This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File:                     qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier:          XES24tPHttDPXlgIIpjCuCRGdupOk7UV4ml7jB0E9ak=
Subject key identifier:   94:87:95:22:87:D4:67:7A:17:F4:C3:1B:41:13:01:06:70:42:F9:D8
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer:       /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial:       0824
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number:          081D
Signing time:             Thu 18 Dec 2025 20:23:44 +0000
Manifest this update:     Thu 18 Dec 2025 20:23:44 +0000
Manifest next update:     Thu 25 Dec 2025 20:23:44 +0000
Files and hashes:         1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: aQoWtq8QXDBhBRp2IGO2ieq+jiZ0tZL5tmVOomTbEjs=)
                          2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: PD6vxM8HPQ1TRKqqISE6gvRSXeLWouSMokRSjCqVFPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
                          rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FADC, serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
        Validity
            Not Before: Dec 18 20:23:44 2025 GMT
            Not After : Dec 25 20:23:44 2025 GMT
        Subject: CN=694462d0-9ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:34:c3:5d:19:10:aa:50:ac:65:d4:b4:66:
                    84:0d:5a:c1:6a:eb:3c:77:30:8e:60:02:ad:d8:d4:
                    6f:a0:9a:49:a7:a9:d6:a0:c7:c3:b0:d1:b6:38:93:
                    d0:ad:ab:6e:c9:c3:39:8a:ff:59:40:49:69:68:46:
                    37:f9:72:a3:cd:93:69:cb:93:ea:c3:f3:32:00:c7:
                    69:78:4b:64:90:48:5a:b6:0c:db:d9:72:00:d6:1e:
                    e8:53:16:74:11:59:41:ca:91:05:f9:9e:17:f2:01:
                    42:d2:0c:b4:6f:4b:ff:68:fc:54:81:8e:03:44:43:
                    f7:10:b1:03:f3:b0:37:e8:50:e5:26:5b:40:2e:ca:
                    ef:11:6d:ad:da:8d:5f:dc:d1:67:12:5e:c0:64:86:
                    1d:a0:e8:31:35:f5:28:9e:01:af:f4:e6:c1:54:11:
                    85:58:ce:33:ad:55:3f:6d:74:4a:d3:ab:64:51:e1:
                    60:7b:e3:b8:93:b3:6a:20:39:27:56:98:be:5b:ab:
                    c6:b1:d5:f8:9d:2f:f0:f0:e7:08:d4:ce:87:5e:00:
                    e9:f7:a6:63:67:24:6f:35:d1:ca:60:39:7e:6d:78:
                    7d:19:fc:8f:17:62:3c:42:6c:3b:5b:b3:90:f6:b8:
                    78:8b:3c:90:94:dd:bd:32:ad:62:90:bb:e7:81:a9:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:87:95:22:87:D4:67:7A:17:F4:C3:1B:41:13:01:06:70:42:F9:D8
            X509v3 Authority Key Identifier:
                keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:02:9a:b3:16:e1:71:80:90:4f:c3:85:49:b3:74:49:ee:
         8f:3f:bc:78:05:c4:c5:b1:2f:07:a5:32:92:c8:e1:66:5a:7a:
         4f:9a:7f:68:a1:39:e8:3d:eb:f2:75:70:8c:8a:00:b9:f2:96:
         95:96:e5:c5:8f:71:97:ea:97:84:82:12:9c:b6:02:0c:94:18:
         30:3e:41:27:6a:ed:a9:b2:74:cf:63:07:f9:3e:49:c7:44:df:
         d7:6e:aa:fc:34:34:c5:a1:3a:9b:84:74:80:17:7e:66:58:e2:
         e7:d9:f3:f5:1d:e1:1b:ce:32:57:14:f1:bb:2b:bd:de:1e:63:
         0b:26:72:8d:b3:06:18:7e:7d:79:4b:39:51:a3:cd:13:de:78:
         85:b8:a5:99:62:80:93:bb:f5:0b:4e:8d:2d:0c:eb:59:88:c6:
         28:d8:00:d8:db:87:7f:c7:31:11:a3:27:3c:17:0d:0f:d5:59:
         0b:ab:39:c6:6a:0c:42:dd:bd:1a:51:4a:83:f6:cb:61:dc:55:
         69:12:e0:c2:5b:03:ea:92:d1:52:4a:6c:b6:df:2d:cd:1f:bf:
         29:5a:f0:44:d8:62:ee:a7:8f:2e:a2:e3:9e:7c:ea:5d:16:33:
         fe:7f:f7:97:11:83:06:c1:34:21:95:9e:c6:24:4a:40:a3:a9:
         b8:23:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:25 2025 by rpki-client