This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File:                     q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier:          WiF1Y5pP4ddHvhVkxQnl+VYPu+iHJKNQytMVAe8Nq0I=
Subject key identifier:   6E:A5:7B:A5:8E:AC:CB:20:F7:52:F6:B5:C9:51:8B:90:94:82:70:F6
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       094E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number:          093F
Signing time:             Wed 31 Dec 2025 19:50:55 +0000
Manifest this update:     Wed 31 Dec 2025 19:50:55 +0000
Manifest next update:     Wed 07 Jan 2026 19:50:55 +0000
Files and hashes:         1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: mm60bIMFPR/h8LMtUCtkNcC60YdfUorAPkXuBy5jU64=)
                          2: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: WYE1oD8S3ftmPZ9P42MC6m1geSKXvRB8dw3HalDWvGA=)
                          3: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: YwnEBUIIwCJtRBxz+rjLHt3w237awmJC1uWnaTU6Q3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 19:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382 (0x94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Dec 31 19:50:55 2025 GMT
            Not After : Jan  7 19:50:55 2026 GMT
        Subject: CN=69557e9f-45ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:de:6d:b6:fc:10:ae:31:dc:7c:c2:d2:4b:
                    77:69:0f:9b:1e:3d:d3:2e:32:d3:7a:7c:55:1c:45:
                    68:76:68:3e:09:c5:a9:b2:9c:26:54:e0:4e:c9:81:
                    95:40:ad:07:9f:6c:1a:4a:b2:1f:e3:7f:0c:96:89:
                    fc:f0:92:00:67:81:40:4c:8a:e8:df:39:d4:10:e3:
                    d7:d5:41:9d:91:27:43:52:d7:14:09:af:ea:6d:18:
                    5e:a9:2d:ba:99:7f:b8:65:26:9a:6e:a9:f7:f0:9c:
                    02:38:ea:af:06:2a:b6:b8:40:04:8e:af:e4:64:dd:
                    35:56:71:73:6a:85:80:ee:11:01:48:25:d3:09:44:
                    a0:a5:f1:02:46:b8:cc:31:b0:8c:fb:06:b8:de:5c:
                    7a:64:3c:1c:f1:60:af:26:3c:0e:10:2d:82:2f:b3:
                    05:4d:62:75:ee:f3:1d:f4:f8:46:f6:15:3b:1d:60:
                    16:e9:4d:df:4c:0d:d4:5a:13:15:4b:96:75:20:71:
                    2d:00:03:e5:39:0c:be:70:2b:43:f5:94:c0:1e:0e:
                    5c:43:76:5c:99:d6:0b:47:3b:e3:ca:62:08:88:32:
                    59:7b:f2:ee:c3:66:23:e2:02:18:88:4d:37:5e:19:
                    24:50:72:5b:fd:de:14:bc:91:3e:26:63:af:a7:0c:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:7B:A5:8E:AC:CB:20:F7:52:F6:B5:C9:51:8B:90:94:82:70:F6
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:7f:d0:b0:1c:36:f2:ae:bf:5b:83:9b:b4:73:5c:9a:95:
         95:42:ea:89:e9:ff:ea:ce:70:5a:70:5c:c7:1e:eb:19:59:91:
         4f:f5:f0:2e:d6:30:70:42:24:34:5a:a4:44:6a:df:3a:fa:f1:
         33:24:b7:40:6f:f2:d6:2d:1e:7b:51:61:ff:64:55:14:92:49:
         7d:70:85:6c:33:94:bb:d5:a7:13:57:e9:95:7a:a9:e3:d9:b4:
         50:35:c1:d2:c0:7f:d1:ce:50:4b:c9:da:e1:10:00:37:0f:13:
         a5:96:c1:83:d3:95:61:41:c8:4a:66:d2:ef:91:07:07:87:f8:
         d0:75:39:a9:7f:0f:7f:81:e1:e8:ca:66:cf:de:8e:10:77:57:
         f0:db:1d:e2:67:4a:a6:98:5e:78:a8:19:84:dc:2e:7a:a6:dd:
         c9:d4:a3:b6:80:a1:ad:3d:76:59:50:d5:a4:a9:08:ca:f1:60:
         ec:9d:2c:87:d6:c8:a1:0a:22:5c:db:3f:87:6a:e6:e6:92:6b:
         b3:4f:8d:d1:d5:af:ec:e3:d1:37:d2:ef:b8:16:3d:6f:c4:ea:
         2d:43:af:7b:aa:ba:c8:16:01:c2:ba:62:47:88:bc:96:cb:c6:
         21:38:c4:56:ed:ec:ac:bc:b4:f8:09:16:53:4a:97:10:a5:e3:
         55:ed:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:37:12 2026 by rpki-client