This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File:                     QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier:          jJ3RXiseL2qbShhggiKJveQ9CcDAY5Pt7ovVqJPYHqM=
Subject key identifier:   63:CF:41:07:B5:F1:19:AB:D4:28:AA:70:15:0F:19:4A:80:CE:E2:69
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer:       /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial:       0417
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number:          0412
Signing time:             Thu 18 Dec 2025 23:42:22 +0000
Manifest this update:     Thu 18 Dec 2025 23:42:22 +0000
Manifest next update:     Thu 25 Dec 2025 23:42:22 +0000
Files and hashes:         1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: fd1HtBg1pMJ8NJkniKNyuHghzfcrTJmqFRgzXswjtFo=)
                          2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
        Validity
            Not Before: Dec 18 23:42:22 2025 GMT
            Not After : Dec 25 23:42:22 2025 GMT
        Subject: CN=6944915e-d52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:fc:00:5f:3a:c2:27:ff:46:c2:f9:11:ce:
                    c8:2a:e3:a1:09:0f:df:df:16:8a:1b:dd:31:83:58:
                    ea:a9:93:1e:2c:6b:54:bd:8c:1c:4f:94:90:21:c9:
                    16:53:06:ff:a1:c0:26:a3:a6:4e:17:80:d0:d8:22:
                    e3:97:9f:e0:00:ff:0f:70:fd:25:67:9b:13:7a:13:
                    eb:c5:1e:bc:3f:d1:d4:b7:75:70:39:a6:3b:bf:31:
                    a1:cc:56:2b:a9:71:85:50:82:d0:ee:a9:97:33:b8:
                    4c:04:60:82:22:78:15:3f:ec:66:52:42:26:3a:aa:
                    58:dd:9a:db:f1:c9:cc:be:4b:ba:e6:cf:0a:fa:45:
                    81:dc:15:2e:16:e1:18:61:84:c1:28:70:a4:54:2e:
                    b6:a7:4e:8c:2b:60:f3:7a:e4:0a:25:15:bb:0d:77:
                    82:87:6f:23:ef:13:b6:7f:bc:01:05:2d:a6:66:64:
                    67:60:d8:bc:e0:85:d9:a0:d9:69:24:fb:43:63:d4:
                    c9:98:8d:97:68:86:03:f2:c8:d0:26:58:1b:fa:4f:
                    20:2e:35:df:28:a7:36:ea:9b:92:d2:29:86:3f:83:
                    c3:28:6a:3d:6c:51:0a:64:3f:3b:01:ea:a1:78:0c:
                    d2:d6:d0:23:5a:34:11:25:d0:d2:c5:d2:a3:98:83:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CF:41:07:B5:F1:19:AB:D4:28:AA:70:15:0F:19:4A:80:CE:E2:69
            X509v3 Authority Key Identifier:
                keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:7e:da:77:1f:ca:3c:8d:7f:e1:08:e0:9a:e4:0b:e2:54:
         34:29:c0:70:b7:e7:86:39:3f:2e:00:03:26:d6:13:02:66:33:
         d4:a3:ae:ec:72:8e:da:ce:e4:04:aa:38:13:ee:24:7f:36:72:
         92:a9:30:c1:01:2a:fd:57:ae:58:6f:7e:9a:94:4a:3e:f7:f2:
         30:a7:ae:da:cb:0f:78:40:f9:98:fe:0f:32:84:4d:83:94:05:
         fd:57:2c:6e:8b:86:60:b9:40:7c:af:c5:5a:de:b0:c0:66:3b:
         fe:9f:19:9e:3f:d0:96:3d:2b:74:41:f6:45:68:84:7a:33:8f:
         89:dc:fc:b1:7f:28:7e:1b:e8:4f:2f:85:e3:89:1b:52:09:fc:
         ca:62:74:2f:da:4b:d5:bb:6a:d6:78:02:ff:58:ff:90:2a:41:
         5b:ea:64:34:4b:2d:60:a0:22:fa:f3:7f:47:70:5a:66:9a:15:
         60:98:94:39:91:d0:8e:15:6c:4a:e9:4a:29:55:6c:27:69:8f:
         4f:4f:ba:aa:20:cb:81:32:94:8c:89:a9:d0:0c:4a:e6:07:98:
         e8:a8:cd:9e:54:5b:f9:03:60:da:0e:cb:e7:7f:e0:ca:21:33:
         8e:bf:54:fc:f3:c5:82:fb:57:22:6e:63:60:b2:27:00:b0:fb:
         1e:af:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:12 2025 by rpki-client