This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json)
Hash identifier:          uKp9XWzaqXx/A9GFAdLb+6LplN1zWkKOycj2jVKzS5Y=
Subject key identifier:   8F:46:13:41:5C:95:BB:D0:20:22:17:D4:8D:BE:F8:25:47:43:D5:BD
Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Certificate issuer:       /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
Manifest number:          0810
Signing time:             Thu 04 Dec 2025 21:14:39 +0000
Manifest this update:     Thu 04 Dec 2025 21:14:38 +0000
Manifest next update:     Thu 11 Dec 2025 21:14:38 +0000
Files and hashes:         1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: slqYy2XyFn35p8aPwKSgbLiAfQ3i/F/hC1I3i+V9o7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Validity
            Not Before: Dec  4 21:14:38 2025 GMT
            Not After : Dec 11 21:14:38 2025 GMT
        Subject: CN=6931f9be-1892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:1a:f5:87:80:f0:2a:a6:b4:2f:eb:81:5c:
                    e0:13:4d:50:43:5b:d3:92:5f:2f:4c:f9:24:6a:72:
                    42:de:4c:2c:92:11:b8:e3:4b:49:77:12:d0:2d:c5:
                    30:60:c1:18:8e:dd:e8:6e:0c:25:e9:c5:98:3d:b2:
                    33:46:87:26:ea:3a:16:20:29:a1:6a:da:9b:74:fd:
                    fe:ad:3e:1b:42:4c:65:e9:cd:68:0b:fb:11:c2:08:
                    0d:b8:94:00:d9:96:99:84:0a:8d:22:67:c8:3d:bf:
                    56:25:85:e9:36:60:6a:df:01:a6:62:07:5a:de:80:
                    f6:74:06:5b:92:ad:72:0a:b6:bb:ad:08:33:68:87:
                    6f:c1:24:cc:7b:73:97:35:28:0c:19:0e:0d:55:01:
                    1a:53:a1:74:1c:ce:46:95:23:f5:a8:e2:f4:43:a4:
                    f9:b4:cf:ab:d1:2e:21:b2:e2:77:86:4e:ae:d9:70:
                    24:8e:fd:36:15:55:f5:f2:27:84:57:f2:f7:a3:29:
                    e9:75:07:92:86:fd:da:2c:6b:0a:54:b2:ee:7c:83:
                    de:a3:c1:a1:95:05:51:2a:95:14:8b:4b:fc:d9:2f:
                    66:52:74:0a:00:35:57:4c:c8:b9:26:49:a2:b8:41:
                    c6:76:df:f4:fa:f3:57:d1:ee:3b:cb:62:df:57:2e:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:13:41:5C:95:BB:D0:20:22:17:D4:8D:BE:F8:25:47:43:D5:BD
            X509v3 Authority Key Identifier:
                keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3c:12:70:48:c1:20:91:67:09:0c:3e:98:3c:b7:3a:1e:06:
         dc:cb:59:13:42:94:c3:73:10:94:b9:12:5e:88:21:a1:67:de:
         97:e5:d1:b9:7f:0d:9e:55:c3:d6:e7:1e:6a:be:96:58:d3:ca:
         80:f4:da:b0:46:27:c0:e4:1e:20:b3:ec:24:98:e8:c9:0b:78:
         ec:c4:62:74:79:3f:3e:9a:97:79:22:19:a1:9d:11:0a:22:77:
         5c:21:53:96:ce:bc:51:de:cf:30:0b:03:8f:35:d7:65:57:0c:
         48:30:3d:40:31:81:ee:7b:23:0c:21:ee:b5:a4:8e:df:75:0e:
         03:15:6a:88:80:f9:60:e2:f3:29:6c:6a:9a:3c:bf:2e:95:74:
         3b:d4:7d:38:f4:7e:ab:af:84:54:d0:4d:23:9a:92:fe:88:8b:
         45:50:90:63:7d:1e:34:a1:93:8a:06:ea:fb:ae:22:44:e3:c7:
         62:af:2d:3b:4e:12:ae:81:d4:88:b9:b8:74:b3:fb:51:ef:14:
         9b:c1:28:bf:5e:e7:70:c0:25:a9:1f:c5:da:b3:e0:1f:ce:63:
         66:7c:af:fc:a9:2c:99:d6:a7:1a:9d:96:f4:3f:fc:58:f5:6e:
         63:a0:77:fc:b5:05:2c:f1:77:f4:3b:a1:fd:f9:a5:56:5a:72:
         7d:fd:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:29 2025 by rpki-client