This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File:                     QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier:          BBiQcCYlyxsZj3UTSs1wHjC4o439DaWwpGB6KCIpW2I=
Subject key identifier:   05:00:70:4E:D1:4D:65:83:72:82:F6:7F:2A:50:5D:48:63:90:AD:67
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer:       /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number:          0290
Signing time:             Fri 19 Dec 2025 00:48:41 +0000
Manifest this update:     Fri 19 Dec 2025 00:48:40 +0000
Manifest next update:     Fri 26 Dec 2025 00:48:40 +0000
Files and hashes:         1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: ofIk63Q69AqGi8yBlk4BT5jfwEs5WqpweXF+wpvMl2Y=)
                          2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: rj4BSUozmBkphVBEoUkEwSqqxoFitssfBqyMGi95Tf8=)
                          3: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=)
                          4: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
        Validity
            Not Before: Dec 19 00:48:40 2025 GMT
            Not After : Dec 26 00:48:40 2025 GMT
        Subject: CN=6944a0e9-3935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:bc:00:68:3c:b2:a9:cf:b3:cb:d8:a9:a3:
                    bb:81:65:5b:4a:1a:30:48:3d:d2:90:97:02:05:c5:
                    4d:b5:f9:21:75:49:c3:3d:4e:4b:2a:f6:f2:7b:d9:
                    84:69:17:d9:b1:7d:00:8c:5c:45:1e:49:6a:e4:55:
                    33:50:5b:4f:db:a9:c2:9c:83:03:61:ec:aa:73:96:
                    6f:d1:e4:48:fa:3f:12:56:7f:f6:25:0a:03:2e:be:
                    f9:60:f5:b0:06:48:2b:59:15:98:e3:48:2b:e0:fa:
                    46:de:f6:cf:a9:dc:77:74:ad:ff:a2:b8:96:b1:c1:
                    4a:ef:6e:58:72:3d:f7:b0:19:6d:ad:48:d8:69:06:
                    de:4b:4e:e6:f8:fd:6a:f4:79:e4:63:81:e2:d9:a5:
                    5d:95:85:6e:cf:ef:7a:cc:95:c7:da:bb:49:63:a6:
                    24:ef:af:5f:7b:24:0a:a9:ab:bd:d8:69:6e:7e:84:
                    49:a0:95:e0:90:67:df:24:09:b7:9b:4b:20:9f:0e:
                    53:e7:c2:a3:b6:76:63:e4:88:b6:31:4f:85:e3:fb:
                    74:e2:05:13:27:dc:3e:44:96:9d:fa:12:d9:b7:85:
                    ed:fb:18:69:9b:49:d0:ed:fc:d2:71:04:fc:b0:bf:
                    0f:9f:e3:8f:60:85:c8:d9:02:1f:2b:27:4a:d7:76:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:00:70:4E:D1:4D:65:83:72:82:F6:7F:2A:50:5D:48:63:90:AD:67
            X509v3 Authority Key Identifier:
                keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:78:95:68:f2:31:49:5d:ae:83:09:fe:de:34:89:a8:83:cb:
         9e:f9:bf:ea:49:6a:7c:af:be:04:8d:36:27:d5:74:9e:dd:f0:
         b9:5d:21:69:c2:c7:6f:8d:90:55:fb:9c:6e:87:7c:49:82:0b:
         02:f9:83:e3:42:88:e5:9f:8d:6b:bf:db:36:40:dc:ab:ff:3a:
         d8:f7:db:06:92:29:4f:2d:f5:e3:5d:63:7d:13:9a:38:16:ad:
         a9:f4:00:0f:fc:a4:71:3a:e8:96:15:10:11:4d:a1:9e:b5:52:
         66:dd:96:6a:f8:92:10:9c:0d:69:db:31:13:b9:7d:c8:ba:ef:
         d6:d9:e3:21:f2:dc:8c:ca:8d:a5:80:8e:95:13:d2:49:cc:a3:
         8d:e8:3e:c9:ce:65:b5:4d:56:5a:b0:2f:78:d8:f9:40:15:06:
         eb:60:41:51:5d:91:98:12:19:03:81:c9:42:99:c0:d0:58:89:
         81:b6:ed:92:01:2c:f6:ca:45:0c:cf:6b:5f:f5:ee:b1:84:83:
         75:a5:4a:39:d4:23:c4:12:b0:57:c3:a5:55:c3:3b:0d:31:e3:
         79:84:07:de:2d:6e:20:ee:dd:96:2e:c2:0d:bf:48:ca:23:d7:
         39:ef:ec:1f:4f:64:af:08:d6:ed:ad:06:9c:9e:22:fa:c1:50:
         bc:73:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:12 2025 by rpki-client