This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File:                     Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier:          8e4TaWXYHtJu0tJE0oAEnDwWXSdogmWNLJkVbtPfmIk=
Subject key identifier:   72:BD:E5:6D:4A:A2:B5:C6:3B:2E:37:54:50:1A:7D:12:01:B5:C6:89
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number:          0113
Signing time:             Fri 05 Dec 2025 02:56:15 +0000
Manifest this update:     Fri 05 Dec 2025 02:56:14 +0000
Manifest next update:     Fri 12 Dec 2025 02:56:14 +0000
Files and hashes:         1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: oP5COF7gYkuMXdcGAXRgwd+jFMZoD8Llsw/pdko8Y/s=)
                          2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=)
                          3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: Dec  5 02:56:14 2025 GMT
            Not After : Dec 12 02:56:14 2025 GMT
        Subject: CN=693249cf-b1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:1c:77:0e:39:4d:2b:b5:5c:58:8e:ce:1f:
                    7d:be:15:ba:8f:e2:45:3a:3d:89:34:e1:58:eb:ce:
                    c2:5a:37:40:cd:d9:9a:ee:1e:1e:a2:38:de:7c:6f:
                    d3:b7:76:f3:81:cc:77:ce:9a:42:a9:f6:c3:a5:8f:
                    cd:b8:53:f1:d2:51:93:2c:eb:4a:be:f0:6d:55:e4:
                    8a:8c:d1:7d:90:1f:09:c3:51:29:b3:e9:f8:03:68:
                    da:ad:c4:6d:b4:6e:bd:aa:3d:fb:22:8f:a1:05:f8:
                    82:97:3c:9b:6b:fc:46:10:21:12:26:2f:0a:5b:2d:
                    19:a9:2b:09:e8:3a:a0:20:a5:ad:fa:e4:f8:fc:8e:
                    a7:86:f7:2a:a8:7f:20:6a:5c:b1:18:d6:31:a6:9b:
                    95:72:1d:21:ca:f0:33:cd:53:d5:b1:c7:6a:8e:d0:
                    0f:57:0b:11:6c:13:e9:3f:f8:99:01:cf:79:c1:44:
                    84:68:d1:65:7a:84:16:07:48:d0:8e:be:93:cc:15:
                    43:9d:e6:3e:fd:89:a8:2d:8c:43:fd:c7:22:b8:d6:
                    b9:1d:01:02:09:a0:9c:a0:54:51:c0:fe:31:26:e5:
                    f0:12:14:ff:cc:16:ea:fc:14:96:3d:40:05:03:de:
                    08:2a:df:d7:47:22:73:64:18:6a:dd:df:36:34:c9:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:E5:6D:4A:A2:B5:C6:3B:2E:37:54:50:1A:7D:12:01:B5:C6:89
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:02:60:ae:ac:5c:49:ec:6c:a3:ab:e7:96:e6:b6:b8:b7:0b:
         18:d4:a5:8e:f3:74:12:b9:fa:d5:95:a9:0d:13:b2:00:3f:97:
         dd:fa:d4:f2:32:a7:a3:f2:2f:80:f0:5d:b4:18:9e:d7:08:31:
         95:60:92:9b:90:7e:35:ea:59:bd:9e:47:72:0e:fa:d0:79:53:
         e0:86:e8:8e:97:64:aa:5b:8b:f5:d5:46:aa:f7:a1:ee:87:6d:
         0a:9a:d1:80:8f:dd:93:e1:c5:08:63:a2:ed:c6:71:21:d0:99:
         e9:00:1a:53:a3:5c:46:a0:58:7c:de:5d:b1:5e:27:94:44:3f:
         8a:3d:80:bc:3c:48:a6:e7:6a:34:94:3f:d8:c6:d0:dd:09:14:
         6c:05:63:27:c7:07:0b:19:6b:88:c2:4b:a4:9e:2d:7a:c9:c6:
         20:5f:c5:d0:b5:0c:69:6e:84:95:3e:cf:cc:1d:c9:1d:13:7f:
         d4:19:74:e8:4d:91:db:ab:27:64:27:2d:68:1a:2c:c6:16:f6:
         c5:b4:48:09:e8:26:da:d2:97:b1:0e:0d:ac:97:52:ef:d0:eb:
         fc:2c:43:07:e0:b2:26:e4:ae:b0:28:af:f5:4b:69:eb:15:da:
         d3:34:71:6e:90:45:1c:ba:ba:06:ef:64:63:e6:b5:de:0c:03:
         aa:e8:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:57 2025 by rpki-client