4:70:68:8b:0f:90:4a:
         49:1b:c8:08:0b:9b:ba:ab:3c:d1:b8:a9:06:4d:fa:c3:64:3c:
         f4:92:f9:3c:52:30:69:fd:e3:b6:76:ca:09:5d:08:bc:11:a4:
         e9:72:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:29 2025 by rpki-client