This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File:                     qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier:          ptJrDtvjkB5fSyxc/L5274X0eGRg4OqP4mQPM7twexY=
Subject key identifier:   BE:B8:02:88:39:1B:3E:7E:A2:CD:43:63:63:94:7C:2C:B4:0A:C5:67
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer:       /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number:          C1
Signing time:             Thu 25 Dec 2025 04:58:38 +0000
Manifest this update:     Thu 25 Dec 2025 04:58:38 +0000
Manifest next update:     Thu 01 Jan 2026 04:58:38 +0000
Files and hashes:         1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: Uw6aZcX1fu95GSNr4fMWus3D5+XeYq6PAwdi29BZPug=)
                          2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: pAj7NdDmToipkIAovmtOfynK/RP/8C5/+xzCsvCxUC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
                          rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 04:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
        Validity
            Not Before: Dec 25 04:58:38 2025 GMT
            Not After : Jan  1 04:58:38 2026 GMT
        Subject: CN=694cc47e-5dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:8a:5c:6f:0f:05:ff:f8:be:4c:fe:56:e5:
                    47:9f:fb:aa:e1:42:0d:7e:d7:1b:52:0b:ad:57:b5:
                    57:a5:fb:70:7d:96:dd:38:3a:ad:b7:26:3c:ff:52:
                    56:1e:46:f4:9e:5f:36:18:21:69:45:16:1b:dc:08:
                    39:d3:20:c0:36:da:5a:ae:a7:5b:57:b1:ca:33:e5:
                    48:44:c3:54:d1:c7:68:5f:30:ef:5b:9f:70:eb:ac:
                    3c:b9:e0:be:d8:08:8f:1a:f5:7d:b3:b7:d2:a0:0f:
                    42:32:3c:e7:9c:55:04:b9:3a:ae:31:db:d0:15:34:
                    94:2a:87:c0:11:31:5b:88:be:17:64:93:2d:66:38:
                    29:aa:33:2c:b9:2c:fd:3f:0f:96:d5:b6:8d:02:8f:
                    62:8b:2d:04:a3:77:96:18:35:fe:3a:ed:c2:ad:43:
                    da:a5:06:05:15:b2:c5:8c:1f:0b:73:d4:a1:69:d2:
                    dd:95:1f:64:8d:62:29:cf:09:eb:0a:d9:8e:d8:a5:
                    da:7d:c7:c8:06:33:d2:12:80:f6:31:fa:b2:0c:4d:
                    98:53:4e:d6:99:1d:40:90:bf:48:4a:04:5d:26:77:
                    84:22:e8:9b:33:79:03:f5:f9:e6:a3:aa:ae:00:b9:
                    30:3f:97:03:ad:4c:e8:af:5e:bc:9a:e5:e2:7d:56:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:02:88:39:1B:3E:7E:A2:CD:43:63:63:94:7C:2C:B4:0A:C5:67
            X509v3 Authority Key Identifier:
                keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:e8:58:a6:5e:50:30:1e:be:98:59:21:ea:2b:c3:01:6f:
         ba:ca:70:c3:2f:c0:47:f3:23:5d:52:3e:80:e1:69:7a:a9:be:
         83:e7:30:95:ab:5b:7e:ee:b0:69:78:2d:c1:95:19:f8:bf:df:
         24:69:33:d1:63:7a:32:1a:e2:ea:c3:3b:7c:92:16:ad:08:5d:
         2c:2e:72:21:bf:1f:da:4d:a3:ec:e8:e6:b0:dd:ef:f6:7d:87:
         69:77:b7:e7:a6:37:90:24:a9:96:c6:94:e0:f2:e6:a5:95:8a:
         97:60:bd:54:aa:47:1b:d9:88:b9:8d:e0:2e:fb:86:0d:71:2e:
         42:61:e1:f3:73:ae:69:f2:de:84:4b:53:54:85:3d:67:6e:90:
         ff:7f:3c:17:92:1e:97:8a:c3:a2:a3:c5:4c:57:bb:20:bd:7e:
         78:42:aa:b4:19:44:e4:42:4e:8d:8a:4a:62:11:fe:9f:68:cf:
         06:8c:2e:ef:98:3d:1e:f5:09:9c:dd:f0:4e:59:ca:e4:3c:94:
         e2:89:63:7c:8c:4f:19:67:ae:28:79:e6:e4:98:6c:8d:7a:82:
         b6:07:e9:7b:58:07:e6:16:25:e3:aa:ce:84:54:fb:b4:d3:16:
         bb:8c:c2:42:60:43:c6:90:b9:9b:56:75:14:57:70:3f:34:eb:
         8d:1c:cb:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M5MDkxMTAvBgNVBAUTKEFBMEI3ODJEQjk5MzJFMjJGRERFRjBDM0Y3NTU5NkVF
MDk0NUUxMkQwHhcNMjUxMjI1MDQ1ODM4WhcNMjYwMTAxMDQ1ODM4WjAYMRYwFAYD
VQQDDA02OTRjYzQ3ZS01ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLqKXG8PBf/4vkz+VuVHn/uq4UINftcbUgutV7VXpftwfZbdODqttyY8/1JW
Hkb0nl82GCFpRRYb3Ag50yDANtparqdbV7HKM+VIRMNU0cdoXzDvW59w66w8ueC+
2AiPGvV9s7fSoA9CMjznnFUEuTquMdvQFTSUKofAETFbiL4XZJMtZjgpqjMsuSz9
Pw+W1baNAo9iiy0Eo3eWGDX+Ou3CrUPapQYFFbLFjB8Lc9ShadLdlR9kjWIpzwnr
CtmO2KXafcfIBjPSEoD2MfqyDE2YU07WmR1AkL9ISgRdJneEIuibM3kD9fnmo6qu
ALkwP5cDrUzor168muXifVYvCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL64Aog5
Gz5+os1DY2OUfCy0CsVnMB8GA1UdIwQYMBaAFKoLeC25ky4i/d7ww/dVlu4JReEt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS8wNzc5N0ZFNEMw
REMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExpTDkzdkREOTFXVzdnbEY0
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FndDRMYm1UTGlMOTN2REQ5MVdXN2dsRjRTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzkwOS8wNzc5N0ZFNEMwREMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExp
TDkzdkREOTFXVzdnbEY0UzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBt+hYpl5QMB6+mFkh6ivDAW+6ynDDL8BH8yNdUj6A4Wl6qb6D5zCV
q1t+7rBpeC3BlRn4v98kaTPRY3oyGuLqwzt8khatCF0sLnIhvx/aTaPs6Oaw3e/2
fYdpd7fnpjeQJKmWxpTg8uallYqXYL1Uqkcb2Yi5jeAu+4YNcS5CYeHzc65p8t6E
S1NUhT1nbpD/fzwXkh6XisOio8VMV7sgvX54Qqq0GUTkQk6NikpiEf6faM8GjC7v
mD0e9Qmc3fBOWcrkPJTiiWN8jE8ZZ64oeebkmGyNeoK2B+l7WAfmFiXjqs6EVPu0
0xa7jMJCYEPGkLmbVnUUV3A/NOuNHMsP
-----END CERTIFICATE-----
Generated at Fri Dec 26 09:37:45 2025 by rpki-client