This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
File:                     qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json)
Hash identifier:          tDe9TBfOYWEdsajMUmpuDR6Mw25Z/OkzJk5P21VrgiM=
Subject key identifier:   47:46:4F:44:E5:76:BD:D0:94:E6:40:01:35:4B:10:9D:61:B2:73:D1
Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6
Certificate issuer:       /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
Certificate serial:       03FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
Manifest number:          03F4
Signing time:             Thu 04 Dec 2025 22:57:36 +0000
Manifest this update:     Thu 04 Dec 2025 22:57:36 +0000
Manifest next update:     Thu 11 Dec 2025 22:57:36 +0000
Files and hashes:         1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: iKEgZtq0IgIgezOSRWrYY11fjYnohLHX0fWqrLoHKV4=)
                          2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl
                          rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
        Validity
            Not Before: Dec  4 22:57:36 2025 GMT
            Not After : Dec 11 22:57:36 2025 GMT
        Subject: CN=693211e0-5ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:9d:d9:ed:48:69:8d:e7:a4:02:82:57:e4:
                    ea:cb:6f:f3:32:8e:73:d3:f8:cf:c2:f2:c2:85:7a:
                    ea:25:e8:f0:c0:fc:15:a1:8b:ba:83:c0:1b:10:6d:
                    9b:ce:1c:cf:9a:78:2e:12:79:02:07:b8:c8:cd:e8:
                    0e:3a:c7:46:e2:16:b9:5b:c4:3a:c3:37:3f:8c:ee:
                    86:39:df:85:5c:47:0c:ad:04:6e:c7:a8:e4:9b:26:
                    ae:e1:c7:4e:fc:d0:8c:41:80:52:fd:16:32:88:b6:
                    12:f5:5d:ab:2b:49:78:f8:7f:30:d5:bc:f6:a1:5d:
                    55:ad:9e:9b:9b:bb:cf:eb:85:49:2b:df:3a:c0:9e:
                    f0:34:3c:98:26:ad:66:0c:72:cc:8b:9b:19:22:c3:
                    0b:19:28:36:d1:36:35:01:f4:e9:b8:3e:c4:8b:9c:
                    2c:f8:d4:bf:7c:bc:91:9d:32:2f:f1:d2:3e:73:b7:
                    22:67:6c:15:51:1d:99:8e:b2:3e:9e:e2:0c:a8:48:
                    e5:06:83:94:89:93:3b:44:a5:fe:40:02:64:a0:7c:
                    2d:5b:ef:fb:db:c6:89:f0:ea:e9:b6:db:00:bb:90:
                    8e:82:c1:99:23:83:25:13:0e:a1:37:70:45:24:dd:
                    a7:79:b5:f0:c7:12:54:7c:b2:0e:f5:e5:fd:57:2b:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:46:4F:44:E5:76:BD:D0:94:E6:40:01:35:4B:10:9D:61:B2:73:D1
            X509v3 Authority Key Identifier:
                keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c9:55:72:ea:da:76:7b:e3:29:e4:c9:c3:e6:84:c8:05:cc:
         bf:2f:35:65:87:9e:dd:e9:c6:a8:38:77:0c:fa:5a:87:ad:2d:
         15:02:fa:c3:40:64:32:65:c6:5c:c3:f2:17:bc:69:5c:67:e1:
         43:a8:56:69:7f:ba:22:6c:9f:ce:ba:9f:87:da:e7:0b:fe:97:
         95:b1:4a:74:88:f8:21:b3:2d:e5:1d:f0:be:5d:f3:f7:d4:27:
         14:2e:a0:8e:83:19:b7:e5:c5:11:1d:15:26:c1:2b:cc:f7:7c:
         b2:1b:04:3f:c8:ed:70:2a:6d:f4:98:7a:8d:6a:e8:e6:fe:33:
         fd:ef:9a:25:18:67:8c:e1:23:eb:60:de:f9:04:a4:d7:60:31:
         43:d2:34:f9:e0:6e:fd:87:e6:7a:9a:45:08:ab:32:75:a2:74:
         27:d1:bf:e0:16:b1:73:a4:55:f9:83:db:99:a5:9f:4b:8c:64:
         6b:cb:23:06:b1:b6:4f:f1:4f:8f:ee:81:13:b5:37:72:35:f2:
         94:ed:21:68:40:02:91:38:dd:54:f4:77:28:a9:68:c7:5b:c9:
         57:85:8c:1a:19:ac:81:12:a1:57:cc:ff:60:1e:74:25:48:77:
         0e:fd:42:f9:1f:68:7e:5a:4d:df:c7:ac:ce:d4:0a:63:aa:29:
         e8:fc:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:19 2025 by rpki-client