This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File:                     QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier:          5NLPnJcTtyxQKwnwexh2FfevTiAICwFHG2tGhOai2YE=
Subject key identifier:   C9:69:06:30:9A:6B:D0:59:03:85:64:20:27:3D:E7:E3:4A:97:88:6A
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer:       /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number:          05F0
Signing time:             Thu 18 Dec 2025 22:17:54 +0000
Manifest this update:     Thu 18 Dec 2025 22:17:54 +0000
Manifest next update:     Thu 25 Dec 2025 22:17:54 +0000
Files and hashes:         1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: E0I8wTuKdj+6Dqqa9abrTwXC8xonsSZYs09VISpvyw4=)
                          2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: NdeCQAWI57TR1prRAjKyS139sDymB99f2VGK6TxtMaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
                          rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
        Validity
            Not Before: Dec 18 22:17:54 2025 GMT
            Not After : Dec 25 22:17:54 2025 GMT
        Subject: CN=69447d92-1745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:01:f2:16:f6:01:4f:4d:ca:47:b4:13:a2:
                    cc:b1:a9:a2:10:f0:51:93:c0:79:e8:47:d8:c2:ad:
                    2a:fe:af:c4:c7:1c:6c:c9:ae:1c:93:2f:6a:aa:0a:
                    02:c5:54:67:f6:0e:76:0f:eb:b9:ae:2e:bd:09:92:
                    fc:80:69:3e:02:fa:17:27:3a:b6:3e:0d:b0:2b:4c:
                    fa:d6:32:d8:29:b7:ad:1c:34:ee:19:5f:cc:96:69:
                    a5:19:9a:fb:e9:5b:0a:77:14:a4:bd:3e:db:82:2a:
                    64:f8:26:5d:b1:64:46:77:a7:72:e2:55:11:68:6e:
                    05:31:f1:69:63:c4:43:9b:9a:6d:0f:a5:59:17:35:
                    72:af:dc:e3:64:cc:31:b5:31:26:a4:8f:51:05:99:
                    19:2c:60:e5:6c:19:41:18:94:e6:85:82:8f:1d:31:
                    91:7b:ce:cb:e4:30:26:01:fd:a5:c2:f4:3b:e6:b6:
                    15:c0:df:f1:37:64:7d:ca:5d:61:13:7e:d7:cf:2b:
                    67:32:1e:89:6b:54:9f:3c:97:4e:68:76:bf:97:8a:
                    2e:f7:06:ad:04:59:34:4f:93:88:9f:c6:69:1b:a0:
                    29:6c:4a:3e:3e:36:05:39:b4:2f:a1:19:74:18:13:
                    0a:ec:7a:dc:f3:93:90:d2:fa:e3:a6:ac:e6:94:d0:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:06:30:9A:6B:D0:59:03:85:64:20:27:3D:E7:E3:4A:97:88:6A
            X509v3 Authority Key Identifier:
                keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:94:0e:49:2a:74:b3:bf:75:c7:98:17:67:2e:dc:c8:7e:
         88:2b:f2:83:40:3d:0d:9f:22:66:52:99:fd:9b:cf:e3:1c:0f:
         4c:ec:ef:c4:11:85:44:ac:3b:34:86:07:dd:6c:83:5d:fa:a6:
         16:75:a3:e8:6a:7d:ff:1a:a0:9d:13:f6:1a:6b:af:c4:a7:1c:
         55:a5:68:98:70:b5:97:42:64:b1:22:dc:d8:62:3a:f6:86:62:
         63:fc:50:0c:b4:1a:92:cb:da:a6:7e:c1:93:af:03:43:6c:fb:
         65:eb:d7:35:bc:43:a5:76:df:3c:e3:eb:09:7f:fb:5f:09:6f:
         de:66:fc:b7:ad:8c:82:1f:b8:0b:6b:50:5b:e5:77:eb:7c:dc:
         2a:ab:4a:d6:d1:bb:84:8d:f3:c1:a5:28:36:28:8f:fe:54:9b:
         8b:aa:aa:44:c5:1c:1c:55:91:3a:ac:9d:44:76:3f:52:ad:c5:
         cd:02:56:cc:4f:38:78:80:75:26:10:3c:fb:2a:3e:f7:b8:5a:
         cb:ff:60:c2:6e:67:fa:6f:18:c1:e3:ff:7a:d6:3a:ac:46:e0:
         b1:82:85:8e:e9:81:38:6c:75:06:3d:3c:8d:4c:45:c0:69:54:
         92:c9:b9:f5:22:eb:2e:ad:88:e1:da:a5:41:31:12:db:d2:24:
         58:d8:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:54:36 2025 by rpki-client