This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File:                     QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier:          hX2SlMoU5wEX68tHXK/VihMGutpZDU605As4evmAbBQ=
Subject key identifier:   E2:68:8D:DD:D0:72:C5:61:F9:6B:A3:30:1A:94:0B:D0:04:3A:F0:0A
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer:       /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial:       1317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number:          130D
Signing time:             Sat 06 Dec 2025 16:34:06 +0000
Manifest this update:     Sat 06 Dec 2025 16:34:05 +0000
Manifest next update:     Sat 13 Dec 2025 16:34:05 +0000
Files and hashes:         1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: pIoUDRIhUdXLKEA1r/k+vozj62tQo14mpoQL+uRO4GQ=)
                          2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: AtIY01QzRR0A54d2DL/Ntfs13u3zmiVedAjhi5vQD2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
                          rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4887 (0x1317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
        Validity
            Not Before: Dec  6 16:34:05 2025 GMT
            Not After : Dec 13 16:34:05 2025 GMT
        Subject: CN=69345afe-4a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:83:ff:f8:6b:aa:ec:74:07:1c:8f:01:c0:
                    f0:0c:16:40:2e:5f:15:93:58:3d:77:4c:d4:51:9d:
                    b2:5a:ee:56:0f:19:3c:0f:51:4f:d0:06:6c:b5:5e:
                    96:7e:c1:a4:95:c7:cc:35:b1:59:68:de:24:cd:93:
                    59:75:1a:9b:71:44:3a:de:d9:c5:19:a8:5d:39:cf:
                    d2:31:90:7d:44:07:54:3a:32:31:00:cb:7b:9c:15:
                    2a:d9:4b:8c:5d:16:ed:f2:c7:7b:c0:f3:9b:03:06:
                    42:42:9c:85:75:3b:a4:c7:fa:de:38:ed:b7:42:94:
                    ab:26:75:78:4b:8b:b1:f9:19:ee:aa:c1:3e:d2:e8:
                    4f:3e:d0:37:45:7a:86:36:cd:d3:63:29:07:d4:20:
                    11:49:9d:5e:f8:a2:60:45:59:92:41:6e:ef:96:f5:
                    68:e8:2f:04:f2:85:36:04:a6:ae:92:cd:fa:1b:87:
                    ec:28:5d:ea:9a:c6:4c:88:a2:92:9b:bb:1a:07:c7:
                    c7:37:a6:1c:f2:86:6c:99:b0:3a:af:93:30:3f:60:
                    0d:48:91:f4:29:af:50:8e:c4:d1:9c:fc:a4:26:30:
                    e0:8c:6b:7a:e5:08:57:67:0e:b8:fa:c7:52:3c:40:
                    b5:48:d7:ba:72:9c:be:ba:0d:f4:7d:a4:45:37:29:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:8D:DD:D0:72:C5:61:F9:6B:A3:30:1A:94:0B:D0:04:3A:F0:0A
            X509v3 Authority Key Identifier:
                keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:23:aa:04:68:dc:95:1d:ea:13:bd:d2:6a:eb:58:10:ea:
         10:a1:4f:55:ce:b6:b5:4e:31:83:89:90:ed:b0:5b:85:90:7d:
         9b:0a:43:33:60:08:31:9c:13:4b:79:f4:65:89:d6:c2:29:69:
         ca:d2:d9:77:44:4f:ad:05:f7:21:d2:b4:ac:15:2c:29:61:3e:
         9c:61:09:c7:47:78:c9:88:df:a7:7e:8d:20:ae:91:c9:2d:a4:
         6d:74:42:4f:a6:78:36:83:c5:a7:47:4a:5a:82:54:a3:20:38:
         e9:ac:8c:cc:96:32:86:30:92:b1:d4:f8:c7:b0:87:8e:8a:68:
         4b:bb:23:1a:72:ee:22:16:86:6d:47:db:25:5b:f6:92:26:db:
         29:c7:92:b2:a7:ae:dc:6c:f7:81:f2:6a:29:f0:2f:bf:bf:ac:
         41:da:bc:f9:1e:2b:76:b9:48:9a:93:ca:6e:ec:85:5a:28:bf:
         9a:30:94:c8:ca:3d:6a:d9:75:bc:b0:e6:e2:dd:c5:b8:6f:a4:
         87:3d:d8:90:85:f6:f8:7e:98:d1:f3:15:a9:76:86:46:61:22:
         c3:da:c7:84:cb:5c:35:b3:69:08:80:18:f8:e2:8c:23:0a:82:
         41:03:d2:3b:c2:bb:2c:05:61:fb:e2:78:42:9f:e8:58:b9:6a:
         cc:d0:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:29 2025 by rpki-client