This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
File:                     qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json)
Hash identifier:          1j7cl7LA/hb0HGEUb7Culngzg8WDtXTpn6Dr/d8Au3Y=
Subject key identifier:   2C:A4:18:7C:F2:13:50:A0:B8:FF:E1:AE:A5:58:15:53:DC:44:C6:23
Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
Certificate issuer:       /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
Manifest number:          087F
Signing time:             Sat 06 Dec 2025 19:42:44 +0000
Manifest this update:     Sat 06 Dec 2025 19:42:43 +0000
Manifest next update:     Sat 13 Dec 2025 19:42:43 +0000
Files and hashes:         1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: hDF/sceg5uNvFPMmevO872ituPNQTM8N9/Q9cGtsuIc=)
                          2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: l0ICGLwuaPDJO60DuHwg4w9v81ASlnFGPH6s06O+ZdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
                          rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
        Validity
            Not Before: Dec  6 19:42:43 2025 GMT
            Not After : Dec 13 19:42:43 2025 GMT
        Subject: CN=69348733-18b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:a6:d4:e8:bb:8c:3a:f1:d0:9e:4d:c5:0f:
                    36:d0:5a:83:0d:60:09:9d:8f:65:cd:35:b4:7f:4b:
                    e0:09:2b:1f:c1:15:b9:b8:eb:41:4e:9c:4d:47:1d:
                    5e:58:01:61:a3:e3:56:97:40:31:c4:93:a2:b3:dc:
                    d3:20:63:9b:88:e2:07:c4:40:fe:c6:7b:c7:6a:fe:
                    72:b9:07:17:57:37:60:f5:15:87:40:69:4b:fd:58:
                    f2:d0:7a:cb:fb:03:bc:a0:66:65:97:9c:ad:53:16:
                    2d:a3:3c:43:c6:a9:04:df:21:ed:2e:24:12:43:de:
                    09:b2:3f:86:80:3f:ed:a2:82:8d:31:46:8f:5d:bd:
                    0f:9e:fe:6c:80:cb:ed:ed:4f:6d:64:f5:82:ab:f8:
                    23:e3:0a:d6:46:ae:7d:b3:22:dd:03:c9:fa:c0:0c:
                    17:9b:47:93:e0:33:c6:0d:ee:42:34:ce:ec:71:6a:
                    42:71:71:0e:f9:ec:5e:ab:db:ef:2b:4d:83:6f:cd:
                    dc:f8:1c:02:c8:dd:14:de:b0:d4:b2:4b:98:6a:eb:
                    7a:91:3c:48:f1:0f:c1:3a:e9:56:69:a1:45:f7:d2:
                    e3:57:98:83:6b:0c:2e:2f:20:c1:0b:25:bf:e5:a0:
                    6e:14:da:c0:33:8d:2f:49:f8:1f:1f:c6:36:8a:ca:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:18:7C:F2:13:50:A0:B8:FF:E1:AE:A5:58:15:53:DC:44:C6:23
            X509v3 Authority Key Identifier:
                keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:58:66:9f:84:57:e1:25:f2:b0:ca:88:69:21:ea:c7:7f:59:
         31:72:b2:36:6c:fe:61:d7:56:46:82:59:6c:a1:35:1a:b8:8e:
         4a:98:bf:98:bf:e6:13:db:91:43:01:e6:27:d5:d2:8b:09:c8:
         97:64:ba:71:c4:5a:01:5b:46:da:9c:75:09:ae:1f:6f:52:3a:
         97:26:c1:30:60:ac:fc:40:5f:ba:d0:d2:f1:27:08:3c:45:a7:
         8f:ae:3a:11:50:f8:8b:92:0c:03:44:f3:4e:ee:f5:3f:77:e9:
         72:09:b3:24:16:ff:52:b3:2d:bf:3d:9d:71:3f:96:ad:01:53:
         8d:78:fc:51:87:85:97:ef:8a:0f:72:26:e6:98:19:c5:3c:58:
         f4:5b:ba:66:d6:7f:4d:ad:69:d4:ff:8c:9d:c0:24:0f:3d:b4:
         0e:0a:53:51:55:ff:c7:a4:27:e3:50:c4:cd:b1:f4:35:51:00:
         6f:c3:7f:35:95:b8:0b:53:7d:ae:3b:08:bd:dd:49:93:e4:c1:
         4a:65:45:aa:4d:ef:e5:70:f5:5b:dc:10:cf:35:b1:07:f1:63:
         67:5f:69:ac:35:96:2a:24:74:0b:d8:11:17:55:cb:fc:c4:ad:
         44:94:77:cf:c0:64:4e:f2:f6:99:8a:b3:3f:14:43:c9:1b:9c:
         7b:d8:4f:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5
NzNDNEFCQzAwHhcNMjUxMjA2MTk0MjQzWhcNMjUxMjEzMTk0MjQzWjAYMRYwFAYD
VQQDEw02OTM0ODczMy0xOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9ym1Oi7jDrx0J5NxQ820FqDDWAJnY9lzTW0f0vgCSsfwRW5uOtBTpxNRx1e
WAFho+NWl0AxxJOis9zTIGObiOIHxED+xnvHav5yuQcXVzdg9RWHQGlL/Vjy0HrL
+wO8oGZll5ytUxYtozxDxqkE3yHtLiQSQ94Jsj+GgD/tooKNMUaPXb0Pnv5sgMvt
7U9tZPWCq/gj4wrWRq59syLdA8n6wAwXm0eT4DPGDe5CNM7scWpCcXEO+exeq9vv
K02Db83c+BwCyN0U3rDUskuYaut6kTxI8Q/BOulWaaFF99LjV5iDawwuLyDBCyW/
5aBuFNrAM40vSfgfH8Y2iso2PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCykGHzy
E1CguP/hrqVYFVPcRMYjMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2
NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr
amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjWGafhFfhJfKwyohpIerHf1kxcrI2bP5h11ZGgllsoTUauI5KmL+Y
v+YT25FDAeYn1dKLCciXZLpxxFoBW0banHUJrh9vUjqXJsEwYKz8QF+60NLxJwg8
RaePrjoRUPiLkgwDRPNO7vU/d+lyCbMkFv9Ssy2/PZ1xP5atAVONePxRh4WX74oP
cibmmBnFPFj0W7pm1n9NrWnU/4ydwCQPPbQOClNRVf/HpCfjUMTNsfQ1UQBvw381
lbgLU32uOwi93UmT5MFKZUWqTe/lcPVb3BDPNbEH8WNnX2msNZYqJHQL2BEXVcv8
xK1ElHfPwGRO8vaZirM/FEPJG5x72E/Z
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:48 2025 by rpki-client