This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File:                     QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier:          o6jdGtvl9bLkqJRdVwteWpg7nbZntRSDq9nGKZzE7pY=
Subject key identifier:   02:41:22:6A:BA:BF:82:72:EA:05:0D:E4:48:7C:34:92:F5:9F:68:5C
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer:       /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number:          082D
Signing time:             Wed 31 Dec 2025 20:27:54 +0000
Manifest this update:     Wed 31 Dec 2025 20:27:54 +0000
Manifest next update:     Wed 07 Jan 2026 20:27:54 +0000
Files and hashes:         1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: U2ZgyWr9mPKxR1uFge164/OD+ZhrBnSKQy2I43aKCJg=)
                          2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: WFvsYGxGbZsMpR4I2mqKInKvSm7CH4Awmh5yfhBmFLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
                          rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 20:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
        Validity
            Not Before: Dec 31 20:27:54 2025 GMT
            Not After : Jan  7 20:27:54 2026 GMT
        Subject: CN=6955874a-cd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:19:60:9c:d5:7e:d0:cc:8e:13:44:23:ce:
                    9b:fb:12:1e:1a:9e:e4:bb:96:e6:34:09:c2:49:7d:
                    0b:bb:64:5c:75:aa:e8:3c:f5:31:ff:77:6e:3e:f0:
                    f5:0e:c6:17:f2:61:56:c9:22:fa:a9:94:74:db:4f:
                    93:1d:90:09:91:b7:8d:2f:6f:19:fb:76:cf:9d:57:
                    31:51:21:21:02:8a:7a:12:3e:d4:94:3e:ad:35:98:
                    d0:b9:f2:00:ee:bb:24:8b:fe:a5:bf:60:ed:01:9f:
                    e3:b9:91:3f:88:46:21:7f:53:6f:6b:d4:67:a0:47:
                    f7:0d:c7:cf:48:bf:45:11:71:c1:05:ee:f9:bf:c3:
                    64:f0:66:47:78:a2:02:58:2c:82:1c:23:c2:67:56:
                    4a:30:1d:9f:eb:1c:bc:2b:a1:c2:ca:32:d1:c0:43:
                    28:24:ec:19:35:37:64:e3:6c:d9:62:2d:69:4e:ab:
                    97:51:3f:3c:39:54:24:98:4b:bb:00:87:5b:97:8b:
                    58:37:c2:3e:1b:8f:d3:21:aa:61:8f:bc:47:98:c8:
                    42:f6:c7:29:cb:b4:91:65:25:4a:96:01:a3:61:a8:
                    da:4a:6e:65:d6:52:cc:34:b6:06:01:ea:51:2b:09:
                    89:37:e7:f5:06:17:71:4b:27:d7:1e:f7:24:c1:f1:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:22:6A:BA:BF:82:72:EA:05:0D:E4:48:7C:34:92:F5:9F:68:5C
            X509v3 Authority Key Identifier:
                keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:09:68:70:d4:25:5c:94:cc:55:85:bf:8a:05:c5:26:b3:34:
         e2:60:a4:f5:ab:7c:be:3c:3d:09:44:b5:96:90:db:ab:c4:0e:
         ac:68:5f:6c:31:0a:47:91:51:c6:dc:8a:2a:df:f4:3d:92:92:
         af:9d:9b:f6:e4:d1:6b:be:c4:91:91:a8:99:45:c4:1d:65:ed:
         fe:3b:cf:9a:54:01:d5:20:d5:b4:ef:82:ad:cf:b1:91:01:5f:
         a5:e6:f0:ea:19:07:e0:3f:ea:39:9a:bc:9e:e3:a1:a7:5f:be:
         8e:fb:b2:6d:f4:07:ab:bc:34:ec:26:32:7a:83:49:6c:d6:8e:
         73:f5:42:50:a6:10:35:3c:25:71:02:c3:d8:a1:64:ea:7d:df:
         3b:b8:5f:2d:c6:b5:93:f3:e8:a5:a5:84:2e:dc:a3:71:12:ed:
         95:61:50:e3:87:b7:85:a2:78:90:63:12:33:8d:17:1e:f5:74:
         a8:eb:9b:5c:3a:ef:69:c4:4a:cc:83:fd:28:19:7f:9d:36:12:
         e7:44:ca:e9:61:a6:34:58:f0:c8:b0:ae:70:4c:fb:0e:aa:d2:
         d1:d2:0f:5a:ad:59:ec:e1:b3:28:73:3b:27:c5:da:40:41:30:
         9e:d0:62:a8:59:39:35:dd:e7:f5:1b:1d:1d:49:53:7a:77:f6:
         14:25:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:31:08 2026 by rpki-client