This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File:                     QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier:          RhaJUPDDZM9ePwSVexkJkpOQYF50n7b5NJpwMecxGnM=
Subject key identifier:   39:24:3B:DC:E0:66:14:0F:C7:3D:12:AC:1A:54:C3:E7:CE:DB:72:C9
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number:          0352
Signing time:             Thu 04 Dec 2025 23:22:51 +0000
Manifest this update:     Thu 04 Dec 2025 23:22:51 +0000
Manifest next update:     Thu 11 Dec 2025 23:22:51 +0000
Files and hashes:         1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: SJZkHr1kgIzgmyWFefhnW6TOs6nFvdsnDzgEoH9qNOk=)
                          2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Dec  4 23:22:51 2025 GMT
            Not After : Dec 11 23:22:51 2025 GMT
        Subject: CN=693217cb-cc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:80:9a:87:1c:59:9b:61:8a:68:07:a9:b9:
                    9f:1b:57:ec:b0:98:05:54:f2:76:27:64:1a:06:64:
                    06:87:45:5f:42:25:c6:ce:3c:9d:ad:57:a9:fd:7f:
                    37:62:42:4e:a4:dc:1e:ba:6d:df:b7:d3:48:bf:4c:
                    f7:8b:cf:1b:6e:b6:eb:7c:37:b4:38:90:b3:ac:29:
                    ed:70:ac:d2:6e:ea:01:ca:99:cb:b3:51:85:89:9e:
                    39:97:39:98:5c:9f:71:2b:e0:57:7c:cb:ea:05:af:
                    4f:ac:c0:e9:b7:36:38:12:25:1b:7c:5c:5d:f0:6c:
                    8b:b8:71:80:38:2c:ab:83:a8:02:f1:6b:f2:46:c9:
                    ae:bc:41:c5:ac:24:9d:b5:78:d7:ca:04:68:ad:11:
                    0c:99:f1:09:19:c2:46:09:da:93:35:67:f2:0a:80:
                    ee:25:65:8e:12:99:18:5f:3a:56:ce:74:55:fe:3f:
                    5a:ab:f4:f9:a4:78:f3:c1:a0:f5:48:44:23:5d:d0:
                    1e:1b:4d:58:95:55:8e:66:ce:52:30:7f:a8:79:ea:
                    9c:8d:8b:fc:1e:bc:e4:bd:e7:e7:61:17:70:8c:e0:
                    8d:a9:8f:ea:47:69:04:ae:06:23:4b:63:8b:78:26:
                    28:4b:21:81:ca:b0:52:4b:40:af:ce:aa:c8:c5:b0:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:3B:DC:E0:66:14:0F:C7:3D:12:AC:1A:54:C3:E7:CE:DB:72:C9
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:47:c8:58:13:c0:38:a8:c8:19:bf:d3:d8:25:3a:ba:52:3b:
         c9:c4:79:23:f2:1c:4f:71:80:83:2d:43:99:39:aa:4b:54:1a:
         58:6c:fa:a2:6b:72:40:0a:36:5a:c1:87:fa:05:8e:77:96:1c:
         f5:76:72:40:3f:b1:5b:21:e3:83:e0:6e:cb:45:b7:c5:37:d1:
         1e:d5:30:f9:3e:81:55:02:4f:17:19:a5:66:20:5d:ce:6f:7d:
         f7:6e:b3:cd:d2:da:66:96:d0:04:7d:8a:24:18:a8:1e:d6:4a:
         6c:8b:8c:9f:29:c1:10:a4:bd:62:36:9b:88:c8:b8:72:a6:fe:
         cb:e7:cf:2f:37:41:c8:f5:db:fe:0d:3c:55:74:63:d4:72:45:
         e8:39:d0:98:e9:22:b5:4b:4b:cc:71:54:f7:26:96:49:a6:b0:
         ee:68:ee:49:b4:f4:64:41:d9:0d:26:e7:f5:92:68:21:40:a0:
         02:4c:70:e2:3e:44:14:e0:b9:19:1c:07:19:37:ec:17:6f:c7:
         66:73:8b:3a:b6:ec:ea:94:1f:30:6a:a1:8b:f8:74:81:d8:96:
         cf:58:37:80:e5:8a:e1:ab:6c:de:09:fe:3f:86:a9:51:4e:9c:
         06:58:48:a6:0c:bc:48:25:fb:58:1d:1c:f9:cd:82:6e:a4:81:
         18:01:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:23 2025 by rpki-client