This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File:                     qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier:          R+r3ZY+9NGpmzD0A4L0rh3QuSmaRLR3izLb0KMldpz0=
Subject key identifier:   A0:4E:13:07:83:CC:93:B4:D1:A8:92:0E:AE:11:21:C9:A6:8F:F6:58
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0F09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number:          0EE5
Signing time:             Wed 31 Dec 2025 17:24:39 +0000
Manifest this update:     Wed 31 Dec 2025 17:24:39 +0000
Manifest next update:     Wed 07 Jan 2026 17:24:39 +0000
Files and hashes:         1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: v7NncdigFIgnTJY6dzVv5iqX6hTaHDYRoVAwDMbKxGE=)
                          2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
                          3: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=)
                          4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
                          5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: zFjZk2S9ws5t5ZdI9szHa+nHw5gtdNKIsc6poD8Md0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 17:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3849 (0xf09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Dec 31 17:24:39 2025 GMT
            Not After : Jan  7 17:24:39 2026 GMT
        Subject: CN=69555c57-be60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:c4:ce:da:6a:7a:fb:29:e5:32:32:8d:78:
                    88:43:f4:0c:21:a9:db:f7:9a:89:87:d8:f4:68:84:
                    90:4d:f9:44:42:a4:25:25:af:79:38:57:a9:a5:cd:
                    bd:60:69:4a:eb:56:6c:74:bd:6b:f9:b4:4e:0c:07:
                    f4:6d:4d:79:75:62:1d:5b:7d:db:2e:46:a4:b6:b5:
                    8f:53:76:7b:84:1c:c4:18:4a:94:73:e1:ff:35:6d:
                    55:8e:d1:3b:6a:cf:2f:a9:a5:6d:21:31:a6:27:38:
                    ce:6c:72:83:76:14:8b:ee:fd:94:30:ef:04:f1:d2:
                    61:ce:0f:a8:94:d3:21:54:64:6f:3c:06:e6:ad:68:
                    17:9d:b8:92:f5:b6:37:2c:12:a7:9b:8a:b6:43:0a:
                    20:53:e7:3a:27:92:44:b1:43:df:11:06:da:66:c8:
                    9e:fb:27:c1:00:df:a0:23:6a:47:03:2f:d3:56:27:
                    ac:f7:c1:bc:e8:1b:3d:9e:61:46:d2:d5:93:57:d3:
                    3a:6b:99:a6:43:c3:99:c0:80:d4:b7:9d:d8:19:3b:
                    98:82:3d:57:46:2a:ec:d3:f6:17:07:61:81:30:a2:
                    68:13:81:aa:12:2f:ff:42:c0:1b:6f:48:d0:ed:44:
                    b0:e7:ba:57:a4:66:2a:c9:eb:a4:f0:40:ea:71:d3:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4E:13:07:83:CC:93:B4:D1:A8:92:0E:AE:11:21:C9:A6:8F:F6:58
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:3f:e2:73:ca:6d:01:07:42:c3:cb:ea:73:e3:15:8b:94:
         47:f4:c2:f3:10:95:35:4c:37:42:01:16:37:7b:0e:10:75:09:
         ae:2a:fe:8c:e1:d5:6f:0c:66:bc:c2:ea:f4:26:cf:1f:95:7b:
         0c:7a:67:c3:b3:30:ca:30:43:8b:ae:36:63:db:19:9c:fd:5e:
         26:ba:29:8e:ad:30:21:cb:21:19:a5:f2:65:85:a9:c7:da:fc:
         60:fb:a3:93:9f:85:7f:fe:cd:53:b7:1c:a3:71:e0:53:65:0a:
         ed:6d:0a:59:69:93:b6:37:34:bf:e1:60:7a:49:4d:ac:44:f6:
         7d:c2:2a:f1:c0:ab:eb:72:c5:2b:46:69:cd:98:93:3e:23:d7:
         c4:99:7b:e5:c4:38:a8:aa:75:27:5d:ab:7e:21:73:4e:22:66:
         7d:9e:6c:e7:c9:ba:ef:eb:bb:43:2a:50:e3:7b:6b:7b:5e:15:
         25:95:23:fe:6f:27:b3:b9:c0:49:cc:38:6e:be:2e:ea:87:a3:
         84:fd:11:61:37:82:7e:29:2c:58:07:aa:e1:e7:4c:f6:6c:41:
         e5:d5:7d:9d:d5:c1:e8:ef:e4:d1:44:a4:a5:7c:05:5f:df:bb:
         02:1f:b1:0e:75:63:b0:e5:46:46:a4:07:d4:db:b8:90:19:85:
         33:5f:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:54:29 2026 by rpki-client