This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          FPP2sOa95cfXw9kpIYYMTmgKn2NUTxcemGpoIWqr+L0=
Subject key identifier:   C5:EB:58:CB:A8:B6:8E:E2:2D:AB:EE:1A:AF:70:AB:AC:C7:5E:BB:26
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          BB
Signing time:             Fri 05 Dec 2025 04:02:57 +0000
Manifest this update:     Fri 05 Dec 2025 04:02:57 +0000
Manifest next update:     Fri 12 Dec 2025 04:02:57 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: KlWfrD0kvTOWLVtG267mK4VKQFlqOO0U6SOhrPW4j9g=)
                          2: 8F32CF70B52911F0A8B8B043C4F9AE02.roa (hash: AuZYVHQZgukMvQbSIT5eZVhwVaF0IcOcC6ubQHkO3ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Dec  5 04:02:57 2025 GMT
            Not After : Dec 12 04:02:57 2025 GMT
        Subject: CN=69325971-0d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:d3:3c:50:df:2d:96:58:8c:68:bc:4d:32:
                    9b:b2:ad:e1:6b:67:21:f0:30:38:50:13:1a:76:25:
                    2c:73:11:16:1e:00:ca:05:59:21:38:5e:94:bc:74:
                    df:2f:f2:f1:3c:2f:e8:af:cd:63:a0:9f:f9:5f:a3:
                    9f:08:ab:9a:5a:09:3e:1d:c7:04:c2:c7:06:f9:f9:
                    fc:a4:0a:91:97:66:b2:c0:4e:a3:f8:23:59:ff:3a:
                    ea:e6:f3:ae:66:db:a5:5a:db:77:1e:31:42:2e:c5:
                    5c:1d:89:36:7c:a9:7c:18:c9:a0:57:ce:5f:35:6d:
                    21:50:dd:47:fe:d9:63:d7:00:93:d7:8a:9a:c4:76:
                    8c:5b:8d:5d:18:a2:ea:28:6c:a7:4f:80:61:a3:54:
                    f4:53:8f:94:4b:28:b8:aa:fc:5a:5f:ae:5a:e4:6c:
                    79:d5:7c:a9:a2:88:31:72:2f:da:a9:46:7b:de:db:
                    2e:64:d8:6d:09:44:a3:63:45:4d:02:16:ff:f4:3b:
                    3c:3c:1d:2d:71:dc:61:4a:1b:c1:40:13:03:d5:a6:
                    e8:b2:76:3c:7b:62:7a:99:a7:f8:fb:83:57:1a:03:
                    25:27:7b:d3:c6:a6:8d:19:a3:44:91:5b:c1:ce:34:
                    74:d3:5c:7f:6e:8a:0f:ce:47:43:b1:b3:38:be:fb:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:58:CB:A8:B6:8E:E2:2D:AB:EE:1A:AF:70:AB:AC:C7:5E:BB:26
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:18:04:10:de:10:32:6c:1d:0a:e4:36:2b:38:6e:98:d0:73:
         1e:e2:75:6d:bb:39:49:47:27:6c:f1:cf:3b:67:92:b8:40:8f:
         97:de:14:ec:6a:48:a6:f1:46:12:73:eb:28:36:c0:5e:68:0a:
         81:45:2a:67:81:b8:4d:35:d0:fc:aa:cd:a3:ad:b0:56:9c:ab:
         9b:ad:5d:0e:8d:5a:9b:83:57:9b:c6:b3:7a:41:71:d3:e0:e9:
         8e:30:02:61:3c:f6:f4:48:15:23:91:e3:78:f7:08:f7:92:c1:
         dd:8c:08:fa:08:f8:3a:df:67:ed:19:5a:b2:d1:2a:93:d1:af:
         37:31:72:79:00:98:72:6f:32:ce:b5:73:08:90:8e:e0:73:2e:
         45:d7:ba:cb:9f:77:78:73:fb:df:7c:01:82:f9:fb:1a:27:f2:
         ed:3d:29:26:f1:23:63:b3:6b:cf:3c:d5:0b:11:77:18:4a:ce:
         3f:1e:59:14:46:3c:16:37:a6:5d:c0:9a:23:99:b0:f1:34:11:
         9f:11:8c:d0:15:7e:24:2a:3b:1b:4a:67:28:6c:92:7a:8d:c4:
         b7:99:49:18:e7:2d:30:7d:75:f4:14:17:e0:22:eb:33:e4:bb:
         04:df:e2:84:bd:46:ec:60:1b:f5:55:93:1f:1e:2f:76:3f:20:
         91:f4:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:41 2025 by rpki-client