This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File:                     qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier:          cxeab34tvivN7MLgmG+7EEn3wbaTtYx0hl/+/vPVs9E=
Subject key identifier:   D6:8D:3C:38:05:15:C1:68:A6:67:A8:D1:95:E3:66:F5:15:55:9A:09
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer:       /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial:       1A54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number:          1A4D
Signing time:             Sat 06 Dec 2025 15:59:48 +0000
Manifest this update:     Sat 06 Dec 2025 15:59:47 +0000
Manifest next update:     Sat 13 Dec 2025 15:59:47 +0000
Files and hashes:         1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: 6Le5TLvh9bGPwfayCn8Xcnr5Ch2aH/V63OZQnoktHmE=)
                          2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
                          rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6740 (0x1a54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
        Validity
            Not Before: Dec  6 15:59:47 2025 GMT
            Not After : Dec 13 15:59:47 2025 GMT
        Subject: CN=693452f4-da11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:81:c4:26:42:32:20:55:64:6f:a0:15:d4:
                    db:87:3e:00:da:cc:ab:03:25:11:20:10:85:f0:0f:
                    26:c2:b0:b7:85:3d:19:c6:1d:8d:02:de:1b:87:82:
                    02:46:2c:73:8a:88:4d:f7:6c:33:f6:68:b7:18:af:
                    a6:d1:1b:ac:55:53:4f:d1:dc:d0:c6:7c:60:d3:e4:
                    23:64:79:44:c7:4b:c3:67:f8:a1:44:6f:34:0f:61:
                    9b:86:ef:bd:4f:ea:98:4b:04:fb:de:fb:b6:d2:a7:
                    52:da:0f:c0:33:63:24:7d:c4:dd:96:c1:ea:b5:32:
                    ae:75:d7:29:02:ba:37:66:d3:8a:fb:9a:51:49:76:
                    ac:b0:76:57:a1:8e:bd:23:c4:8e:ce:e5:14:30:05:
                    e8:88:83:40:dd:e6:0e:fe:73:10:a0:42:7b:6f:b5:
                    74:25:e4:ca:55:92:69:10:0d:78:fe:73:b7:3c:b1:
                    b4:15:e5:e7:5e:e0:12:dc:06:40:3d:2a:da:dc:38:
                    83:fb:0d:e1:f5:7b:92:2a:0d:7e:f4:f3:79:3a:1e:
                    27:b6:5c:ee:42:6a:d8:8f:04:68:61:87:4b:5f:9d:
                    fd:3d:be:3c:08:3b:c5:ab:bc:55:29:cb:5c:4f:2e:
                    1c:4d:6c:f8:16:80:52:f6:a6:73:e4:b1:e6:16:f2:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8D:3C:38:05:15:C1:68:A6:67:A8:D1:95:E3:66:F5:15:55:9A:09
            X509v3 Authority Key Identifier:
                keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:28:dc:24:a9:98:f5:a5:fe:4d:4e:20:39:f3:8a:08:a1:eb:
         66:78:41:e4:04:a3:4d:71:6e:55:99:02:bf:d6:2b:91:14:b3:
         f4:62:ae:cd:42:f8:1f:a1:4c:5c:8b:c2:e6:ab:09:3a:63:f8:
         ea:2b:02:82:d4:6d:ec:99:53:ab:be:75:cb:25:bb:55:4f:b4:
         d8:5d:17:d0:4a:49:9c:94:b5:26:df:10:04:b4:18:8e:6b:40:
         91:a6:24:1d:65:da:6c:7d:a8:8e:35:f7:bb:f2:5d:2d:af:62:
         fc:ba:e7:23:23:fc:34:8f:ea:2c:a8:14:98:09:b4:10:6e:06:
         c1:a3:87:3e:c3:5b:b0:9a:91:db:61:24:1e:89:72:6b:24:36:
         a1:f7:09:8e:4f:87:76:7d:85:54:eb:57:14:a4:b3:fa:fb:c3:
         21:89:3c:83:13:c3:58:82:06:53:d4:8d:3e:e4:9f:cf:00:87:
         a7:a6:b7:ec:70:8e:3d:6a:df:9d:82:02:b3:13:d0:e2:a1:c3:
         c0:d0:69:19:25:cc:56:b3:cf:1a:20:08:ed:e2:66:ad:6b:3b:
         e6:6c:db:16:1b:01:0c:73:56:e5:1d:c9:af:ed:cc:74:f4:52:
         df:39:e3:60:9b:b6:83:2b:b7:8f:b8:06:02:85:81:08:66:0b:
         99:23:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:31 2025 by rpki-client