This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File:                     qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier:          Ef/n+Dv/zssyoB7YJv34XMmDZR1P0kmobK+WcrASrEU=
Subject key identifier:   64:48:F5:BE:B7:73:3F:43:C9:BF:2F:2A:6D:5B:5C:A1:DE:47:5B:2B
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       0909
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number:          08F1
Signing time:             Thu 18 Dec 2025 19:52:59 +0000
Manifest this update:     Thu 18 Dec 2025 19:52:59 +0000
Manifest next update:     Thu 25 Dec 2025 19:52:59 +0000
Files and hashes:         1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: SwczAbcDDbiefQTXw6JpTHfTM7JoBX4giEfZxVPES1Q=)
                          2: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=)
                          3: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=)
                          4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=)
                          5: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Dec 18 19:52:59 2025 GMT
            Not After : Dec 25 19:52:59 2025 GMT
        Subject: CN=69445b9b-3744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:0e:00:62:b0:c0:73:dd:23:25:c8:32:53:
                    c6:3e:59:2e:65:74:91:2c:e4:a5:bc:75:e8:d7:6b:
                    22:4f:ae:f5:3e:37:86:5d:d8:bc:53:1e:2c:dc:c8:
                    42:22:0e:8e:e8:48:09:ec:ee:07:eb:d0:11:a3:ab:
                    b4:8c:56:e0:f0:48:fc:e7:dc:35:59:ec:07:5f:1a:
                    c3:99:24:80:09:dd:9f:6c:c9:b3:61:02:98:fd:e9:
                    44:97:cf:76:c2:e5:f5:6c:37:15:94:8f:25:3f:9e:
                    08:eb:4d:df:a8:0c:23:43:7d:bb:2b:16:16:34:7f:
                    6d:2d:7d:82:e4:72:2e:1f:fe:f9:59:1f:31:1a:86:
                    6c:74:fc:13:3b:90:49:00:f4:ce:ec:cb:a7:38:ed:
                    28:1b:90:47:66:b1:fc:ef:6b:d3:09:6d:e1:e6:06:
                    04:b0:e8:6f:7d:a9:cf:f0:3e:36:c5:be:45:b5:14:
                    ed:a4:0a:38:17:64:94:6e:8d:de:b5:12:cf:ac:61:
                    42:d1:f5:a7:9c:f1:85:ec:24:d9:7f:3e:41:f7:13:
                    38:e3:5f:f7:b7:7a:a6:ce:9d:c0:bd:24:52:53:28:
                    0e:0b:e5:02:5d:af:6c:04:26:c5:c7:55:d9:08:85:
                    74:0a:82:20:c2:c2:4c:d5:36:c1:c6:aa:89:dc:c0:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:F5:BE:B7:73:3F:43:C9:BF:2F:2A:6D:5B:5C:A1:DE:47:5B:2B
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:73:d6:44:bf:ab:57:22:18:47:f4:de:25:78:d9:c9:03:
         f1:6d:15:30:43:33:26:b3:73:60:27:7e:76:4f:ab:e2:4c:70:
         9d:78:55:4b:8e:40:bf:f8:03:4b:92:e6:5a:71:29:e2:81:59:
         88:70:25:ab:f6:f9:c7:fb:ec:18:4b:ef:92:96:ec:21:ef:5b:
         29:c3:c5:2b:39:18:ca:3f:ab:bd:4e:89:8b:60:c1:f8:22:11:
         84:1c:85:ba:12:a3:51:0d:46:85:c3:8d:73:cd:09:11:27:3b:
         83:68:60:97:d4:d0:9e:9d:bd:fa:69:e6:5f:ed:e5:c7:cc:3d:
         6a:78:2d:4e:f4:bd:89:05:f2:b5:79:b8:f1:52:da:ec:3f:3c:
         c6:0e:fb:8a:ef:6a:8c:00:35:56:81:d8:a2:d2:78:05:66:79:
         0e:10:0a:fb:63:18:2e:37:9f:c5:a8:11:12:5f:f3:46:ec:d8:
         6b:ff:8b:ec:14:7f:38:9b:da:60:ec:df:bc:bd:14:1a:a0:5c:
         65:4e:23:c6:d2:57:36:79:1c:67:6a:e5:2f:8e:c8:e4:1a:2a:
         b0:e3:0f:fa:97:42:d6:55:41:b5:26:33:a6:48:7d:08:ff:22:
         80:31:dc:34:ad:f0:46:0a:ae:73:42:4f:95:75:73:22:75:ca:
         2d:e4:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:48:51 2025 by rpki-client