This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          XcmfrImcS+g554G7uN4nE3meqW/HG7u3raoV069oTtY=
Subject key identifier:   4D:1A:A7:19:31:A3:B9:35:E0:A5:49:3D:86:CD:CE:4F:A1:AC:C5:02
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          0112
Signing time:             Fri 05 Dec 2025 05:04:23 +0000
Manifest this update:     Fri 05 Dec 2025 05:04:23 +0000
Manifest next update:     Fri 12 Dec 2025 05:04:23 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: 3rLzUNamCSAbtYdMg2AecDnT/COFG1zMhIcjNlbyDQg=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: V+nudqfqbNoV97hl4ZZQ3M1A1LzH6OKD9ocfKTUUibo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Dec  5 05:04:23 2025 GMT
            Not After : Dec 12 05:04:23 2025 GMT
        Subject: CN=693267d7-5815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:51:45:d1:5d:31:34:cf:81:18:d5:6a:a2:
                    8e:bf:2e:9e:f6:21:e3:91:1e:20:a5:7c:f5:db:5a:
                    0e:3d:b9:66:0e:85:37:a8:47:eb:71:fd:d9:52:95:
                    49:1b:e9:24:f3:f8:4b:cc:11:c0:7b:f7:27:b5:79:
                    63:cc:fb:95:6f:ca:2d:ba:87:a5:79:dd:e6:df:70:
                    82:8c:f5:3a:67:cb:3a:5c:07:1b:92:b0:4f:1a:a9:
                    ba:a4:1f:5a:87:e8:9d:c9:2f:af:15:03:88:33:d4:
                    16:be:13:ba:17:c1:ba:8b:71:84:5c:f3:3b:4b:f0:
                    9c:16:89:f0:60:73:c1:e2:d8:2a:a9:2c:ad:cb:01:
                    8b:f8:5d:37:b8:a3:e4:5b:51:9d:92:d1:fc:3b:4b:
                    8d:31:4e:95:06:9e:13:1a:c1:19:9f:cc:b7:78:bb:
                    91:6f:e6:6a:47:a9:c5:5f:ae:77:d8:c8:85:7e:7c:
                    7f:9a:3d:62:90:1d:e4:a5:40:78:8b:4d:e0:b9:60:
                    f2:7c:55:20:af:9d:ff:ef:27:ef:3e:61:33:19:bc:
                    1b:e9:a7:a1:e0:ac:0f:97:94:10:66:b0:8d:c7:ac:
                    31:81:58:53:58:09:01:f1:a0:11:b6:77:70:cb:a3:
                    6a:e9:34:33:13:25:7b:21:15:9f:11:82:f3:51:06:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1A:A7:19:31:A3:B9:35:E0:A5:49:3D:86:CD:CE:4F:A1:AC:C5:02
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:34:59:a3:98:a8:85:24:17:5f:d8:99:ec:65:b4:a4:61:
         ed:19:aa:08:3c:1d:51:d0:15:f2:81:d0:8c:a4:4c:5b:f9:ed:
         51:07:77:13:a9:21:50:a8:68:6f:b2:f0:06:6a:46:98:ec:93:
         c4:bf:5d:bb:6e:83:74:f0:98:8c:b7:3c:f6:41:67:6f:ed:19:
         92:3d:07:2c:28:74:01:56:cd:6b:ed:bd:35:cc:dc:71:54:81:
         db:60:77:df:d1:f8:48:e4:d2:1d:78:91:fc:51:f4:fb:0a:25:
         4e:88:b8:8c:8f:79:6f:a9:dd:88:76:fc:89:0a:68:8e:0c:32:
         9c:2b:44:fa:66:80:2b:7f:e9:ba:c6:ae:70:0d:78:6f:d7:c1:
         84:1a:c5:1c:35:3b:80:0e:b6:c4:b2:27:52:09:61:a4:d5:3f:
         ed:4f:18:88:d6:1b:09:c2:5a:b4:6a:a2:86:a8:15:27:d0:21:
         74:6d:5b:15:2e:8d:c1:e1:c9:9c:73:a6:5b:be:f0:94:03:fd:
         09:75:10:fa:32:8b:83:60:38:85:24:fb:62:e4:92:07:c4:70:
         b1:2d:eb:f8:c7:00:13:1b:9f:2e:0f:f1:02:ff:2e:97:a4:f6:
         a5:8d:c3:4c:38:68:20:35:c5:c8:79:88:c3:e3:39:c4:9c:24:
         3c:31:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:28:53 2025 by rpki-client