This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier:          Doq/nyUTykmGMPttNbvobl3XeRtzxhHsze9o7MbSCL8=
Subject key identifier:   82:70:22:B7:46:C5:C6:15:1B:84:CB:30:E9:F2:30:42:84:56:E1:77
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       1075
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number:          1061
Signing time:             Mon 22 Dec 2025 17:04:35 +0000
Manifest this update:     Mon 22 Dec 2025 17:04:34 +0000
Manifest next update:     Mon 29 Dec 2025 17:04:34 +0000
Files and hashes:         1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: yTwag3RxwXa78l/jNMfCwIUNQTArYPkSNLys7IPVwy8=)
                          2: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=)
                          3: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4213 (0x1075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Dec 22 17:04:34 2025 GMT
            Not After : Dec 29 17:04:34 2025 GMT
        Subject: CN=69497a22-05c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:08:ec:58:8f:21:bf:91:17:f6:ad:a6:21:
                    95:68:1c:15:44:1a:04:7e:23:e3:aa:8e:76:a4:4d:
                    46:23:be:fb:79:7a:ef:b3:85:db:6a:3b:27:f3:f3:
                    70:b8:26:0e:70:f6:42:a6:4a:0e:d7:a0:a6:f7:ee:
                    0a:36:9a:0e:3b:70:f5:d3:13:d3:12:ac:2f:2b:d1:
                    3c:28:0a:82:e1:bc:be:a4:c4:cd:a0:49:dc:47:db:
                    a4:d9:d4:7f:ae:2c:c5:5c:e6:a0:2b:95:23:06:eb:
                    ba:20:b6:67:bd:28:81:6c:4c:e8:2b:7b:c8:04:4d:
                    08:85:c0:19:02:e8:59:18:83:88:88:4d:3c:85:8a:
                    67:f4:01:7d:7d:8b:43:f7:fa:16:0b:36:f4:c3:0c:
                    e7:c2:78:fa:d1:fe:f6:21:47:99:f5:13:01:21:fd:
                    fb:4d:01:29:1e:ad:83:32:7d:a7:b9:3c:c7:3e:1a:
                    7b:6f:61:c3:68:b0:66:02:d5:62:2a:57:93:bb:ff:
                    8c:b7:a4:55:34:01:67:91:09:59:35:0d:73:88:14:
                    ea:37:39:3a:6b:f8:cf:37:94:5e:c0:d9:e3:8d:59:
                    f3:1e:1e:bb:70:43:80:ff:ea:bc:d1:ba:bd:5f:88:
                    01:7b:0a:ff:df:cf:3d:8b:3c:d2:45:ed:89:81:e2:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:70:22:B7:46:C5:C6:15:1B:84:CB:30:E9:F2:30:42:84:56:E1:77
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:37:d1:ec:e0:e8:64:d3:d4:8e:39:2e:ba:7f:6c:84:d6:
         59:2c:93:09:5b:51:4b:56:40:21:4c:aa:b6:41:75:5e:56:92:
         c4:b5:6a:9e:62:b6:94:f6:54:b2:58:4e:c0:62:0b:d4:9a:e9:
         2b:e1:83:a2:9e:b7:44:99:81:cc:7a:23:7a:9c:9c:22:f7:80:
         8e:9b:6f:a0:46:81:1c:dd:7c:97:29:94:e9:70:ca:94:16:38:
         e9:d8:c1:46:33:d2:91:17:4d:bb:3a:77:a2:82:50:77:db:83:
         ef:0f:82:d1:d1:f2:af:a0:d6:24:dd:b7:49:5d:aa:4b:68:fa:
         7c:6b:c2:05:15:db:5c:c2:1e:4d:25:76:89:10:58:d5:9d:aa:
         7c:9d:92:c3:22:29:f0:6d:e0:0b:47:3f:40:03:b0:b5:b4:ec:
         c9:0c:7d:f9:34:6e:f7:63:51:41:23:54:e9:ea:e8:c8:f5:29:
         b8:a4:8d:38:27:28:df:a5:02:d3:6d:c9:d5:7a:08:29:69:2b:
         98:88:d0:9f:39:2c:9f:57:fe:8b:d1:36:eb:e1:7b:61:23:0f:
         77:6f:17:fe:15:bd:f7:c9:83:e3:5d:30:4a:6d:9c:ce:38:83:
         14:5c:7a:c1:d8:45:39:57:57:ed:83:06:e5:09:a0:da:e7:ea:
         88:49:0c:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz
QjE0MEZGNkUwHhcNMjUxMjIyMTcwNDM0WhcNMjUxMjI5MTcwNDM0WjAYMRYwFAYD
VQQDDA02OTQ5N2EyMi0wNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbcI7FiPIb+RF/atpiGVaBwVRBoEfiPjqo52pE1GI777eXrvs4Xbajsn8/Nw
uCYOcPZCpkoO16Cm9+4KNpoOO3D10xPTEqwvK9E8KAqC4by+pMTNoEncR9uk2dR/
rizFXOagK5UjBuu6ILZnvSiBbEzoK3vIBE0IhcAZAuhZGIOIiE08hYpn9AF9fYtD
9/oWCzb0wwznwnj60f72IUeZ9RMBIf37TQEpHq2DMn2nuTzHPhp7b2HDaLBmAtVi
KleTu/+Mt6RVNAFnkQlZNQ1ziBTqNzk6a/jPN5RewNnjjVnzHh67cEOA/+q80bq9
X4gBewr/3889izzSRe2JgeJG3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJwIrdG
xcYVG4TLMOnyMEKEVuF3MB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD
NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr
cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANSzfR7ODoZNPUjjkuun9shNZZLJMJW1FLVkAhTKq2QXVeVpLEtWqe
YraU9lSyWE7AYgvUmukr4YOinrdEmYHMeiN6nJwi94COm2+gRoEc3XyXKZTpcMqU
Fjjp2MFGM9KRF027OneiglB324PvD4LR0fKvoNYk3bdJXapLaPp8a8IFFdtcwh5N
JXaJEFjVnap8nZLDIinwbeALRz9AA7C1tOzJDH35NG73Y1FBI1Tp6ujI9Sm4pI04
JyjfpQLTbcnVeggpaSuYiNCfOSyfV/6L0Tbr4XthIw93bxf+Fb33yYPjXTBKbZzO
OIMUXHrB2EU5V1ftgwblCaDa5+qISQx2
-----END CERTIFICATE-----
Generated at Tue Dec 23 02:41:59 2025 by rpki-client