This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File:                     qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier:          gCU2BryBOWEKTeVMfyJwdG4I5UIBOYlz9HSPLMOS9Kc=
Subject key identifier:   C1:80:85:43:59:2F:45:11:3C:B9:71:C0:5A:50:1C:9B:16:73:84:B8
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer:       /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number:          011F
Signing time:             Fri 05 Dec 2025 02:50:38 +0000
Manifest this update:     Fri 05 Dec 2025 02:50:38 +0000
Manifest next update:     Fri 12 Dec 2025 02:50:38 +0000
Files and hashes:         1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: aLXOS1HyTXBvAUSt/yLgRasOd+hv4HgWuXW9pXSat7k=)
                          2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
        Validity
            Not Before: Dec  5 02:50:38 2025 GMT
            Not After : Dec 12 02:50:38 2025 GMT
        Subject: CN=6932487e-e5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:79:d4:c0:f4:85:d8:ad:47:fc:18:42:82:
                    1e:e8:21:45:b7:4f:55:f2:e6:04:bc:99:a8:66:9f:
                    22:e5:a9:4d:e9:90:8f:9f:46:84:52:0d:d7:bb:6a:
                    cf:d0:9d:b2:dc:6c:25:92:3e:1c:8a:bc:05:d3:67:
                    43:00:1e:1c:42:9c:ef:1d:36:12:20:3e:4f:fd:8a:
                    d8:00:2e:d6:03:ad:e9:a2:fd:ae:47:1c:6d:66:c4:
                    d4:85:95:72:37:05:a1:f4:18:85:3c:fe:6c:17:9a:
                    cd:d5:f6:57:cf:a8:4f:86:31:34:71:87:66:e7:f7:
                    91:df:5b:cf:89:a4:7d:87:e0:4b:7b:a9:52:1f:1e:
                    ac:6a:1f:34:2c:aa:5e:b4:9d:02:a4:d7:94:49:0f:
                    7a:e0:0a:d7:c6:41:69:7a:8e:37:fc:06:7e:14:ed:
                    f8:0b:56:cc:b0:bc:58:4e:d9:b2:6c:dd:43:3e:0f:
                    18:1a:07:3e:a3:2c:c2:e0:09:78:13:17:fe:ad:86:
                    f9:25:69:ff:1b:d9:45:e7:46:a1:bd:0e:45:5b:31:
                    34:88:94:80:c2:ba:12:4f:18:e1:23:f4:95:47:39:
                    0d:e9:4a:4d:8d:3a:77:bb:ba:cd:0f:11:d8:86:61:
                    ab:f2:ef:1a:4f:b3:aa:34:0b:77:3d:7a:33:63:b1:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:80:85:43:59:2F:45:11:3C:B9:71:C0:5A:50:1C:9B:16:73:84:B8
            X509v3 Authority Key Identifier:
                keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:96:f2:c9:3d:d7:0c:1d:ef:bb:a5:4c:89:94:0b:fa:25:
         a1:c0:14:8f:49:07:db:43:d3:fb:6f:f3:fe:42:74:1e:6f:29:
         44:43:ca:d6:ca:17:da:e6:b6:f4:4b:a1:57:2a:ac:63:b4:18:
         6c:72:c7:fd:e9:55:a5:5f:6b:56:c7:6d:7b:56:fd:8c:af:bc:
         3b:ea:94:b8:77:3c:a4:81:c0:18:9a:22:ea:e8:e5:d7:99:1c:
         7d:84:56:79:6b:32:82:3f:24:c9:40:3e:a9:85:6c:ca:41:a6:
         62:1d:6f:04:74:09:34:99:64:91:d2:4f:ed:80:b5:5a:35:04:
         91:d8:57:41:b3:50:6e:68:64:c0:ff:69:34:71:0f:f4:83:c6:
         53:ff:98:71:80:6b:a5:be:3c:75:25:89:90:c8:f2:80:d9:8b:
         96:05:0f:2f:a6:a0:20:b1:dc:79:e3:e5:25:1c:69:42:4d:e7:
         f9:fd:75:c2:1b:95:46:7b:c1:da:bf:52:ea:1c:d6:c2:35:26:
         70:bc:ff:9b:03:b7:a8:40:45:12:cf:29:5b:a2:5b:93:5c:fd:
         eb:72:d9:7c:d6:0e:61:59:e4:98:82:fc:29:f9:95:b7:b2:79:
         5e:84:c7:e1:43:ff:17:df:ed:52:86:b0:18:ab:f1:f7:e8:ba:
         77:89:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:25:07 2025 by rpki-client