This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
File:                     qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json)
Hash identifier:          g3ZVD+22UQ5GIap/jBs0p01fHLJ3BJWRQh0oOkrxFxs=
Subject key identifier:   4F:0E:51:91:30:BE:F2:3D:35:99:C0:65:2C:74:65:54:6A:5D:38:1C
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Certificate issuer:       /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
Manifest number:          8C
Signing time:             Fri 19 Dec 2025 05:40:36 +0000
Manifest this update:     Fri 19 Dec 2025 05:40:35 +0000
Manifest next update:     Fri 26 Dec 2025 05:40:35 +0000
Files and hashes:         1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: auRTbxCBw/5J1OPDw4FFlyGmY1qkTC5aSpGmiNk079I=)
                          2: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (hash: +2ndLjbvJ/FC5QVpNRaE7vUXuw0EK/JBW1SNXfBSkkw=)
                          3: DC02E120A82511F0919E5F6EC4F9AE02.roa (hash: 7FVEC/IFa+cdZewBKkcb0e2EOdOIv+6jM+tdnsCxhjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
                          rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
        Validity
            Not Before: Dec 19 05:40:35 2025 GMT
            Not After : Dec 26 05:40:35 2025 GMT
        Subject: CN=6944e554-5a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:b9:73:38:17:50:10:91:a6:07:a6:73:ca:
                    fa:19:4f:4f:58:7c:6a:4e:1c:3d:6d:87:d3:ee:ad:
                    79:52:2d:a7:83:85:3b:a6:6e:3a:e5:82:4d:9d:40:
                    f0:c5:84:6e:78:37:2f:2a:bd:20:2f:e4:26:5e:88:
                    96:55:08:9a:39:09:3a:cb:99:3b:87:8d:a3:5c:24:
                    c6:3d:17:ad:87:34:33:cb:1d:12:ad:b1:26:ee:d9:
                    9b:36:68:9d:e0:ec:de:a3:d5:7e:fc:39:c8:dc:af:
                    33:10:50:84:8b:6c:c9:41:17:a4:94:dc:1b:9b:e7:
                    0e:f3:c5:48:f1:3a:7b:04:9e:7c:92:e4:91:59:c8:
                    4f:ea:c4:df:5e:54:db:9f:9f:b2:5a:ba:6e:a3:cd:
                    eb:ba:6f:5a:1d:73:bf:2d:da:47:1c:8f:3d:9e:44:
                    3c:83:55:9b:8b:2e:d3:01:a8:51:a1:d0:4b:78:ae:
                    2b:b2:1a:fc:72:03:6f:07:88:a8:5d:13:73:23:85:
                    0d:60:c4:c3:00:50:f5:c0:73:b1:08:ab:65:56:f7:
                    34:a5:70:bf:52:0f:c6:50:2b:91:ce:46:b3:04:8e:
                    90:02:d5:07:84:d4:44:c8:69:b1:89:21:dd:9d:62:
                    26:0f:12:92:d2:28:6a:c3:59:78:22:54:73:6e:04:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:51:91:30:BE:F2:3D:35:99:C0:65:2C:74:65:54:6A:5D:38:1C
            X509v3 Authority Key Identifier:
                keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3c:07:79:17:71:56:9b:6a:34:e1:9d:42:20:3d:5d:2c:b3:
         88:9b:0c:e7:53:f9:d0:ba:4d:fc:ed:96:36:65:3b:8d:b0:60:
         2a:cb:3b:f4:60:8e:5f:15:39:46:31:92:26:a3:bc:48:fe:45:
         ca:0a:39:2b:3d:0b:c4:07:4b:2a:75:41:a6:e5:ad:d2:79:cd:
         88:99:82:a1:b5:94:bd:a9:48:cf:89:64:62:88:b3:c3:9b:25:
         fc:5f:3d:2b:a8:7f:a6:f3:c2:88:f0:6a:64:1a:31:54:4c:ff:
         7e:a1:89:91:6a:09:f7:6b:23:9a:4a:93:a5:aa:e7:6f:3e:a7:
         9c:fe:7f:20:d5:85:31:1c:ab:67:be:3a:4e:22:95:ec:02:22:
         4e:90:6c:37:ba:69:63:f3:a7:bc:8a:65:5f:fa:11:cc:93:f8:
         0e:ff:e2:a2:9f:9e:97:70:42:a3:95:f7:d6:cc:22:b2:10:26:
         73:1f:5d:45:29:33:21:dd:86:ed:e3:23:71:05:51:9e:9a:da:
         5d:2a:c2:65:24:b2:c5:d4:b1:84:b9:d0:cb:e1:c3:47:85:d0:
         70:73:87:c4:9f:1d:59:82:37:a8:1b:7f:b6:1a:67:f8:1b:4f:
         95:4d:af:db:a6:d7:41:88:1d:9c:35:f8:ba:ef:4d:47:8b:b4:
         0a:09:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:36:41 2025 by rpki-client