This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File:                     qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier:          rLhb7oEHt5RKCXQ9WPkP07k/rHcK34ZzjyKfbQk2CJc=
Subject key identifier:   77:7F:24:5E:96:A4:E9:23:7E:EF:52:BC:30:CE:9C:F6:9A:41:1C:88
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer:       /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial:       2D33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number:          2CFB
Signing time:             Thu 18 Dec 2025 15:28:22 +0000
Manifest this update:     Thu 18 Dec 2025 15:28:22 +0000
Manifest next update:     Thu 25 Dec 2025 15:28:22 +0000
Files and hashes:         1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: NWh6GTnm4voMnYIAaTXFgAPRfgXnPt9H0mwHEjcXH5s=)
                          2: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: ulJtZ2Mww36RDb9DCGSsj4fbfbOfNMa0ECif5nIZSNk=)
                          3: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (hash: tOQThPidL/4iHhAQBaSLJmN0jtHD7/tt5lQ9T3jUJQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
                          rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11571 (0x2d33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
        Validity
            Not Before: Dec 18 15:28:22 2025 GMT
            Not After : Dec 25 15:28:22 2025 GMT
        Subject: CN=69441d96-e21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:48:b0:aa:10:22:84:1a:0a:1a:a0:f1:e0:
                    bc:32:1c:57:85:65:19:e4:61:03:b3:e9:2d:ec:69:
                    f7:c5:fe:b5:8e:e5:9c:f5:0e:96:66:10:da:16:7e:
                    11:6f:80:65:d8:68:19:b5:45:1e:40:c0:d1:ae:34:
                    94:15:8f:da:54:b2:5e:41:2b:b1:8b:2b:14:40:e1:
                    13:6b:2e:c3:14:f9:a2:64:00:90:41:f2:fa:89:0c:
                    cb:49:f8:80:82:72:71:94:10:0e:07:bd:27:bf:23:
                    59:af:e3:7d:20:a5:32:6d:83:21:42:92:4c:91:04:
                    19:f4:90:e1:f5:a0:3b:4b:e6:7e:b7:1c:45:8b:de:
                    e6:45:f3:80:72:a3:72:2d:a6:7d:06:35:99:87:d4:
                    dc:2c:d7:90:2d:7b:e7:42:4a:1f:ae:b1:60:76:63:
                    30:f5:7a:14:94:c3:d6:6a:71:f2:bb:e2:b5:6d:84:
                    88:1c:76:72:ce:f1:f5:2c:dc:19:c6:38:04:0a:74:
                    c9:de:ae:b8:e6:4f:7b:be:f5:32:73:ee:1a:a0:45:
                    9e:66:e6:90:4c:f8:54:0b:32:b5:89:a1:82:7c:51:
                    13:78:39:5d:16:2a:25:f8:4b:6f:b5:f1:30:66:18:
                    4b:13:2a:dc:61:ee:8d:65:24:85:04:53:3a:a4:71:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:24:5E:96:A4:E9:23:7E:EF:52:BC:30:CE:9C:F6:9A:41:1C:88
            X509v3 Authority Key Identifier:
                keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:35:43:95:0c:06:8d:30:f7:52:1b:83:e8:57:52:dd:e2:82:
         6a:09:d7:fa:50:e4:3b:8d:99:59:5d:3e:0c:d5:f1:4d:ac:99:
         76:50:71:e9:b2:22:48:e1:99:ab:74:d8:ad:d5:44:56:57:18:
         59:0e:d8:72:15:1b:c6:48:09:d5:2c:9e:f6:d8:ae:15:85:12:
         8b:1f:f0:11:ed:27:54:4c:f3:3d:6e:1f:f2:52:b4:51:16:6b:
         7a:c3:bd:0f:82:37:fa:aa:d0:05:d3:c9:5d:75:cf:f5:e2:ff:
         46:d8:a0:af:df:2e:19:1e:e0:04:f2:26:65:a2:38:fc:4b:d5:
         b2:56:fc:b5:fb:f0:8d:3b:09:a1:19:8c:9f:8c:1d:6f:28:57:
         43:95:cd:df:78:2d:69:69:3b:ba:0d:fa:81:b7:c6:dd:c5:07:
         94:c7:e3:80:89:62:7b:6c:54:60:e5:b2:6e:07:b2:0a:0a:af:
         46:d4:f1:ad:7a:55:98:dc:8d:58:cd:e2:a6:61:59:28:9f:d8:
         15:11:6e:12:f8:fc:90:4f:0b:b6:3c:d9:19:e4:64:b8:2e:2d:
         25:3b:74:94:3e:10:c5:ef:29:76:65:4f:28:a8:d8:41:61:9f:
         b9:65:82:ab:85:d6:8c:f9:4b:f0:93:2c:e7:15:fe:6a:82:31:
         42:6a:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:20 2025 by rpki-client