This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File:                     qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier:          a16F4m+yBYb9A5g6SDGq6jD67V8Q26NYHI6mq7CmF2g=
Subject key identifier:   D8:BA:56:BB:09:18:6D:45:3C:0B:08:24:2C:12:9B:4F:9B:0A:BA:80
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer:       /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number:          0199
Signing time:             Thu 25 Dec 2025 02:33:35 +0000
Manifest this update:     Thu 25 Dec 2025 02:33:34 +0000
Manifest next update:     Thu 01 Jan 2026 02:33:34 +0000
Files and hashes:         1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: mkZf3BpbJpSyr/jTKRM1LDvQ8oA+o4m+S38xVCunJmM=)
                          2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
                          rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 02:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
        Validity
            Not Before: Dec 25 02:33:34 2025 GMT
            Not After : Jan  1 02:33:34 2026 GMT
        Subject: CN=694ca27e-0039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:90:30:6b:3e:0e:b2:7b:41:fa:85:5c:aa:
                    23:a2:ac:8b:73:84:be:21:4d:87:22:a7:20:96:7c:
                    5f:d9:ed:cd:31:0b:98:c8:db:c0:51:9c:be:a7:ec:
                    6c:7f:51:a3:ee:1e:79:9b:b0:66:34:2a:9c:e0:b7:
                    7b:53:c8:e3:b2:29:c9:f5:0f:c9:d4:e3:fe:74:38:
                    ab:43:f5:85:33:85:33:76:94:2d:09:3f:1b:17:12:
                    23:32:d3:ea:20:0a:d6:8a:5b:c5:25:e0:57:d5:ff:
                    b4:ff:ac:8a:8f:b1:87:9c:b3:c9:b9:b5:15:b2:08:
                    ef:4d:f0:1e:37:aa:7a:40:b9:8f:c5:3c:97:9c:06:
                    c3:69:3c:1e:b3:8d:45:b5:a0:fa:06:7f:42:a5:2e:
                    40:a4:34:ac:e8:7b:42:0d:1b:ce:95:73:ba:6a:cb:
                    76:ed:f9:ce:b7:e3:86:e7:6b:d4:6c:75:5b:9d:09:
                    15:8e:d6:07:dc:54:a5:d7:36:dd:f2:1c:03:86:06:
                    b1:b4:f7:80:b8:0b:cd:99:17:86:89:62:36:a5:e9:
                    0a:76:33:07:6e:58:c4:dd:0e:ad:6b:82:f7:ea:d4:
                    64:45:8f:2e:03:c2:6e:39:bd:d2:21:4e:26:14:c7:
                    f8:26:98:f1:ef:17:5c:b7:19:10:00:32:f3:79:f6:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BA:56:BB:09:18:6D:45:3C:0B:08:24:2C:12:9B:4F:9B:0A:BA:80
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:c9:f3:35:9b:68:86:ea:db:56:08:e4:6d:20:ce:7b:f9:
         b3:c2:03:86:89:28:a4:a8:06:16:61:d4:3f:b1:0e:70:41:a2:
         92:8f:05:bc:45:51:94:7a:66:bf:45:53:45:68:89:aa:7e:0d:
         71:83:93:d6:82:7c:03:ab:ae:6a:3b:c1:47:dc:f0:bc:1d:b9:
         72:78:65:c3:5c:95:78:f4:d4:fb:d5:b7:29:44:1b:76:3e:1c:
         c7:e4:9d:e3:07:96:62:c7:2d:74:77:fc:20:d2:18:41:d8:20:
         09:af:3f:4a:e2:07:d7:fe:af:94:68:f8:1d:cf:99:bc:6b:5b:
         cd:c3:7b:e6:52:15:cb:b9:91:0f:11:b3:a1:92:70:d1:0f:d3:
         85:9b:e6:87:fb:fb:65:63:6d:11:37:70:10:f0:42:e1:29:ec:
         0d:34:89:a4:4e:82:11:08:3b:3f:75:ce:af:01:9d:d8:a8:84:
         1c:c5:98:cf:49:32:0a:7e:b3:81:f7:e8:6e:18:ff:a1:62:55:
         fe:26:6c:f2:59:c1:8c:4b:94:eb:6c:4d:11:b4:3d:61:fc:c3:
         74:b0:0c:99:04:af:24:3f:6f:f7:61:fd:cc:85:5c:e0:e0:99:
         7e:61:e9:68:db:dc:ec:f0:9b:ea:23:dc:9c:24:b4:67:90:85:
         c0:97:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 04:08:20 2025 by rpki-client