This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
File:                     QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json)
Hash identifier:          ehxzrxJovO1I7xqFElvRga1mFIXs2gd9EoTVtdrdktg=
Subject key identifier:   DD:10:E1:45:95:A1:5E:1F:31:2B:15:24:7E:56:3D:C9:33:A6:2D:D2
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Certificate issuer:       /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial:       0683
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
Manifest number:          067E
Signing time:             Fri 26 Dec 2025 21:43:21 +0000
Manifest this update:     Fri 26 Dec 2025 21:43:21 +0000
Manifest next update:     Fri 02 Jan 2026 21:43:21 +0000
Files and hashes:         1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: OetyTRJ/Q2Yso4AbJ28qUVXo+gaF3DhPMToeLNygG9g=)
                          2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
                          rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 21:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
        Validity
            Not Before: Dec 26 21:43:21 2025 GMT
            Not After : Jan  2 21:43:21 2026 GMT
        Subject: CN=694f0179-8844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:9c:5f:a3:15:1f:b4:3b:21:3f:31:3a:eb:
                    0a:50:5d:bc:be:35:46:78:6e:57:bf:5d:20:d5:6c:
                    b9:c5:0b:d2:c4:c3:2f:e6:e7:75:f3:04:11:f4:67:
                    c4:6d:7a:47:48:67:34:dc:06:b6:11:aa:68:82:08:
                    c3:ad:58:fa:48:d7:33:5f:e1:e1:c9:9d:10:75:81:
                    85:e7:00:88:5f:25:01:e5:be:87:a0:8c:85:4f:5a:
                    fa:5f:6c:90:14:b5:3b:d4:2e:09:fa:86:6b:63:79:
                    b2:78:b9:68:d5:4a:04:90:9a:25:a9:da:d7:10:9e:
                    19:83:a6:45:e4:53:3b:5a:ab:51:73:ac:4b:42:e5:
                    43:46:c0:f8:2e:95:08:a4:38:93:cf:2e:77:46:df:
                    bb:44:11:ed:cc:a7:94:84:5f:f9:4d:a7:c4:1c:15:
                    bb:69:68:0e:47:8c:67:34:aa:88:02:86:cd:fe:47:
                    c2:ba:ec:f6:28:a1:d4:95:2a:e8:35:54:6b:3a:b9:
                    15:fa:b9:fd:39:e5:b7:38:dc:35:dc:eb:6d:ec:f4:
                    55:33:0b:fb:19:9c:c7:04:ee:f0:9b:38:95:d6:83:
                    e7:2d:61:b2:ef:fc:ad:a2:57:25:f0:a8:a5:da:9a:
                    6c:cb:bf:bb:10:0b:e0:5b:4b:80:f1:43:1c:43:9d:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:10:E1:45:95:A1:5E:1F:31:2B:15:24:7E:56:3D:C9:33:A6:2D:D2
            X509v3 Authority Key Identifier:
                keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:e2:7c:c9:4f:3e:5e:00:89:39:7b:68:d6:29:1d:68:65:
         70:2e:23:6c:fb:e9:1f:20:68:4c:87:a1:2a:18:e6:68:74:2f:
         cc:6a:50:14:46:04:e3:14:55:ce:ed:65:ae:a0:5e:1d:0e:14:
         36:9a:e8:4f:9a:77:d1:fa:09:6f:e7:eb:bc:40:f9:cb:57:ab:
         17:79:62:5e:ad:ee:2b:0a:d5:af:d0:73:e3:c3:dc:52:46:67:
         48:b9:29:88:e5:87:62:dc:72:2a:65:b3:24:8e:dc:ac:a3:46:
         19:09:55:4e:f0:7f:6f:78:05:e0:98:ed:3c:a8:e1:cc:86:49:
         c1:ce:8e:c5:87:05:5b:d0:0e:9b:e6:c4:c2:0a:f8:5a:47:de:
         d6:01:d6:af:40:0e:c4:e3:d7:59:c9:66:63:58:48:af:95:07:
         58:ac:c4:74:c6:e3:4b:62:f9:66:49:02:91:1e:f2:1a:83:82:
         6d:ae:c2:c3:06:0c:98:17:13:94:45:19:b6:bc:0d:b7:17:33:
         74:bb:88:98:d9:74:b0:63:fc:5e:b3:03:2d:39:e5:3d:71:61:
         d0:93:f0:4f:fd:01:0e:ed:6f:36:6e:9b:ec:10:36:2a:6b:7d:
         48:b5:4a:c5:69:84:5a:85:83:a3:d6:5a:c4:de:0e:d2:1c:bd:
         75:ae:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 12:33:18 2025 by rpki-client