This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File:                     QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier:          3n7g/IqDgO+PS5WFwuN0g0vLsahsyhT5sq1VSYGqlGU=
Subject key identifier:   5A:87:F9:CB:B1:38:76:14:7B:EF:2B:E0:62:FD:A5:C7:6F:09:BF:78
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer:       /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number:          0135
Signing time:             Fri 05 Dec 2025 02:46:38 +0000
Manifest this update:     Fri 05 Dec 2025 02:46:37 +0000
Manifest next update:     Fri 12 Dec 2025 02:46:37 +0000
Files and hashes:         1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: woDFuTeDAxWT5R67cJcpQygOSEQ/Xk42lzaHSmpoXco=)
                          2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: VGNr+wy397+x+eo2u5nezP4JupOw3/BZyZCNhIT48y4=)
                          3: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: f31wkh4SmRezq8K+eaS7YGeeme+WhDVB3FqGjZlLVDI=)
                          4: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
        Validity
            Not Before: Dec  5 02:46:37 2025 GMT
            Not After : Dec 12 02:46:37 2025 GMT
        Subject: CN=6932478e-ace5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:07:fb:34:4e:00:a0:0b:f3:35:b5:fc:f5:
                    72:f9:4a:b4:0d:18:8a:c5:67:13:a0:5f:29:09:9f:
                    75:7f:5f:2b:d8:2f:38:52:6c:67:22:2e:0d:25:ed:
                    cb:cb:d1:7e:7c:f2:2a:0b:36:95:bc:2f:a0:9e:92:
                    af:48:ce:d8:f8:69:c0:84:e5:0f:d2:94:25:66:5b:
                    4e:85:de:35:e9:a1:10:d6:dc:08:17:ed:d5:52:96:
                    8b:02:7e:15:14:a6:c0:11:1c:46:20:11:27:04:a2:
                    72:99:3e:bb:18:18:4f:f2:64:c5:7a:36:11:20:a3:
                    e1:82:60:82:83:8b:8f:5d:55:6c:8f:df:86:60:0c:
                    21:f4:d0:aa:d5:64:a6:19:f7:dd:44:a0:e9:ff:55:
                    b5:24:f0:7c:8d:cb:47:1a:be:ac:ce:5e:24:48:9e:
                    d2:c9:d7:85:fa:9b:e2:d1:c2:e1:4c:2e:30:59:84:
                    6b:8d:43:0d:d9:5c:f0:01:a6:28:08:6b:ab:e0:7c:
                    53:b0:e6:dc:74:05:64:5e:c0:9c:42:73:58:76:77:
                    cd:f7:86:f3:5e:c9:f6:c4:3b:8c:9f:3b:5f:f1:e2:
                    f3:56:d3:60:63:10:db:3f:86:92:78:fb:da:d9:e5:
                    d7:20:20:33:33:0e:d1:b3:07:ea:af:45:d4:45:73:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:F9:CB:B1:38:76:14:7B:EF:2B:E0:62:FD:A5:C7:6F:09:BF:78
            X509v3 Authority Key Identifier:
                keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:bc:d1:c5:c6:7f:68:a2:e7:cc:22:6e:76:63:4c:c7:6c:
         54:9d:46:ec:5b:1b:c4:cc:80:b3:af:84:a2:f0:0e:67:d3:23:
         07:a3:39:e9:68:ba:5b:3e:75:c9:02:de:60:ba:64:61:33:b6:
         13:e0:8f:87:63:39:74:d9:1a:1a:74:a9:18:cb:9b:29:4d:34:
         60:0a:39:80:7a:5b:6e:0c:52:2a:a8:60:7a:c5:8b:8b:19:a3:
         f5:fd:99:2e:3c:ce:3b:b1:6b:8c:be:6d:e5:cf:e2:0f:a1:7d:
         d6:98:21:bc:f8:d1:b0:42:c4:6e:4b:79:d0:bb:20:7a:bb:6d:
         2c:d4:61:ed:db:9f:74:10:55:42:fc:b3:55:1d:df:e8:9e:fb:
         e7:de:37:18:fb:a5:ea:01:05:c9:87:d9:9d:c8:0a:e1:57:38:
         03:d4:ad:70:54:70:fd:0c:d6:58:00:c7:1f:5b:52:3d:e8:83:
         fb:40:6b:6f:cd:64:45:6e:05:41:ba:7e:25:dd:56:9d:22:01:
         9e:2c:42:47:70:1a:5c:96:2a:37:66:1a:d9:d1:aa:04:78:e7:
         8e:15:bc:38:b0:79:42:8d:37:b6:8c:c1:91:a4:cd:37:36:fa:
         54:d8:93:e4:d0:ae:bb:b2:f0:56:71:a8:88:2c:0d:0e:3a:97:
         ff:d6:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:19 2025 by rpki-client