This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
File:                     qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json)
Hash identifier:          pExBQOgC+hNlMb2lCIQi2geNIfx60EP20Axj24Dbjgk=
Subject key identifier:   BD:C6:1A:5E:97:60:07:23:0D:0A:99:1D:AD:0C:32:66:8F:D5:FE:5C
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Certificate issuer:       /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
Manifest number:          0583
Signing time:             Thu 04 Dec 2025 21:56:00 +0000
Manifest this update:     Thu 04 Dec 2025 21:55:59 +0000
Manifest next update:     Thu 11 Dec 2025 21:55:59 +0000
Files and hashes:         1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: N42Lf8VxBgf0I45B5NpkiTa6EZ/Sw2GHmpEH50XPr5s=)
                          2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: v1NPyZcIzLXfq6FcYAJwcqBJcL8OUjXOFJ6ZI59acfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
                          rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
        Validity
            Not Before: Dec  4 21:55:59 2025 GMT
            Not After : Dec 11 21:55:59 2025 GMT
        Subject: CN=6932036f-456f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:8e:62:4e:f0:ca:38:81:d0:49:67:63:19:
                    6c:7c:a5:80:6a:47:fa:dc:cc:03:bc:7f:c9:58:53:
                    c2:2a:3b:46:fa:b5:4a:a9:2d:87:35:5d:ab:10:7d:
                    71:43:d6:e7:5e:17:ef:4e:e0:b0:44:d6:bb:f7:4b:
                    87:4a:82:5d:d9:91:08:58:c2:7f:02:18:96:63:97:
                    41:7c:cf:db:71:78:76:ed:68:b1:9f:03:ed:db:06:
                    aa:4c:ce:07:2e:70:7f:60:fd:be:83:b3:5a:7d:da:
                    b9:31:cd:0e:d1:f9:fa:5d:bb:59:ba:bd:81:47:93:
                    aa:a2:34:45:f4:d0:c6:eb:57:60:0d:da:86:40:d0:
                    e0:c6:8d:bf:f6:64:7c:f7:c0:3f:f7:2e:63:03:70:
                    06:67:29:f5:69:69:af:a9:53:aa:80:51:f9:3f:7f:
                    ca:b4:cb:e9:02:5a:93:86:5a:9b:d0:60:e2:c7:ac:
                    d9:3e:a2:94:05:9a:78:64:87:9f:71:7a:7a:08:53:
                    7d:d4:2b:45:25:2b:30:75:76:17:bd:92:c5:d5:ef:
                    80:9c:b2:d4:36:94:54:17:f1:69:1e:07:fa:71:69:
                    15:34:eb:78:02:91:48:46:7a:03:83:d2:38:c9:83:
                    1e:ba:2a:7f:6e:71:a9:ec:3d:fd:24:c9:fc:4e:fc:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:1A:5E:97:60:07:23:0D:0A:99:1D:AD:0C:32:66:8F:D5:FE:5C
            X509v3 Authority Key Identifier:
                keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:42:e5:8b:7c:f2:19:b5:e8:3a:ae:1b:d1:1d:b5:1c:ba:bf:
         4a:a0:7c:e7:a5:d3:53:3c:76:bf:da:98:f0:e3:1e:cd:45:82:
         a9:ff:7b:16:b3:a2:fc:9c:71:2b:44:30:97:1c:3c:ab:9c:61:
         73:cc:e6:bc:c4:29:e4:27:e6:2b:eb:0d:25:d3:7b:59:63:be:
         3b:b7:ee:b9:9a:5e:92:5d:08:c0:43:e7:db:24:4e:85:ce:2e:
         ff:0a:c6:90:8e:58:3d:cc:7e:07:e3:d4:68:47:a9:7d:88:80:
         79:32:1b:f2:ab:44:59:c1:84:b5:02:53:4a:63:93:3a:a0:23:
         93:38:bc:1c:7a:eb:06:53:23:80:09:be:8a:64:5f:e0:5d:04:
         c6:3d:69:e8:84:cc:b1:b5:ae:9f:76:06:63:08:e7:66:f0:a5:
         9a:f6:06:63:29:83:e3:bb:08:b7:be:56:4c:39:93:98:ab:fe:
         dd:41:cb:49:c6:32:e5:99:10:77:06:c1:95:7d:7a:00:a3:2b:
         8f:dd:d8:86:fc:a7:0c:8b:f1:aa:3c:28:25:85:be:f1:05:c8:
         50:db:8b:54:0d:68:b9:56:6e:96:97:e5:2e:03:b7:b1:64:5f:
         7b:b0:ad:70:45:de:52:e2:bb:29:bf:1e:7f:a4:9d:3d:50:b0:
         f4:c4:89:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF
NkZDQzg2MzIwHhcNMjUxMjA0MjE1NTU5WhcNMjUxMjExMjE1NTU5WjAYMRYwFAYD
VQQDEw02OTMyMDM2Zi00NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpKOYk7wyjiB0ElnYxlsfKWAakf63MwDvH/JWFPCKjtG+rVKqS2HNV2rEH1x
Q9bnXhfvTuCwRNa790uHSoJd2ZEIWMJ/AhiWY5dBfM/bcXh27WixnwPt2waqTM4H
LnB/YP2+g7Nafdq5Mc0O0fn6XbtZur2BR5OqojRF9NDG61dgDdqGQNDgxo2/9mR8
98A/9y5jA3AGZyn1aWmvqVOqgFH5P3/KtMvpAlqThlqb0GDix6zZPqKUBZp4ZIef
cXp6CFN91CtFJSswdXYXvZLF1e+AnLLUNpRUF/FpHgf6cWkVNOt4ApFIRnoDg9I4
yYMeuip/bnGp7D39JMn8TvwjgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3GGl6X
YAcjDQqZHa0MMmaP1f5cMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx
OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu
NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGQuWLfPIZteg6rhvRHbUcur9KoHznpdNTPHa/2pjw4x7NRYKp/3sW
s6L8nHErRDCXHDyrnGFzzOa8xCnkJ+Yr6w0l03tZY747t+65ml6SXQjAQ+fbJE6F
zi7/CsaQjlg9zH4H49RoR6l9iIB5Mhvyq0RZwYS1AlNKY5M6oCOTOLwceusGUyOA
Cb6KZF/gXQTGPWnohMyxta6fdgZjCOdm8KWa9gZjKYPjuwi3vlZMOZOYq/7dQctJ
xjLlmRB3BsGVfXoAoyuP3diG/KcMi/GqPCglhb7xBchQ24tUDWi5Vm6Wl+UuA7ex
ZF97sK1wRd5S4rspvx5/pJ09ULD0xIkq
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:23 2025 by rpki-client