This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          IQGodNluMbrumD5olzr/fX3XD5xwiENE64qvbkJ/tko=
Subject key identifier:   C5:F8:3D:2D:30:C7:CD:6F:78:87:7E:00:93:0F:89:77:41:D3:83:91
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          E3
Signing time:             Fri 19 Dec 2025 04:36:37 +0000
Manifest this update:     Fri 19 Dec 2025 04:36:36 +0000
Manifest next update:     Fri 26 Dec 2025 04:36:36 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: XUN5CsYZAea/WeAtdLXtdwYnhDlmagPEqm7p2Lxen0Y=)
                          2: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: evldymlGQQ93kubL9WmbF3u0cvNdxXaSZqcfpd5v03k=)
                          3: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XDvsXiWUoJu9EmBSYtQ7IbkY7zSchFzyP33LQZcvmOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Dec 19 04:36:36 2025 GMT
            Not After : Dec 26 04:36:36 2025 GMT
        Subject: CN=6944d655-3e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:2f:a2:97:55:58:ce:00:1a:1c:db:bc:30:
                    18:f2:58:b1:68:c7:b2:c1:d3:09:19:36:28:f6:c9:
                    85:b5:e7:91:8a:ce:aa:d0:15:a1:69:47:04:66:65:
                    08:a3:0c:59:57:63:a6:53:3e:73:c9:56:3a:62:a9:
                    33:9e:6f:71:fe:1e:7e:b1:8d:53:af:61:b7:02:64:
                    53:56:3f:61:6f:92:9d:a5:5f:6e:b5:e2:60:58:63:
                    ef:be:f5:dd:e9:21:18:7a:8d:1b:6c:9f:8d:86:24:
                    7e:3d:8e:50:e5:46:85:d8:d2:14:19:3c:2b:44:0b:
                    3f:c3:d4:d8:2b:df:35:26:80:ef:cf:b2:27:d1:52:
                    bb:52:98:dd:d4:95:43:56:d4:a2:c7:3e:fb:69:4a:
                    49:73:f9:18:d2:dc:40:04:01:02:cd:85:ad:aa:ed:
                    98:aa:67:78:7b:22:c4:64:be:81:f9:fd:73:c1:07:
                    7c:5e:67:b4:ec:d2:09:e5:27:fb:c6:51:70:89:cb:
                    4a:79:ca:8c:d4:01:ee:4d:7d:87:0d:c2:2a:dd:dd:
                    f4:ab:72:d8:b1:9b:5e:e9:ec:c2:4a:04:6a:fe:68:
                    f1:a1:ec:ae:29:98:d4:5c:a4:01:7d:23:c9:37:2e:
                    19:88:12:55:85:3b:da:a8:4a:4a:28:25:9d:0d:88:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F8:3D:2D:30:C7:CD:6F:78:87:7E:00:93:0F:89:77:41:D3:83:91
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:50:ff:50:c0:91:f0:37:90:74:28:85:82:b9:f7:1c:40:fe:
         8a:dc:be:cd:24:c8:20:87:f4:b3:3a:86:d4:ad:e6:3d:c5:14:
         f8:63:54:49:12:7d:71:8c:c3:ea:89:7b:cd:62:2a:20:7f:45:
         be:b3:82:9f:cf:f1:2a:c9:8a:f2:0d:c6:fd:e5:a4:10:19:bd:
         2e:ee:cf:e4:bd:4e:08:ec:25:47:4c:14:25:57:e9:33:e0:95:
         a3:c3:09:bf:17:e3:fc:3b:b2:8b:6a:5a:a1:87:33:a7:68:9e:
         40:90:66:f5:6b:ac:cf:bd:92:1c:ea:2a:ae:a6:7f:8c:95:98:
         e1:4f:95:bf:dd:e9:80:2b:d9:d9:3d:03:f6:7e:e9:21:d3:cb:
         2b:2b:1f:c4:d4:e0:bf:e0:72:5b:2d:61:d7:bf:76:5b:03:a3:
         b4:64:0d:ca:a7:05:fe:8c:a2:72:46:4d:03:aa:34:29:4c:dd:
         af:9e:7c:bb:8a:41:f3:ac:b3:18:46:e5:cc:2a:a0:6e:d9:c5:
         66:1d:ba:e4:12:cb:2a:ad:d8:c3:f5:8d:43:93:47:fd:5f:c2:
         fe:2a:2e:4d:40:f8:2f:3c:d8:31:83:c3:ba:0a:9d:1c:c7:d5:
         21:e4:46:5d:88:c2:af:60:9c:b7:d6:6e:12:82:06:f4:c2:61:
         f8:67:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:36:02 2025 by rpki-client