This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File:                     qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier:          U/vVQeonQXdWh1WYWmWIVAGac/02JruAUaWUbHwnjho=
Subject key identifier:   AA:62:33:44:32:7D:06:71:3E:ED:BE:F5:CE:69:5C:31:1F:22:CF:49
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number:          0172
Signing time:             Fri 05 Dec 2025 02:05:19 +0000
Manifest this update:     Fri 05 Dec 2025 02:05:18 +0000
Manifest next update:     Fri 12 Dec 2025 02:05:18 +0000
Files and hashes:         1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: fjRllFYmKwbKNaudbGhN4HP8W337Alm8+bCdb3p62r0=)
                          2: E13D8940342E11EF84328672C4F9AE02.roa (hash: ktd5mpPgnA7DVPoDoDI59fbIVSssBE9h3J/Qc3SNd4I=)
                          3: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: 53exXb+y74MMiXd9WVR4Lvbmf3aqTfFbV9OKgS6dCTc=)
                          4: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: 57MB5MLOBu0rlKWbYAUFlVy0tWIAfHRyTSUm9GeesCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Dec  5 02:05:18 2025 GMT
            Not After : Dec 12 02:05:18 2025 GMT
        Subject: CN=69323ddf-6c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:00:2c:45:31:15:27:90:c4:1d:d8:2d:67:
                    31:7c:f9:d8:b9:3f:e7:03:0e:23:d0:22:04:76:d6:
                    84:de:21:d4:b7:3d:2a:42:da:c8:c8:01:56:2e:2d:
                    50:be:4b:1d:f9:43:ea:b9:5f:9d:6c:0c:f8:51:fd:
                    0b:ba:3c:12:f1:e1:c0:68:7f:5d:1c:90:17:a6:19:
                    3b:0a:67:05:5c:41:b3:81:f8:c9:b6:31:14:9d:88:
                    08:d3:ee:0c:36:43:b0:36:ed:a7:5e:03:fa:eb:04:
                    c5:bc:ab:08:08:7d:1f:af:a1:aa:0e:98:97:a0:5f:
                    88:44:f5:4f:f9:f6:3c:b3:ea:8d:69:c4:ad:22:b6:
                    b8:c0:a5:ad:3a:1f:9a:88:d6:80:ae:a4:fa:f5:70:
                    e6:a3:93:2d:ce:1f:00:f7:9a:13:30:73:6a:2d:4b:
                    ae:f4:8d:9e:bd:a9:db:a9:b9:7a:c2:56:d5:ac:c3:
                    2f:58:7d:29:c6:95:7a:dd:b7:5d:b1:e7:1a:59:7c:
                    3c:02:71:d2:4c:10:25:b9:f9:4d:13:86:70:7a:05:
                    58:a8:c0:56:f3:5e:05:39:d0:d4:4b:29:4f:81:ad:
                    05:bd:73:2b:7c:54:ea:12:ac:62:73:4c:7a:c8:9a:
                    8c:5d:13:03:a9:e1:4f:2a:52:d4:58:a6:e0:9c:1e:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:62:33:44:32:7D:06:71:3E:ED:BE:F5:CE:69:5C:31:1F:22:CF:49
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:26:9d:ce:de:b7:15:dc:7f:54:35:39:61:29:80:f6:11:
         2c:1e:68:61:ed:f4:4b:52:25:af:9f:59:ab:ae:4f:e8:01:10:
         37:50:b5:94:36:a8:c9:49:7b:72:5f:31:a9:1f:a5:06:e6:0d:
         4a:ad:cb:95:85:77:af:13:96:e7:2b:11:6d:d4:06:31:e4:1b:
         40:1f:23:28:2a:0b:35:77:6e:74:c3:bb:e8:b1:26:99:63:ff:
         25:b4:c9:4e:28:f7:33:e0:a6:c1:76:e4:fb:03:60:07:8f:b5:
         25:86:e2:a3:83:30:b0:7f:7c:cb:4e:16:b0:35:96:64:c4:c7:
         bd:f4:74:e0:66:6f:ba:16:85:8a:a8:90:47:57:d6:72:1b:57:
         94:ab:5a:2d:da:e7:2f:a1:fa:34:50:a0:f3:6f:01:38:f1:f6:
         60:c2:7c:5d:ad:b0:34:1a:c4:28:3f:f9:2e:e2:63:03:ec:6c:
         2e:dd:46:66:94:2c:21:81:11:55:4b:06:de:2e:d0:58:2d:5a:
         3d:6f:a1:a3:ee:83:2c:bd:9c:ef:4f:4d:07:73:f0:84:2c:47:
         a1:1c:24:a0:8f:9b:f5:86:63:c6:fa:e1:ef:ad:a9:10:42:48:
         3e:87:ec:c1:bf:65:5e:e9:88:aa:d8:79:d5:2b:92:8b:aa:07:
         c7:d2:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:09 2025 by rpki-client