This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
File:                     QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json)
Hash identifier:          B+zCBOtXjcZX5lpIf+2H2NnDoqwr1GRmOY7dM+ehpaE=
Subject key identifier:   5F:8F:C0:EC:32:82:B9:4F:D0:EB:80:4B:54:23:51:B3:E5:D6:54:A5
Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
Certificate issuer:       /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
Manifest number:          0125
Signing time:             Fri 05 Dec 2025 02:48:09 +0000
Manifest this update:     Fri 05 Dec 2025 02:48:08 +0000
Manifest next update:     Fri 12 Dec 2025 02:48:08 +0000
Files and hashes:         1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: oWCN9OXT1jcBJymfSl3mfCFgSXOqna0Mj4z2E8Nmv04=)
                          2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
        Validity
            Not Before: Dec  5 02:48:08 2025 GMT
            Not After : Dec 12 02:48:08 2025 GMT
        Subject: CN=693247e8-592c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:f1:65:95:cc:2b:0f:78:95:a6:68:f5:8c:
                    d5:0d:09:63:78:3d:cd:40:1f:44:7a:e7:42:43:00:
                    a8:c3:3e:4e:f9:9f:29:d6:7d:cf:5c:e4:ed:d2:b3:
                    85:fb:55:ed:31:d9:72:94:3c:0d:b7:3f:80:7c:0f:
                    ec:a2:d6:a6:a8:49:46:ee:1b:19:1f:b1:03:f6:62:
                    9b:fb:00:fe:97:91:64:a2:75:cf:50:3c:55:87:ff:
                    b9:98:56:cf:28:7d:91:3a:fa:38:bd:a2:91:1c:c1:
                    09:82:66:2c:9b:19:e5:6d:7b:db:2b:46:cf:df:dc:
                    21:6c:e4:f0:cc:4f:1b:3f:38:3a:77:85:91:21:3b:
                    a3:62:1c:2d:dc:37:e8:4c:47:de:75:16:26:59:c8:
                    05:f3:bf:2c:aa:81:f1:02:2a:bf:21:0c:a5:e1:1e:
                    b6:b2:a6:6b:74:3a:c6:82:9c:99:7d:35:c5:f6:ba:
                    42:bb:92:b1:c0:7b:18:d8:64:c6:4e:31:ec:23:a9:
                    27:61:ed:79:5f:ca:2d:67:7c:3a:5e:b1:6f:24:77:
                    6c:f3:a8:e6:51:f1:3d:85:8e:92:2e:99:ae:e1:53:
                    5f:53:6c:a4:b4:79:be:3e:2f:c4:78:6e:c1:ec:bf:
                    fd:29:67:45:63:75:25:60:fc:ce:a2:a2:81:6d:ee:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:C0:EC:32:82:B9:4F:D0:EB:80:4B:54:23:51:B3:E5:D6:54:A5
            X509v3 Authority Key Identifier:
                keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f0:c6:08:ba:e3:96:44:2f:ca:8e:bd:42:19:77:8a:65:95:
         21:46:02:b3:76:f0:23:ab:13:ab:a5:5d:ce:e7:9b:55:88:42:
         7d:67:e2:5a:32:44:35:1b:0d:3a:d3:db:4f:1e:2f:47:86:5f:
         66:ac:f8:a7:80:75:90:6f:82:53:60:da:03:76:92:63:de:cd:
         ca:b3:fa:19:54:02:53:b4:81:a4:e2:5e:60:b3:d5:a4:1b:73:
         ea:7c:49:6b:9a:83:55:c3:f9:0a:86:7b:3d:80:97:5e:c8:2a:
         85:0a:19:2d:fc:8b:fe:c9:d2:b8:e3:e9:0d:ff:f8:ec:bb:62:
         a1:d4:8d:e9:cc:78:df:6c:54:78:b2:c8:b8:27:d6:a1:fb:72:
         78:0e:e6:03:e2:9d:b5:aa:f2:99:52:12:7e:53:19:54:85:a9:
         d3:7d:66:ff:ca:6a:69:69:61:ad:1b:ac:22:eb:0d:42:e0:b9:
         d8:51:17:73:03:bf:9b:3a:01:5f:e4:2e:b2:92:3b:c6:3e:38:
         4b:2d:eb:13:13:10:e5:72:8d:b3:31:7c:ec:95:a6:f8:bd:87:
         44:1f:ed:2c:56:f4:8e:f6:a4:ce:97:a6:31:6f:95:a4:e6:c6:
         26:63:0f:68:23:51:2d:33:55:ca:c1:64:65:90:8b:c1:41:c5:
         ce:ae:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:47:01 2025 by rpki-client