This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
File:                     qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json)
Hash identifier:          v96fe7hdUoPLNtZcgvPr11CczJafZEpW3H6IXSmg1I8=
Subject key identifier:   00:8A:47:81:EF:05:AA:CF:1D:65:0F:B1:50:8F:94:B7:AF:BC:CF:8F
Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA
Certificate issuer:       /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
Manifest number:          014F
Signing time:             Fri 05 Dec 2025 02:24:35 +0000
Manifest this update:     Fri 05 Dec 2025 02:24:35 +0000
Manifest next update:     Fri 12 Dec 2025 02:24:35 +0000
Files and hashes:         1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: AMhj02Z6actlCogXLkm2PS582+kz0+Gh8Is3k4tQDuw=)
                          2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=)
                          3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl
                          rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
        Validity
            Not Before: Dec  5 02:24:35 2025 GMT
            Not After : Dec 12 02:24:35 2025 GMT
        Subject: CN=69324263-cd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:a4:65:79:64:86:2c:f1:b9:99:5b:0d:91:
                    32:16:33:d4:a0:26:a6:a4:01:98:ab:5c:42:2e:84:
                    b8:77:38:28:c8:64:51:db:40:20:04:ad:d5:ba:1d:
                    eb:73:54:d7:ec:ee:7a:7f:12:e6:c6:3e:a0:7b:6f:
                    8f:b3:fb:6b:20:36:d1:78:08:e5:2c:4c:fa:35:2f:
                    f8:c7:67:2b:dd:05:a5:39:2c:77:5b:b0:af:86:6e:
                    99:49:da:7f:fd:72:e4:1a:54:64:67:09:27:f8:e9:
                    02:92:5b:b8:f4:a0:1a:1c:df:10:19:53:55:6f:1b:
                    d1:6c:86:43:d7:13:56:d8:22:ea:1b:80:5a:12:47:
                    83:57:df:1f:97:34:86:57:a4:2f:b5:77:fd:42:00:
                    87:bb:ad:54:b6:5a:eb:a5:71:d2:64:90:12:cd:a3:
                    e3:9e:12:f2:d3:96:33:fb:24:94:26:a8:42:29:2b:
                    71:e3:ac:76:c4:37:0f:6a:ce:9c:d0:aa:e0:9d:90:
                    16:ef:fe:76:e0:85:51:af:a6:6a:a1:d0:d3:ec:87:
                    a7:69:24:f8:c7:11:cd:b8:49:e3:4a:89:37:1e:71:
                    7a:ef:15:ac:a4:a5:ab:9e:c8:d9:59:c1:55:2d:ef:
                    e1:a5:31:11:70:bb:4b:8f:c7:75:c8:5e:e8:30:0a:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:47:81:EF:05:AA:CF:1D:65:0F:B1:50:8F:94:B7:AF:BC:CF:8F
            X509v3 Authority Key Identifier:
                keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b4:f7:f2:34:55:04:e1:5e:43:6c:b7:8f:2e:a5:60:6d:e4:
         99:1e:e2:1c:78:a0:f4:30:ea:bd:d1:76:41:ef:2e:b6:eb:f8:
         a9:ea:35:26:26:0f:1d:4c:5f:7e:e6:db:a7:35:9b:e1:96:69:
         e2:c4:95:bd:03:4b:9d:a1:87:99:e5:0f:94:5d:0c:d3:62:34:
         ee:10:b8:83:be:fa:c4:67:77:f3:02:e5:35:6d:96:fb:47:e6:
         e9:5b:f4:0a:03:3c:55:54:d1:e1:10:d1:00:63:2d:ea:1a:3e:
         27:e1:5e:ca:1f:87:e9:c3:16:a5:8a:4a:ee:1f:0a:05:52:44:
         6f:8d:40:e9:41:2c:f9:dc:13:b9:40:fa:53:69:15:be:8e:6e:
         ed:81:10:52:7c:4b:66:72:fb:33:f4:5c:4f:f2:fe:bc:6e:9e:
         c9:04:05:28:84:c6:c9:e0:71:7c:75:55:61:63:d2:10:5c:0c:
         c1:5f:c6:21:3c:d8:63:69:7a:49:f7:35:65:f9:d5:83:26:f1:
         48:34:ad:1f:0d:a2:d0:8a:46:09:77:97:72:e6:42:f8:13:04:
         63:7e:09:b6:d4:f5:40:31:f1:ab:6c:9c:f7:63:a2:d3:55:50:
         b9:0e:82:3c:62:08:1e:51:3a:0a:99:79:18:04:20:aa:e1:a9:
         0d:8a:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:12 2025 by rpki-client