This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          n/Igr2n+85G2lELOnJp1dWSBRDbebZ2R1P7PXzW70FM=
Subject key identifier:   09:D4:59:AA:D2:D7:24:0A:F4:97:B3:02:B4:C8:A7:4E:1C:FB:AA:4B
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          DA
Signing time:             Fri 05 Dec 2025 03:35:30 +0000
Manifest this update:     Fri 05 Dec 2025 03:35:30 +0000
Manifest next update:     Fri 12 Dec 2025 03:35:30 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: tiwFHe5Okzo3Z5pP5XDYjbqkMV0f1QfM+yAKz2lPgUQ=)
                          2: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZN1p2zv3KPrxvd3wmx3vHgZQDRb5IctflFC6poo4JQE=)
                          3: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: YRzMwhAdxUkw8CLq3dtH3fyH0aeyCysd6VRYlsf4Ls8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Dec  5 03:35:30 2025 GMT
            Not After : Dec 12 03:35:30 2025 GMT
        Subject: CN=69325302-aead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:5a:40:44:e5:35:5a:55:d4:39:3e:bc:6c:
                    ed:7d:c4:69:23:80:5b:29:81:f1:0b:18:38:85:a3:
                    ec:34:fc:13:4a:ec:92:3f:a1:f0:5c:e1:a7:d3:9d:
                    06:9c:1d:50:e8:6e:1c:94:2a:69:de:35:9d:23:ec:
                    df:0d:23:7c:af:34:af:94:04:2c:5d:fd:23:9e:7d:
                    85:12:23:a6:06:91:fd:e0:cc:c0:0c:e2:f2:9c:25:
                    95:83:a1:bf:ba:76:93:47:83:74:30:06:93:93:f1:
                    03:b1:e8:40:a4:03:3c:dc:24:02:69:ff:f0:3a:62:
                    e7:d0:f4:62:b7:08:41:a4:5b:32:e8:4e:da:05:fd:
                    f8:17:f0:f8:b3:0b:3e:a2:90:42:f3:ce:44:be:65:
                    cf:c6:bc:6b:26:8f:e3:0f:39:a2:1a:83:d6:70:51:
                    37:e7:35:f1:53:2c:fd:bd:37:69:63:af:99:49:cd:
                    eb:06:f3:88:44:89:d8:c7:ca:3d:81:ef:bf:41:72:
                    11:d7:f4:f1:81:32:3e:a5:fc:12:94:2e:bc:c1:9f:
                    be:13:b4:90:7f:7a:4c:a0:04:ba:15:68:27:69:e8:
                    2e:94:60:aa:45:ca:28:e2:12:32:c0:ba:ae:bf:88:
                    2c:89:2b:f1:05:3a:50:fd:d6:7b:0e:fc:e8:26:1c:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:59:AA:D2:D7:24:0A:F4:97:B3:02:B4:C8:A7:4E:1C:FB:AA:4B
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:27:02:0e:b9:2a:4c:8d:5f:e4:78:32:c9:37:40:0b:dc:
         26:9b:3f:58:54:ef:0a:7b:86:29:50:ea:af:49:01:60:d7:6a:
         00:2f:f5:6c:cf:3d:09:1a:c2:4b:47:a4:cb:9c:2c:f1:b6:90:
         a4:30:f5:91:a0:7c:b6:6c:33:c0:04:ea:91:c6:a9:8c:18:c7:
         e4:90:f9:f6:5d:5c:c5:44:f3:1f:16:ac:9d:63:57:00:88:6e:
         e7:fd:fb:3b:d6:35:54:47:5c:cc:eb:72:6b:53:8f:13:c3:09:
         3e:fe:12:6c:bc:ea:67:28:00:a7:3f:04:15:47:96:7a:c4:34:
         cf:54:1b:d2:6e:89:c6:ea:6e:df:d2:e0:be:18:19:bc:97:29:
         58:c7:c1:9e:73:9a:97:f5:1d:1a:37:05:bc:47:73:46:af:e3:
         dd:f8:c0:e4:3c:c6:9e:90:ce:8c:f7:bf:e0:fb:c6:04:32:e9:
         1a:c3:17:62:61:86:79:3e:a6:b5:98:fd:0f:2e:1c:e4:6e:00:
         02:6a:e7:21:cf:90:74:ca:47:64:47:3e:23:59:9d:68:9d:de:
         79:7d:e5:05:d5:3e:04:d8:15:0e:b9:94:d1:be:a5:56:24:94:
         81:24:a9:1c:25:95:0b:11:49:d4:4c:7b:ef:0d:40:20:da:29:
         d7:a0:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:12 2025 by rpki-client