This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          BFzLcNv0toIwoS1lTvNchW+emAHqw4aEruoq4uzlLhQ=
Subject key identifier:   31:1D:9D:91:99:A5:78:05:1E:0B:9F:49:FA:C5:38:B7:51:3B:53:A4
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A23
Signing time:             Tue 30 Dec 2025 19:15:18 +0000
Manifest this update:     Tue 30 Dec 2025 19:15:17 +0000
Manifest next update:     Tue 06 Jan 2026 19:15:17 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: y2tQ18MxH6Ao7cxeo8QOesFGDWSg2x//6U8XLeZRbv8=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 19:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603 (0xa2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Dec 30 19:15:17 2025 GMT
            Not After : Jan  6 19:15:17 2026 GMT
        Subject: CN=695424c6-f05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:64:d8:42:5d:9b:74:06:e3:b0:dd:72:fe:
                    48:c5:2e:d6:1a:a0:81:b7:b9:86:93:25:36:2c:5d:
                    c9:83:aa:d6:3e:98:29:2a:67:0d:1f:e6:96:05:fc:
                    c6:ed:59:48:c1:17:c0:35:f8:ac:79:f7:fe:88:6b:
                    f6:55:fc:82:b3:87:7c:30:31:84:5a:b0:d6:a8:34:
                    d4:27:af:c3:f1:bd:84:09:f1:1a:30:84:43:69:5c:
                    69:bd:99:1f:f4:13:3d:1c:62:93:e9:3f:70:d3:ff:
                    d4:59:da:70:02:10:bb:8b:34:6c:c6:e4:3b:f4:d9:
                    78:d3:d8:2b:85:19:dc:6a:f2:cd:44:eb:9c:3f:4b:
                    a3:a1:1d:3f:73:27:bc:d7:4d:98:1d:1c:6b:42:b0:
                    93:32:eb:89:a4:0d:0a:74:3f:93:23:22:fa:49:fa:
                    2c:a2:11:e3:f5:fe:cf:26:c3:2e:f0:02:61:61:ea:
                    47:dd:83:fb:bb:f8:e5:48:1d:72:b2:17:3f:79:a6:
                    46:57:72:a7:bf:28:50:ba:ec:de:d3:52:4e:cb:15:
                    9a:11:0b:8d:59:bd:65:ce:29:31:54:0f:f7:97:db:
                    53:ef:4f:78:73:b6:96:da:85:30:89:b2:e6:51:39:
                    e2:35:6d:e8:3e:e9:fa:8f:9a:17:04:b6:a1:d0:84:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:9D:91:99:A5:78:05:1E:0B:9F:49:FA:C5:38:B7:51:3B:53:A4
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:27:02:cc:a6:54:a7:ec:45:a3:e4:e0:62:e1:eb:f0:b6:
         95:4b:7b:92:46:02:4e:73:65:79:fe:5c:dd:75:10:bf:c4:14:
         4f:2d:ec:18:84:d7:36:e8:05:ba:f8:93:c9:ad:09:8b:14:8a:
         00:a9:4a:e3:e5:e5:8f:50:cb:8a:9d:9b:21:b7:e0:c2:11:ba:
         cb:47:4f:6e:ea:6a:d4:dd:0b:2b:f6:ef:c7:95:19:2d:bd:a6:
         55:6c:f9:89:28:a0:a7:22:0f:35:13:61:2d:b1:c7:c5:db:ad:
         03:09:78:30:0b:2d:40:fc:f9:80:c4:2e:45:33:00:9b:6b:9b:
         99:c8:3f:f4:f3:11:82:99:a2:c5:ad:e9:85:01:cb:29:e4:3d:
         1e:60:32:18:ef:98:5f:76:2b:98:7c:5c:86:6a:06:dd:90:77:
         de:32:bb:9a:af:5b:cd:56:c6:d4:f8:fa:92:a9:ff:bc:8a:ff:
         d3:b5:3f:9f:b6:66:05:fa:59:b6:c1:03:6e:d8:ed:62:2e:6b:
         2d:7b:e4:9f:54:03:e3:25:05:de:28:4c:62:bd:2b:6b:a3:a2:
         69:b8:24:43:79:cb:5e:c0:bb:b6:27:33:07:35:47:12:a1:8c:
         cf:6c:68:a5:7f:6e:03:06:b4:58:bf:57:e6:52:39:7d:28:f3:
         3d:a0:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:21:33 2025 by rpki-client