This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
File:                     QVaOgAk79NEF6TJNX4ISRTGsQT8.mft (raw, json)
Hash identifier:          wZXfc1OQhAqxtFPrle+eUVYiFwEzK+kbd3iNxQ0TVKI=
Subject key identifier:   B0:41:C1:7E:95:33:C4:7A:A3:D0:33:07:A9:E4:4D:A6:EA:F1:58:26
Authority key identifier: 41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F
Certificate issuer:       /CN=A91B6A04/serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
Manifest number:          0E
Signing time:             Fri 19 Dec 2025 06:54:36 +0000
Manifest this update:     Fri 19 Dec 2025 06:54:36 +0000
Manifest next update:     Fri 26 Dec 2025 06:54:36 +0000
Files and hashes:         1: QVaOgAk79NEF6TJNX4ISRTGsQT8.crl (hash: aQAa2HfPxnZdqNb32SURjtx2GyDHiYsypTNXbrB+KBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl
                          rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6A04, serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
        Validity
            Not Before: Dec 19 06:54:36 2025 GMT
            Not After : Dec 26 06:54:36 2025 GMT
        Subject: CN=6944f6ac-ce38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:39:60:90:65:e5:f7:bd:53:11:1a:b8:1a:
                    24:e7:36:98:ea:c6:1a:c6:5e:2f:1e:48:67:cf:1f:
                    60:a9:35:26:7a:58:15:98:10:3b:da:28:90:7b:8e:
                    8a:ad:8e:21:01:f1:2d:63:a3:93:1b:d8:fb:f5:17:
                    a3:06:b6:11:c0:f9:b1:52:58:4b:7f:0b:8c:33:42:
                    c8:20:dd:f8:b7:ed:3d:3c:9f:a6:37:59:6c:98:2a:
                    d2:78:18:21:39:4a:42:bc:dc:ee:d7:39:56:65:3b:
                    ba:a3:65:9d:99:5d:6d:64:7a:ff:d8:c1:dc:62:3d:
                    a0:de:22:01:cc:98:c9:12:03:f3:84:76:b5:67:1d:
                    a2:86:38:1d:d9:db:13:70:a9:88:9e:85:96:a0:aa:
                    a3:06:a1:1d:7e:ff:96:ce:bb:d5:7b:76:7d:b4:af:
                    7f:7b:7d:93:dd:01:c1:08:92:e9:fc:e1:54:c6:d0:
                    e8:46:af:95:44:49:d9:21:8d:53:d6:45:63:c5:21:
                    85:e4:0f:e4:d2:8f:60:2c:c6:95:43:2d:68:41:13:
                    8c:77:bc:e4:83:30:e8:76:c1:23:63:11:a1:c2:48:
                    b0:34:19:23:36:42:f7:15:4d:de:f4:49:de:d4:23:
                    56:cb:a0:8a:2b:76:1c:91:74:f6:d1:03:5e:0e:62:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:C1:7E:95:33:C4:7A:A3:D0:33:07:A9:E4:4D:A6:EA:F1:58:26
            X509v3 Authority Key Identifier:
                keyid:41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:0b:58:f2:d3:5d:59:98:52:2b:a0:22:31:d8:10:fa:73:
         55:e2:37:ba:8f:8e:e1:52:5e:16:82:8f:89:4f:a8:7e:c5:d3:
         2d:30:08:a4:2e:82:b1:bf:1a:cd:c2:a4:8c:4e:1f:73:9e:0c:
         3e:08:44:c0:a8:26:38:03:76:60:ad:f2:1f:7e:e2:1b:e7:70:
         a6:32:ca:f0:cc:dd:04:b3:fd:93:5b:28:ee:e2:39:95:ff:92:
         74:bf:7c:7e:f3:af:f8:18:fc:ab:3d:36:4e:ed:9e:c3:e2:0a:
         e4:31:1b:a6:2c:97:47:20:26:e4:89:dc:04:79:d4:5f:30:94:
         5a:42:d5:bb:0d:50:7c:f2:3b:99:93:30:ac:9d:ce:f5:7b:b0:
         5c:66:f0:a7:5b:f2:d5:46:d4:40:3b:66:b7:a7:16:61:20:4c:
         de:54:a7:24:7d:ce:33:6d:fa:f6:93:74:25:d0:f8:49:7f:84:
         52:6d:25:76:52:e2:77:d4:09:48:77:80:09:af:7b:1f:0c:d8:
         c9:32:f5:db:88:d6:c9:de:74:d1:bf:52:6c:18:20:31:b9:1b:
         e5:6b:90:cc:ae:5c:81:9e:6a:d8:91:96:5e:03:4a:48:24:bf:
         73:85:53:2e:3e:d3:c1:88:19:36:bd:7f:e4:c4:40:1e:28:ac:
         6c:fb:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:42:37 2025 by rpki-client