This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File:                     qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier:          BcfwOIQ3uexVwHk/WZF75AJPrgFviYniJ8CVeR5vIuo=
Subject key identifier:   3A:FF:26:1B:D0:8B:5D:E6:C6:BD:65:11:1D:8E:F1:B1:66:3F:F6:64
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer:       /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number:          0816
Signing time:             Thu 04 Dec 2025 19:58:47 +0000
Manifest this update:     Thu 04 Dec 2025 19:58:46 +0000
Manifest next update:     Thu 11 Dec 2025 19:58:46 +0000
Files and hashes:         1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: /0Ue3rSlJIsbrw5fbEqJUNmc0nrKFgH+Vsv1YnlIoyU=)
                          2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: PD6vxM8HPQ1TRKqqISE6gvRSXeLWouSMokRSjCqVFPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
                          rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FADC, serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
        Validity
            Not Before: Dec  4 19:58:46 2025 GMT
            Not After : Dec 11 19:58:46 2025 GMT
        Subject: CN=6931e7f6-2c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:aa:d0:ac:8b:5e:ef:4c:34:f3:4d:6e:73:
                    10:72:d9:52:a3:c4:7d:db:2a:3e:dc:ad:73:98:67:
                    fd:2c:e7:9f:48:f6:db:4d:3b:94:d4:a2:ce:d4:9b:
                    93:bd:80:c2:8e:84:6a:af:dd:ff:57:2b:4f:6f:08:
                    34:ec:a7:d3:00:dd:2d:39:19:56:2a:f7:19:ee:10:
                    22:9e:b6:2d:1b:df:c6:cf:9d:7d:88:89:8b:d2:97:
                    b5:e2:13:a1:4c:b8:05:1c:d1:77:7a:8a:0f:ae:72:
                    ca:67:2a:d2:d6:46:91:5b:77:d8:48:c1:b8:8a:34:
                    b5:41:b0:ff:94:d1:8c:0d:15:73:d5:71:01:fb:4f:
                    44:c1:08:14:ac:8d:c4:57:fc:1e:de:cf:47:93:93:
                    1b:35:61:80:bf:5d:89:2d:bf:b5:80:d7:e2:c5:2f:
                    95:fa:f4:41:9c:94:ed:3e:93:ea:2e:2b:1b:6b:91:
                    67:70:7e:a2:90:7c:66:73:ba:ef:0f:f1:64:30:d3:
                    96:6c:25:b4:9e:2d:e0:31:24:fb:b9:f8:26:96:de:
                    62:d7:e7:de:12:61:5f:10:14:76:8e:f2:51:64:29:
                    9f:15:5a:72:a3:e4:40:1a:f5:c9:54:4d:f2:58:71:
                    47:de:f4:58:a9:2a:66:bd:f4:99:69:62:53:7f:20:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FF:26:1B:D0:8B:5D:E6:C6:BD:65:11:1D:8E:F1:B1:66:3F:F6:64
            X509v3 Authority Key Identifier:
                keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7f:44:82:18:34:ed:2b:15:3a:ce:5b:96:9d:ad:d4:42:f0:
         85:49:af:9a:b0:a6:89:73:6e:d4:dd:31:09:d9:cf:a7:86:1b:
         0a:8d:bf:39:bd:ea:77:f5:62:15:e1:43:ab:ba:d2:5b:3f:64:
         1c:90:aa:66:18:32:da:8b:fe:52:67:0d:2c:19:7f:2d:db:ac:
         ad:54:03:21:ff:07:be:f1:f7:41:85:17:a2:ba:f6:29:8a:2e:
         fa:6c:51:fb:16:bc:a7:03:63:8f:71:cd:92:b0:07:b0:fd:48:
         c1:25:1b:0b:bd:b0:da:8c:08:25:0e:61:20:3a:cf:93:f9:5f:
         ae:3a:7f:52:9e:f9:9c:4b:a0:07:44:29:0a:2d:fc:13:e3:bd:
         68:24:57:61:03:b5:68:85:c4:a2:74:ae:62:09:6a:59:34:94:
         5f:ab:c5:47:c9:7a:a5:0f:3a:6a:8f:b9:99:81:6d:fa:80:11:
         53:47:2a:6a:a4:cf:b4:02:03:7b:1b:09:03:a0:55:13:60:4d:
         45:67:bf:16:b0:86:3b:90:bf:22:bd:53:9a:94:90:a0:13:45:
         92:e2:4a:86:2c:eb:3b:d0:fd:4f:37:db:f4:5c:2d:9f:13:ac:
         2e:51:a9:44:49:b8:bb:88:a9:a4:a1:6c:50:4e:cc:21:39:c4:
         f7:0f:d0:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZBREMxMTAvBgNVBAUTKEFBQ0ZGQUI4ODA0RTdENjIyRjQzQjUyNTQ5ODMzRDMw
ODdEOUY5QzgwHhcNMjUxMjA0MTk1ODQ2WhcNMjUxMjExMTk1ODQ2WjAYMRYwFAYD
VQQDEw02OTMxZTdmNi0yYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26+q0KyLXu9MNPNNbnMQctlSo8R92yo+3K1zmGf9LOefSPbbTTuU1KLO1JuT
vYDCjoRqr93/VytPbwg07KfTAN0tORlWKvcZ7hAinrYtG9/Gz519iImL0pe14hOh
TLgFHNF3eooPrnLKZyrS1kaRW3fYSMG4ijS1QbD/lNGMDRVz1XEB+09EwQgUrI3E
V/we3s9Hk5MbNWGAv12JLb+1gNfixS+V+vRBnJTtPpPqLisba5FncH6ikHxmc7rv
D/FkMNOWbCW0ni3gMST7ufgmlt5i1+feEmFfEBR2jvJRZCmfFVpyo+RAGvXJVE3y
WHFH3vRYqSpmvfSZaWJTfyDd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDr/JhvQ
i13mxr1lER2O8bFmP/ZkMB8GA1UdIwQYMBaAFKrP+riATn1iL0O1JUmDPTCH2fnI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkFEQy80QzRENkY4NkZD
QjQxMUVBODQ2MzgwMDlDNEY5QUUwMi9xc182dUlCT2ZXSXZRN1VsU1lNOU1JZlot
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FzXzZ1SUJPZldJdlE3VWxTWU05TUlmWi1jZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkFEQy80QzRENkY4NkZDQjQxMUVBODQ2MzgwMDlDNEY5QUUwMi9xc182dUlCT2ZX
SXZRN1VsU1lNOU1JZlotY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/f0SCGDTtKxU6zluWna3UQvCFSa+asKaJc27U3TEJ2c+nhhsKjb85
vep39WIV4UOrutJbP2QckKpmGDLai/5SZw0sGX8t26ytVAMh/we+8fdBhReiuvYp
ii76bFH7FrynA2OPcc2SsAew/UjBJRsLvbDajAglDmEgOs+T+V+uOn9SnvmcS6AH
RCkKLfwT471oJFdhA7VohcSidK5iCWpZNJRfq8VHyXqlDzpqj7mZgW36gBFTRypq
pM+0AgN7GwkDoFUTYE1FZ78WsIY7kL8ivVOalJCgE0WS4kqGLOs70P1PN9v0XC2f
E6wuUalESbi7iKmkoWxQTswhOcT3D9Bk
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:07 2025 by rpki-client