This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File:                     qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier:          N0g/1Pwvfl/ghjPQXen4dAhf1/RvsGaOoO6a1nFX5sQ=
Subject key identifier:   5C:5A:8A:6B:35:7D:C6:9E:81:FC:F2:33:D8:BB:CA:EE:A4:9F:D6:56
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer:       /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number:          0821
Signing time:             Fri 26 Dec 2025 20:13:31 +0000
Manifest this update:     Fri 26 Dec 2025 20:13:31 +0000
Manifest next update:     Fri 02 Jan 2026 20:13:31 +0000
Files and hashes:         1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: 90K0H/x+tcanV5KmGyFQNK2Pm4K+g1ExyQwtyZicuRw=)
                          2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: PD6vxM8HPQ1TRKqqISE6gvRSXeLWouSMokRSjCqVFPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
                          rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 20:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FADC, serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
        Validity
            Not Before: Dec 26 20:13:31 2025 GMT
            Not After : Jan  2 20:13:31 2026 GMT
        Subject: CN=694eec6b-ebc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:fb:c9:5e:0c:5f:7c:81:02:bf:5f:56:73:
                    3c:e9:ab:99:ac:03:8a:9e:bd:e3:b9:69:a9:42:c6:
                    11:03:53:40:ec:41:dd:14:b4:5c:e7:60:e9:26:b7:
                    7e:ef:11:40:91:3a:48:3f:fa:82:39:e8:9b:32:7c:
                    a8:26:b5:26:87:55:05:ea:76:4c:cd:99:cb:b9:5d:
                    be:aa:4c:c7:9a:6c:20:62:f8:15:c8:c9:b0:b5:ed:
                    58:c2:b2:03:03:d6:f1:b2:fc:3b:da:81:5b:c3:bb:
                    91:a9:b0:4a:b6:32:6f:2f:44:64:d2:d7:26:2d:87:
                    62:9e:6d:cd:31:13:e0:f7:50:97:0a:da:8f:24:6a:
                    f0:76:3e:e7:0e:5b:b1:f5:42:3b:27:50:20:18:af:
                    00:59:1f:18:83:eb:95:ad:1a:31:9c:d4:10:a6:f6:
                    3d:3a:e6:23:1e:51:f8:a0:85:fc:01:bd:9e:88:34:
                    c0:67:82:73:8c:8c:c7:1a:24:c1:a0:6d:61:cc:8f:
                    10:67:1b:8b:a3:ea:57:d1:00:c5:d8:a4:47:29:6e:
                    9f:15:f4:8c:40:bb:90:1e:7f:df:f0:a4:27:0a:5a:
                    aa:a5:0b:7c:47:c0:20:dc:a8:aa:72:d6:1a:69:df:
                    0b:cf:3a:83:ab:ca:83:ed:b4:db:a0:47:31:a4:d6:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:8A:6B:35:7D:C6:9E:81:FC:F2:33:D8:BB:CA:EE:A4:9F:D6:56
            X509v3 Authority Key Identifier:
                keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:61:19:ba:06:f5:cc:ff:b3:a7:a9:80:a9:cc:10:ea:4a:
         b4:9a:5b:80:d2:a7:17:1b:e2:3c:9a:c9:54:4f:b3:f9:6c:9d:
         34:1e:ec:9b:db:a1:88:71:2c:94:46:0c:71:e9:80:0d:d7:8f:
         70:6e:48:99:cc:dd:a7:d9:04:cd:17:57:e7:62:a7:ad:77:e4:
         ed:93:9f:d0:dc:09:93:c8:5d:18:72:6a:eb:a5:fc:99:04:66:
         82:0f:45:ba:b4:07:06:9d:80:2f:39:59:49:39:7f:47:5f:61:
         49:af:2d:70:8f:c1:3d:db:95:a0:11:04:22:8e:c8:a0:b4:e2:
         da:85:cf:5d:3a:a1:77:0e:3a:79:5d:3b:7f:39:52:53:09:1b:
         93:ca:40:52:9a:a8:c0:14:82:d8:8c:87:c8:fa:f7:d8:89:a2:
         8c:d9:34:54:50:b3:63:6f:0e:9e:e3:c2:b2:b0:2f:97:c2:4f:
         f1:bc:52:20:84:46:63:d5:a4:7c:f9:ee:3a:0e:81:d5:00:c2:
         39:45:2a:63:b7:d2:84:3c:ca:2a:e7:10:68:16:09:b3:ec:da:
         7c:7b:d6:26:32:9b:5e:8d:8e:c7:47:d0:73:26:99:2e:da:c1:
         f1:29:ce:69:00:43:36:c2:7b:c7:41:9c:12:a7:52:58:88:6e:
         b2:6e:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 01:04:08 2025 by rpki-client