This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
File:                     KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json)
Hash identifier:          0gORJYNLn6tc0+7wOaHf1QiN6xdCmtMn36YUkTxa4Hs=
Subject key identifier:   F2:18:45:6D:4E:6C:E0:45:29:B6:8C:E6:8C:72:BC:D8:99:C2:28:36
Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC
Certificate issuer:       /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
Certificate serial:       34F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
Manifest number:          34EB
Signing time:             Thu 04 Dec 2025 14:39:23 +0000
Manifest this update:     Thu 04 Dec 2025 14:39:23 +0000
Manifest next update:     Thu 11 Dec 2025 14:39:23 +0000
Files and hashes:         1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: YhUGfph6g2fovDPJ4x8ipnCnk5ZHKEjF9/a0cVGvPk8=)
                          2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: 4eibZFZxCBojQ0XF3++/6D4cGjzEkC+cfaewXmXRSYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl
                          rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13553 (0x34f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
        Validity
            Not Before: Dec  4 14:39:23 2025 GMT
            Not After : Dec 11 14:39:23 2025 GMT
        Subject: CN=69319d1b-ff2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:ca:2a:3e:b2:53:8f:ce:da:06:34:07:46:
                    39:b4:f6:3a:56:75:9c:12:24:80:14:15:e1:51:93:
                    78:94:60:bf:49:83:c0:63:bf:7d:82:e1:7f:5d:81:
                    3f:d9:6e:7a:b0:38:0d:14:7d:b6:bb:0d:66:1c:b8:
                    21:5e:f5:f6:ee:8b:05:61:8a:46:2b:28:b0:2c:ca:
                    ac:9c:21:24:c5:ae:1a:c8:2b:d9:bd:d2:63:3a:d3:
                    cd:30:d7:fb:13:36:43:a9:70:be:c6:1d:69:48:5b:
                    54:a2:29:6a:e1:c8:ac:c2:ea:dc:c6:f9:1c:74:48:
                    9c:f2:e3:df:14:26:1c:1c:24:9e:1b:75:5c:65:39:
                    15:00:e4:b4:3c:f2:11:bc:10:17:d4:ea:50:d5:d0:
                    05:45:32:e1:a9:76:65:02:6f:66:07:17:6c:b5:a6:
                    5e:1e:96:19:59:3f:d9:84:5c:60:55:58:e3:75:3a:
                    e3:86:74:55:12:b7:66:17:4a:24:04:48:40:5a:fe:
                    b9:ba:69:18:70:eb:bd:01:db:54:d0:6e:85:0f:2d:
                    cf:68:0d:40:7a:b2:77:5b:86:ed:61:3d:01:e1:6c:
                    69:9b:de:48:4a:24:ee:19:ef:55:14:23:6a:d1:93:
                    98:f9:da:67:70:f5:a8:95:4d:75:8e:0b:0b:93:fe:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:18:45:6D:4E:6C:E0:45:29:B6:8C:E6:8C:72:BC:D8:99:C2:28:36
            X509v3 Authority Key Identifier:
                keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:aa:c0:65:52:57:03:4e:57:12:d4:96:b2:4b:de:e3:0f:
         de:fc:f2:44:a4:a8:0d:25:35:51:b2:7d:52:e3:89:05:61:92:
         b9:b9:10:a5:a6:fa:1a:d8:9a:34:91:0b:f4:78:95:fc:58:24:
         3f:1a:06:ea:45:b4:80:92:d4:b4:ff:6d:1f:00:dc:56:b9:0f:
         3c:3c:cc:f0:64:3c:91:ff:1b:07:86:08:c2:2b:f2:c5:41:49:
         a7:8a:ee:13:45:13:ce:74:ed:db:7d:41:e0:d0:82:b3:c2:fe:
         55:45:dd:17:a5:d7:33:bd:38:09:09:38:de:63:51:c8:d3:79:
         84:55:2d:e9:74:f4:56:4b:b1:34:c8:e6:3b:c4:f2:da:e1:61:
         c1:0f:20:47:45:c5:a2:d6:f7:e3:96:77:5c:64:2d:55:80:b6:
         67:cc:d8:00:d6:61:4e:b1:10:f5:b6:8e:e0:1c:9c:53:6d:93:
         9e:7d:d4:54:59:33:52:0e:03:08:dc:da:36:49:e9:9c:48:58:
         08:9f:a6:ba:ad:17:78:3a:e1:d2:04:df:64:3b:f9:d0:a4:f5:
         58:85:7d:3e:63:09:d0:31:df:6b:b1:bb:c0:a1:ba:1b:20:22:
         42:46:f3:b6:1f:38:44:1c:1a:c2:2b:03:4c:34:79:c8:72:73:
         2b:eb:a8:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3
QkMzQTNERUMwHhcNMjUxMjA0MTQzOTIzWhcNMjUxMjExMTQzOTIzWjAYMRYwFAYD
VQQDEw02OTMxOWQxYi1mZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgfKKj6yU4/O2gY0B0Y5tPY6VnWcEiSAFBXhUZN4lGC/SYPAY799guF/XYE/
2W56sDgNFH22uw1mHLghXvX27osFYYpGKyiwLMqsnCEkxa4ayCvZvdJjOtPNMNf7
EzZDqXC+xh1pSFtUoilq4ciswurcxvkcdEic8uPfFCYcHCSeG3VcZTkVAOS0PPIR
vBAX1OpQ1dAFRTLhqXZlAm9mBxdstaZeHpYZWT/ZhFxgVVjjdTrjhnRVErdmF0ok
BEhAWv65umkYcOu9AdtU0G6FDy3PaA1AerJ3W4btYT0B4Wxpm95ISiTuGe9VFCNq
0ZOY+dpncPWolU11jgsLk/7NWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIYRW1O
bOBFKbaM5oxyvNiZwig2MB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE
OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX
UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+KarAZVJXA05XEtSWskve4w/e/PJEpKgNJTVRsn1S44kFYZK5uRCl
pvoa2Jo0kQv0eJX8WCQ/GgbqRbSAktS0/20fANxWuQ88PMzwZDyR/xsHhgjCK/LF
QUmniu4TRRPOdO3bfUHg0IKzwv5VRd0XpdczvTgJCTjeY1HI03mEVS3pdPRWS7E0
yOY7xPLa4WHBDyBHRcWi1vfjlndcZC1VgLZnzNgA1mFOsRD1to7gHJxTbZOefdRU
WTNSDgMI3No2SemcSFgIn6a6rRd4OuHSBN9kO/nQpPVYhX0+YwnQMd9rsbvAobob
ICJCRvO2HzhEHBrCKwNMNHnIcnMr66hl
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:43 2025 by rpki-client