This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File:                     QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier:          abZu5SEQ2t4opkkSl2zc03tkCsd8RHdxQSRJrBZWPYY=
Subject key identifier:   FA:5B:59:04:15:62:1F:60:47:A6:A0:EC:17:7F:CE:C5:78:AA:92:ED
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer:       /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number:          0161
Signing time:             Fri 19 Dec 2025 03:10:59 +0000
Manifest this update:     Fri 19 Dec 2025 03:10:59 +0000
Manifest next update:     Fri 26 Dec 2025 03:10:59 +0000
Files and hashes:         1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: tV+1FwxezroBKHS25e9XVP4frzf2qRSmsF/nqS5TbN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
                          rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
        Validity
            Not Before: Dec 19 03:10:59 2025 GMT
            Not After : Dec 26 03:10:59 2025 GMT
        Subject: CN=6944c243-f789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:6e:db:32:11:de:79:53:6e:0b:28:b3:ae:
                    58:74:92:90:12:d1:a3:fb:d7:dd:ce:af:cc:e6:2e:
                    ab:79:97:58:6e:26:a6:97:9e:86:b0:c8:f9:f6:dc:
                    c7:4f:9f:32:93:68:e5:1a:ef:80:f6:ee:ff:9c:2f:
                    f7:f7:1e:36:49:3f:17:54:40:a3:84:b6:92:08:b0:
                    32:0d:1f:cd:7b:7f:95:a9:41:2b:1c:82:80:92:6e:
                    71:2c:8d:52:c9:6d:5d:7c:f1:ec:2e:c6:43:e4:32:
                    b4:28:26:94:d3:32:ac:03:62:9f:49:a2:79:8d:6b:
                    e7:e7:31:70:a0:b3:59:d6:f7:94:a8:9d:b4:91:a3:
                    0d:1c:8a:c8:eb:cd:fc:ba:5b:fa:1d:af:d2:68:05:
                    58:6d:e0:e5:a1:55:5f:e4:03:8b:ee:0f:51:2d:59:
                    80:59:8a:21:fc:d7:07:e5:26:42:4e:77:ed:7f:cd:
                    d7:cc:a6:b3:83:53:67:2c:a9:02:e6:3f:09:42:14:
                    68:c8:bc:59:cf:11:94:09:bd:be:d7:2f:d7:8d:34:
                    7d:b8:f5:cf:99:1f:0f:a0:86:49:3d:50:41:c2:b3:
                    22:b3:0e:e5:1d:07:31:16:53:16:65:c5:31:f3:3c:
                    11:67:59:ab:91:09:ec:b1:f3:ea:ab:7d:1c:8c:37:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5B:59:04:15:62:1F:60:47:A6:A0:EC:17:7F:CE:C5:78:AA:92:ED
            X509v3 Authority Key Identifier:
                keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:ac:c9:5c:23:bd:ca:af:fd:15:2a:d0:f8:cf:e2:9c:9e:
         69:02:a1:ab:f9:86:c2:b3:38:bf:93:7f:7b:9b:4f:fb:50:77:
         20:ba:bd:e0:a3:41:70:e3:55:f3:b5:f3:1b:8e:c7:a4:07:51:
         45:00:7a:8e:3c:ed:80:49:d3:96:44:cd:46:92:79:42:af:9f:
         18:72:ef:16:50:a7:28:18:fa:7c:43:82:39:bd:9b:8b:e7:6b:
         3e:4c:8a:84:6b:73:99:b4:b5:d1:22:08:3a:17:c3:28:68:b5:
         e4:e1:0e:0b:1e:a3:fd:7c:30:6b:13:6c:b0:d6:33:e0:f3:f3:
         ee:19:16:a0:93:5a:84:b4:2e:c9:09:d2:b8:e5:f5:bd:2e:90:
         d9:6e:d0:15:a8:39:52:7a:ae:2a:8e:09:70:1e:e2:e0:a5:6e:
         18:94:6b:ae:91:99:af:02:92:7e:81:4b:78:af:00:13:b2:b8:
         b2:19:5c:f2:d9:94:4a:08:4b:83:e5:00:df:46:e1:f6:ec:da:
         d9:d4:6b:fb:34:7b:91:f0:71:a1:e5:f1:cc:c1:7c:34:dd:ef:
         32:8a:dc:ee:da:77:80:7e:f8:4e:d9:05:06:e7:b3:3d:73:e9:
         04:96:ac:64:fa:10:ad:b8:c8:20:ed:4c:e2:39:3d:6f:70:0d:
         d0:16:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:37 2025 by rpki-client