This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
File:                     cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json)
Hash identifier:          MZF7s9w6L1VOj7T7/jYLkT9nB3UYTtmjNaWy6fDLyzM=
Subject key identifier:   0D:3A:A9:C1:BF:BB:F8:36:1A:8C:A5:09:CC:89:4A:79:83:43:D7:45
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Certificate issuer:       /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial:       220E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
Manifest number:          21D3
Signing time:             Thu 04 Dec 2025 15:42:08 +0000
Manifest this update:     Thu 04 Dec 2025 15:42:07 +0000
Manifest next update:     Thu 11 Dec 2025 15:42:07 +0000
Files and hashes:         1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: HIqAtJZ5OhkosKrvYtlCB3tdPv7Z8Vj2NekXZQtTfxE=)
                          2: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: FmtBKEomkwEsg09oOugyzChandkcrHCKNwzoO1agNsg=)
                          3: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: PC1UpxkrsO/0WXvqCVPit0ma41SpwfY7b5bjQTzVpWQ=)
                          4: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: dz1GvojNAIHZyqW3h8Y6bP+YBH4Rk6bXASQ1x7rYr58=)
                          5: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: lgOGf6vXQs55zxCogd+pRQs87jNu5Yd5pLF5QPR8QMk=)
                          6: 1C628A90671411EEA0040661C4F9AE02.roa (hash: CTvIhXrCtBos/LVoBMmH2P68ViNfFaDxoAYBDmOA96g=)
                          7: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: cgIrr8o9jTXMbYMAZf1J8wAI/DfnpUQHzKHIr7ZgI6c=)
                          8: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: V6pTdi9Go4VZBEN3XXIn2lnRjqLUf2zngAhmgO8tgA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8718 (0x220e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
        Validity
            Not Before: Dec  4 15:42:07 2025 GMT
            Not After : Dec 11 15:42:07 2025 GMT
        Subject: CN=6931abcf-5715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:82:e2:bc:ff:34:44:f0:bc:46:3b:c4:d6:
                    be:6c:bb:ea:af:ee:fe:81:57:ae:eb:10:cd:c7:5e:
                    2b:63:a6:27:c7:54:2e:f4:66:11:d4:e8:0c:6e:9d:
                    6b:c4:25:76:ed:74:f5:7b:3c:a6:8a:8b:c4:4f:d9:
                    7f:a6:b4:88:93:92:f9:c4:ee:ae:1b:e0:00:7e:19:
                    8d:c6:ab:2d:12:87:21:3a:38:2a:c8:88:1f:34:f6:
                    f4:6d:0f:3b:ae:1e:82:62:6c:60:ce:41:47:99:f7:
                    26:a5:6b:46:39:9e:b9:48:9a:20:71:35:d7:0e:8e:
                    c4:ac:6f:57:d2:b0:61:90:2c:16:3e:68:d4:34:79:
                    7e:a0:30:a1:de:c2:e0:66:56:31:93:bb:1a:3f:cc:
                    7d:97:65:af:83:3f:6b:7a:ca:2b:04:d4:51:f7:01:
                    cc:25:7f:59:1c:5c:a6:ad:68:b2:18:1f:c2:72:92:
                    12:4f:f3:9e:1b:52:43:af:29:c2:06:87:2f:b2:c7:
                    86:15:71:7b:9d:8a:d0:8e:f6:48:18:3d:24:90:6e:
                    be:81:d4:aa:c0:2c:d5:7a:96:20:6c:4f:75:29:6b:
                    b4:ea:b3:a0:9a:cc:2b:a5:f3:a7:eb:c3:81:34:2f:
                    30:fc:b2:a3:94:eb:0f:64:29:c4:28:c8:dd:72:19:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:A9:C1:BF:BB:F8:36:1A:8C:A5:09:CC:89:4A:79:83:43:D7:45
            X509v3 Authority Key Identifier:
                keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:ba:1a:38:20:cd:cd:d2:b5:17:0b:2b:81:2c:9b:b7:d7:
         11:fb:bd:6d:05:6d:11:f0:77:06:99:21:34:77:bc:90:3a:54:
         04:6d:dd:d8:4e:b1:3d:ef:35:d6:c9:73:d7:89:a5:c6:04:92:
         55:fa:60:93:1b:0e:79:f2:fb:a0:63:75:41:4b:9c:3e:74:a5:
         f3:05:18:b7:87:03:bf:2c:6b:48:fc:c9:08:1d:2a:b9:8e:dd:
         45:d1:8c:a5:e0:b7:77:5b:c6:49:e3:63:76:8b:5c:cb:04:e0:
         a0:e9:ac:7b:17:8b:73:8d:fa:a9:55:5e:5f:b0:24:aa:f8:69:
         eb:55:cd:6e:52:48:3a:1a:22:a2:07:04:b1:a8:0b:bd:8a:7d:
         05:4e:b5:2f:d8:d4:ba:a0:d7:8d:69:5a:3d:24:45:cf:45:ab:
         b3:d1:cf:9a:37:6f:0f:6f:1f:38:34:8f:62:87:61:0a:7f:b1:
         01:aa:dc:6b:f2:8f:c0:f1:8e:af:9b:71:37:d5:e3:57:8c:1a:
         4c:87:40:cd:bb:c2:5b:0b:6a:39:0d:2b:a8:a2:15:cf:c7:3c:
         0e:d8:37:13:ec:8b:c9:be:bd:1e:4d:4c:fd:89:ba:03:4d:e8:
         5b:f1:e3:a3:55:91:b0:73:bb:ad:9d:d0:11:dc:63:39:0d:3d:
         63:84:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:41 2025 by rpki-client