This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
File:                     qEiFS7_Ou01JgBuyrj2EQIscPSc.mft (raw, json)
Hash identifier:          wppPpCGm8uwBkkK0PZoey4rdWK5sGOfgL+eAI8KxcQc=
Subject key identifier:   6B:A1:97:CC:54:C6:26:3B:DB:8F:49:30:E3:E2:0F:67:CD:5C:41:02
Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
Certificate issuer:       /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
Manifest number:          30
Signing time:             Sat 27 Dec 2025 06:24:00 +0000
Manifest this update:     Sat 27 Dec 2025 06:24:00 +0000
Manifest next update:     Sat 03 Jan 2026 06:24:00 +0000
Files and hashes:         1: qEiFS7_Ou01JgBuyrj2EQIscPSc.crl (hash: 0edR6knGI9mYEc125mDiM1xN5HOvKkpt2AlfPhT1KeY=)
                          2: ABD937089D6511F0A6A3E74BC4F9AE02.roa (hash: Jkbb7HkAq8iDWnzG+rvThhFx1fDkJFLk00mNMZ+k2pU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
                          rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 06:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
        Validity
            Not Before: Dec 27 06:24:00 2025 GMT
            Not After : Jan  3 06:24:00 2026 GMT
        Subject: CN=694f7b80-5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c6:5a:10:7f:d6:73:11:4a:ed:94:eb:aa:82:
                    96:71:6b:94:76:86:e9:04:c6:4b:5f:ab:aa:82:3f:
                    ab:2b:83:e2:aa:7a:c4:20:6e:03:0a:b9:23:b7:c8:
                    41:c7:39:a9:15:cb:e6:4b:34:6e:a0:cf:be:9e:e5:
                    85:a8:d2:2a:7b:7e:2c:ef:ca:7f:19:88:9e:27:d8:
                    e1:68:e3:bc:36:cc:7a:ff:18:20:a9:fb:5c:b8:dd:
                    a6:d1:95:28:8c:e2:7f:53:7c:11:09:42:37:df:9a:
                    92:76:05:8f:82:de:2f:2c:01:a3:fe:03:12:34:ee:
                    c2:eb:fe:8f:59:bd:99:e0:7d:97:49:d4:1e:27:a0:
                    a8:e2:52:9f:25:78:71:5d:c0:40:5b:af:f7:08:93:
                    e3:fb:df:15:45:eb:dd:21:32:82:61:05:e6:53:2c:
                    54:27:85:41:df:f2:18:1c:6d:06:b5:1a:9a:d4:72:
                    46:7e:94:65:95:03:96:60:8a:23:e1:f4:a9:e6:54:
                    37:68:ad:4a:01:b3:8a:a7:0a:6b:33:73:5f:c1:4b:
                    79:fa:4d:2e:94:ea:a0:40:96:ce:28:2a:61:8f:60:
                    86:c3:5a:6c:45:4d:42:f4:33:23:98:11:ef:a2:7f:
                    fe:0c:9b:c9:c6:66:48:e7:e4:6f:5d:e4:20:28:82:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:97:CC:54:C6:26:3B:DB:8F:49:30:E3:E2:0F:67:CD:5C:41:02
            X509v3 Authority Key Identifier:
                keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:21:b3:36:39:43:d2:df:c4:8a:f3:13:ae:0d:a9:01:45:
         c9:2c:7d:a7:6e:23:01:a6:69:61:09:d4:cb:c8:33:f7:b2:f9:
         6f:d3:a4:de:0a:74:d8:96:e7:2b:75:b2:98:fc:d3:89:ee:49:
         dc:96:53:43:34:4f:e1:11:d9:ec:db:e7:a2:26:c9:6d:f2:40:
         ef:ad:53:76:f4:af:65:7a:ee:85:c8:64:5e:41:36:08:9d:e3:
         14:a0:d6:42:f2:7e:ac:b6:de:99:2f:b8:8b:4d:9d:55:c5:02:
         53:2c:fa:6b:95:d9:38:ce:32:1d:67:89:be:64:65:d9:38:9a:
         ec:22:7f:ed:71:ac:f5:e5:d9:f2:5b:4a:89:cd:cc:9f:23:c6:
         c7:5d:af:02:08:37:61:08:87:6a:04:10:84:b1:35:e3:f8:ce:
         c7:92:cf:45:c9:e0:05:3b:fa:ef:20:7d:69:58:9c:78:b8:8a:
         b9:63:86:6d:a3:e0:9c:20:72:6b:32:9e:a1:4d:64:3a:6a:4e:
         db:24:f1:8e:c7:68:58:4b:a0:c5:74:35:70:8d:df:65:eb:67:
         5e:f1:8a:0b:42:a6:84:6c:90:6b:f5:f9:c6:43:a5:77:83:f9:
         aa:dd:d0:00:37:e9:ab:c9:aa:28:fa:d5:3a:60:33:87:cd:2c:
         e2:09:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 19:13:36 2025 by rpki-client