This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
File:                     qJeuj_IUHLM06qS4gcw8VlbUdDY.mft (raw, json)
Hash identifier:          CZPY6/784OtDxYbMQnYs6378Mox1/EIluN8tXTBVGSk=
Subject key identifier:   50:5D:09:67:2D:C6:58:31:9C:52:BE:4D:E3:01:5B:D4:64:8A:CF:F1
Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36
Certificate issuer:       /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
Manifest number:          6D
Signing time:             Sun 07 Dec 2025 00:07:03 +0000
Manifest this update:     Sun 07 Dec 2025 00:07:02 +0000
Manifest next update:     Sun 14 Dec 2025 00:07:02 +0000
Files and hashes:         1: qJeuj_IUHLM06qS4gcw8VlbUdDY.crl (hash: AuEG5ecJUyjDDezlS++4lpEHapH16NW7oOheqA6lENQ=)
                          2: 89A0A916B94711F0A4F9263BC4F9AE02.roa (hash: XCkecjbnjIa4wyzq9mZUunq7CO9Z4u+vFial10Yxu9o=)
                          3: B59F3130AA5C11F08080113BC4F9AE02.roa (hash: RrN69emHD5LJJbN43b1ri6XKXD1rzQb2RimMmZsDRe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436
        Validity
            Not Before: Dec  7 00:07:02 2025 GMT
            Not After : Dec 14 00:07:02 2025 GMT
        Subject: CN=6934c526-7c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:8d:89:fa:6e:15:cb:1c:ee:99:35:a2:6d:
                    08:52:34:ae:7f:40:14:e2:f3:cd:f1:98:54:17:cc:
                    9b:f7:45:37:1e:49:8b:b3:7c:f5:be:3c:72:97:36:
                    ab:38:67:35:35:69:6c:98:2a:d4:05:cd:d7:6f:a0:
                    d6:5e:18:3c:28:9b:29:7f:33:f6:a3:56:3f:41:1a:
                    59:0e:7b:73:bf:82:79:b8:c4:82:80:d6:91:ff:1b:
                    35:44:b7:b6:40:44:5f:db:62:b6:25:20:7c:54:f1:
                    fc:78:ae:26:33:7a:26:6a:17:87:84:99:89:93:25:
                    ff:09:54:2c:ed:76:bc:ae:ab:90:24:60:2e:db:c1:
                    f4:1c:4c:54:ea:d5:06:94:12:1d:66:53:ac:8b:c3:
                    f8:da:51:6f:86:ee:08:d0:d8:ee:b7:a3:a5:a5:27:
                    1e:f8:86:45:23:8a:ac:e9:b9:b4:29:96:d1:24:84:
                    c9:b8:f9:8a:7e:76:2f:24:06:a1:a4:e0:43:ab:10:
                    15:23:59:18:0d:08:59:4e:76:fc:31:12:0a:b0:f7:
                    b7:22:7d:fd:d1:21:3a:47:17:8e:c8:a7:62:1e:a1:
                    3f:70:f4:0b:e5:c3:24:0b:f4:cd:01:e3:c8:01:9c:
                    86:2f:ef:51:50:67:fa:12:06:42:68:06:29:f8:65:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:09:67:2D:C6:58:31:9C:52:BE:4D:E3:01:5B:D4:64:8A:CF:F1
            X509v3 Authority Key Identifier:
                keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:04:27:65:d7:43:81:20:36:1b:45:5c:b6:cb:2c:d2:82:26:
         8e:ba:86:a4:91:54:fa:ae:29:7c:08:e2:d9:ed:b9:73:61:a1:
         1e:c9:fe:c6:46:13:ec:8c:5c:4a:55:e5:28:ec:95:58:13:03:
         56:ef:20:90:67:14:39:4e:66:9b:80:4d:16:2c:fa:35:93:4f:
         b3:2e:69:51:97:6f:68:94:f7:08:91:14:e9:d7:cf:66:3e:2c:
         92:d6:fd:6d:02:3f:a4:ed:a6:f9:0b:c7:d7:03:01:f3:1c:b7:
         74:87:92:91:65:29:22:e7:7c:76:14:97:e7:f9:e9:1a:1a:65:
         14:1c:e3:3f:4a:0a:b0:15:f9:fa:56:f4:76:ec:9b:ea:b7:2c:
         05:39:28:60:d4:de:df:28:47:85:fa:00:30:2b:c6:aa:57:35:
         ab:0a:61:0e:d7:86:9e:e8:ae:de:89:63:cf:ce:a7:64:a3:8a:
         ff:34:a8:4a:49:83:33:49:30:e8:e0:c5:29:60:5b:7d:b5:7d:
         b9:57:dc:43:62:69:1a:92:36:dd:a0:66:ba:29:d9:0e:af:19:
         46:99:ed:4e:1a:b7:ad:7d:ff:b3:0a:c9:92:37:dd:08:71:14:
         bd:39:38:c4:c9:bd:6d:7e:14:18:e0:c9:7d:d4:f9:22:ef:2f:
         c6:9f:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:31 2025 by rpki-client