This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
File:                     hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json)
Hash identifier:          T9xJkYrtCRfeCE8tBJ81VzaCl7PQLnmLoW7zHh+TlFo=
Subject key identifier:   10:50:1D:19:4A:F9:59:7E:E9:55:5A:6B:FF:02:09:E6:C3:3A:15:2B
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Certificate issuer:       /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial:       0639
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
Manifest number:          0632
Signing time:             Wed 24 Dec 2025 22:01:26 +0000
Manifest this update:     Wed 24 Dec 2025 22:01:26 +0000
Manifest next update:     Wed 31 Dec 2025 22:01:26 +0000
Files and hashes:         1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: tCcDZBYc2uhxyeC9/cwH7slZ6Bcnf/mQ1zAVPdh+6aY=)
                          2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: an7WXAxX+jv7oF31g7hZpPAQEGzXt/L0AOIi2ZabL2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
                          rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
        Validity
            Not Before: Dec 24 22:01:26 2025 GMT
            Not After : Dec 31 22:01:26 2025 GMT
        Subject: CN=694c62b6-6c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:fb:8b:6f:dc:02:70:d9:cc:d3:fe:71:f0:
                    d8:ea:53:81:dc:01:07:a9:93:2e:d8:46:aa:7d:b8:
                    95:26:ff:c0:b9:12:9c:fd:1b:c8:06:32:6a:43:9d:
                    11:1a:37:99:3f:0f:ea:08:14:b4:f9:92:8a:a2:41:
                    a9:e4:be:ef:21:8a:1d:36:04:91:2a:65:9e:98:6a:
                    18:95:6b:1b:28:08:6d:ec:23:16:f7:23:ac:b7:35:
                    df:c5:e3:dd:b8:ed:e6:03:55:9a:d9:60:77:c0:cd:
                    d7:a1:72:15:77:ce:2d:d8:44:73:50:f5:14:df:c3:
                    8c:83:2c:e7:74:d3:55:f1:46:81:7d:e5:b4:ac:fa:
                    84:ae:e6:9c:72:79:13:64:60:5f:48:23:13:c3:29:
                    0a:e9:9d:69:ff:bc:74:61:f9:dc:6e:b2:64:f3:6f:
                    8a:8c:60:86:9c:12:95:c3:9f:e9:d8:fe:b9:77:21:
                    30:d2:39:f2:49:d7:22:0f:eb:f3:86:b8:37:2a:3a:
                    c7:68:1c:5b:e1:6c:a3:70:ac:49:99:af:8c:e8:8b:
                    5e:39:55:84:b3:4d:80:01:70:f0:59:06:b9:3d:98:
                    11:8b:8e:bd:6e:24:48:a3:e1:90:03:10:67:86:b5:
                    10:42:37:fd:4b:8c:d0:56:0d:0a:3e:9a:2f:d3:22:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:1D:19:4A:F9:59:7E:E9:55:5A:6B:FF:02:09:E6:C3:3A:15:2B
            X509v3 Authority Key Identifier:
                keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a6:e1:b7:4c:c0:6e:f6:1b:f2:80:ec:18:df:f1:66:6f:c9:
         d0:40:8f:c6:18:b4:99:4e:52:2a:cd:19:8e:da:92:84:7b:1c:
         ef:b7:96:27:bd:55:29:a0:a3:a6:a5:6b:20:62:e2:27:8d:76:
         77:bd:6f:41:42:f0:81:eb:d3:37:83:81:be:4b:d5:0a:65:3d:
         c2:34:dd:09:d3:79:54:9a:cf:ea:ab:b0:2a:6a:72:ce:4b:8f:
         fc:8a:ab:e7:3f:0f:11:d6:21:95:9b:15:f1:81:14:b1:d0:29:
         15:03:5a:28:ac:76:4a:30:47:3d:e7:8c:fe:c1:f5:17:3d:8a:
         28:9a:82:0a:12:df:f2:ac:c6:95:30:f2:9f:50:7a:19:7a:b0:
         aa:a6:e0:00:e1:05:fa:2d:1b:e6:b0:84:7d:63:e5:74:8e:4f:
         fc:88:1a:58:4b:6c:d7:f6:01:84:87:a3:ca:1c:50:03:19:60:
         b4:08:83:5d:40:96:72:ee:bb:ef:c8:78:3b:33:30:e8:35:ab:
         63:fd:6b:08:d1:df:ac:ca:c9:c4:f8:d9:3d:d2:1d:89:a0:2c:
         c8:be:6e:89:5d:c4:d2:b1:00:37:16:27:6b:89:54:6d:61:38:
         b9:2b:33:74:4b:df:2c:92:2e:a3:a0:a4:76:c7:f5:22:f4:27:
         1d:26:59:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0
QjFFMjY3RTMwHhcNMjUxMjI0MjIwMTI2WhcNMjUxMjMxMjIwMTI2WjAYMRYwFAYD
VQQDDA02OTRjNjJiNi02YzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2P7i2/cAnDZzNP+cfDY6lOB3AEHqZMu2EaqfbiVJv/AuRKc/RvIBjJqQ50R
GjeZPw/qCBS0+ZKKokGp5L7vIYodNgSRKmWemGoYlWsbKAht7CMW9yOstzXfxePd
uO3mA1Wa2WB3wM3XoXIVd84t2ERzUPUU38OMgyzndNNV8UaBfeW0rPqEruaccnkT
ZGBfSCMTwykK6Z1p/7x0YfncbrJk82+KjGCGnBKVw5/p2P65dyEw0jnySdciD+vz
hrg3KjrHaBxb4WyjcKxJma+M6IteOVWEs02AAXDwWQa5PZgRi469biRIo+GQAxBn
hrUQQjf9S4zQVg0KPpov0yJm3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBQHRlK
+Vl+6VVaa/8CCebDOhUrMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG
QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs
Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChpuG3TMBu9hvygOwY3/Fmb8nQQI/GGLSZTlIqzRmO2pKEexzvt5Yn
vVUpoKOmpWsgYuInjXZ3vW9BQvCB69M3g4G+S9UKZT3CNN0J03lUms/qq7AqanLO
S4/8iqvnPw8R1iGVmxXxgRSx0CkVA1oorHZKMEc954z+wfUXPYoomoIKEt/yrMaV
MPKfUHoZerCqpuAA4QX6LRvmsIR9Y+V0jk/8iBpYS2zX9gGEh6PKHFADGWC0CINd
QJZy7rvvyHg7MzDoNatj/WsI0d+sysnE+Nk90h2JoCzIvm6JXcTSsQA3FidriVRt
YTi5KzN0S98ski6joKR2x/Ui9CcdJlnE
-----END CERTIFICATE-----
Generated at Thu Dec 25 13:40:06 2025 by rpki-client