This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File:                     qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier:          vW3ev5oMjsDTPibKwSvQkflta/AU2j7r9AT32b6vHfQ=
Subject key identifier:   2A:B9:D1:1B:F1:07:EC:F4:2B:9E:BD:52:AE:7D:D7:B9:81:BA:69:6E
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       0A15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number:          0A06
Signing time:             Thu 18 Dec 2025 19:26:18 +0000
Manifest this update:     Thu 18 Dec 2025 19:26:17 +0000
Manifest next update:     Thu 25 Dec 2025 19:26:17 +0000
Files and hashes:         1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: OiSrtusNKfZ+lW76u4l5EOGve7bJHKCgX1Jy0R5ai74=)
                          2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2581 (0xa15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Dec 18 19:26:17 2025 GMT
            Not After : Dec 25 19:26:17 2025 GMT
        Subject: CN=6944555a-29d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:cd:db:d9:f6:10:81:8a:e7:27:fa:ca:3e:
                    32:c0:23:ce:21:05:29:ae:20:ee:34:be:07:65:77:
                    c2:93:bb:25:7d:e0:ba:cd:07:bd:9b:e9:d9:88:e2:
                    8a:30:96:37:97:32:4f:bf:3d:df:76:1c:38:05:c1:
                    8c:1a:7f:24:41:a1:e3:36:2b:e5:32:4a:59:e5:68:
                    ed:ef:c4:b7:c2:fb:be:69:f1:5b:61:38:03:79:1d:
                    c9:ae:f3:e4:d5:27:8a:8b:a9:f5:da:02:bb:97:d0:
                    b2:c4:09:cf:2a:79:05:1e:67:0c:e9:21:3a:c8:ef:
                    d6:aa:07:d5:59:dc:28:00:05:88:bb:12:aa:07:b3:
                    3e:de:ff:fc:ed:32:46:9f:73:8d:03:cb:6a:3f:f2:
                    c6:a5:60:58:2e:d9:77:62:26:e4:c4:97:26:75:06:
                    15:08:16:51:17:4d:00:93:f6:da:aa:51:a5:4a:dd:
                    c7:e8:75:95:f7:d0:8d:b1:59:65:78:4b:3c:a8:a6:
                    56:e7:e7:db:7a:5b:02:01:ae:1e:82:34:1b:94:1c:
                    1c:f2:75:c2:8e:bf:67:82:16:d5:0b:a4:30:ee:5d:
                    34:4d:c0:98:d8:9d:36:dd:07:4c:db:14:a2:eb:54:
                    78:ff:51:cd:a5:20:39:89:5d:84:e1:fe:01:26:c0:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B9:D1:1B:F1:07:EC:F4:2B:9E:BD:52:AE:7D:D7:B9:81:BA:69:6E
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:c0:71:a8:eb:89:a2:b4:d1:20:cb:d9:2c:0d:61:14:86:
         db:b1:f7:92:69:4c:04:6f:81:f5:8d:31:f3:54:6a:15:1f:a3:
         ea:48:7d:92:ec:58:a9:36:d4:ea:39:2a:b9:19:d2:67:dc:3b:
         20:ba:35:60:49:1d:a0:a0:78:d6:31:99:2c:dd:b8:89:4d:78:
         8d:b9:13:c6:1a:ae:9d:d0:5b:13:80:3f:b7:8d:45:f7:ce:84:
         05:8e:de:55:37:d5:41:8f:e4:5b:26:cd:69:a0:a1:89:fc:19:
         d0:89:56:e8:09:52:ca:2a:e7:d1:46:39:ca:17:54:16:17:77:
         0a:c6:4f:f8:70:c4:eb:5b:8c:84:5a:ae:1a:c2:01:4a:1d:82:
         71:6e:af:4f:8a:ca:e9:0d:84:d4:a5:93:2a:0a:0c:6c:19:0e:
         f2:86:aa:0b:89:77:5e:17:ac:2b:a4:3c:5c:68:dd:61:03:79:
         5b:92:57:12:30:b6:fb:7b:5d:db:46:73:1e:25:5b:ea:e2:85:
         77:dd:67:92:e1:a1:9e:cd:a1:b9:26:66:4a:72:15:5d:2a:76:
         58:be:d0:09:f9:de:ca:45:12:cc:95:a0:83:b9:2c:63:d7:b2:
         7b:96:ff:51:e9:93:4f:5d:5d:d1:c2:89:e7:4b:2b:4c:92:a6:
         f3:2f:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:58:11 2025 by rpki-client