This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File:                     qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier:          dCL8C6Kq6/LgWbqn1aRYzdTJYWY32aM6v36MudICvzk=
Subject key identifier:   A6:37:45:9F:DB:F1:4C:8B:05:C2:E2:77:DC:D9:A1:BC:F6:E1:CF:2A
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer:       /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number:          0208
Signing time:             Thu 18 Dec 2025 15:50:05 +0000
Manifest this update:     Thu 18 Dec 2025 15:50:05 +0000
Manifest next update:     Thu 25 Dec 2025 15:50:05 +0000
Files and hashes:         1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: c/ofEOyt+ZvWNtYvk0Ifn9peBgHnmQaML7bDMEK/CcQ=)
                          2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
        Validity
            Not Before: Dec 18 15:50:05 2025 GMT
            Not After : Dec 25 15:50:05 2025 GMT
        Subject: CN=694422ad-1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:1e:7a:43:1c:cf:1c:95:f2:79:9e:d7:66:
                    33:89:89:42:76:9d:37:c9:03:ac:5f:bf:aa:a8:39:
                    7a:1e:b2:5e:50:42:76:40:66:94:33:34:d2:44:b5:
                    e0:9b:b2:e9:ac:b1:16:10:5c:3f:dd:59:75:d4:31:
                    a7:48:51:ca:fd:4b:46:0e:91:79:f7:7d:b4:e5:4e:
                    10:b7:e0:92:ce:b3:62:be:b4:e2:75:79:48:d3:50:
                    dd:3a:99:8c:1e:72:05:f9:f8:30:7a:ce:f1:44:c5:
                    b5:89:4c:c9:5e:ce:09:27:41:a5:1b:7e:7f:86:3c:
                    92:22:1b:af:06:c8:5c:57:c1:8e:bc:29:46:5e:96:
                    3b:71:01:d8:65:08:cc:ae:19:47:5b:bc:f7:45:99:
                    d4:a5:d1:d6:47:46:ce:15:d3:b1:8b:f4:6e:07:1a:
                    3e:e0:64:5e:15:d6:24:68:21:9a:c5:8b:d8:d2:44:
                    81:fb:04:5b:06:6f:ed:60:2d:8d:11:0c:bf:4d:7c:
                    89:f0:3a:cd:12:5f:39:85:24:df:90:b9:8f:3a:27:
                    2e:cc:6d:11:3c:4a:5a:76:cf:83:6d:46:64:8e:e3:
                    cc:a6:29:d3:5c:95:23:f1:af:fd:92:3c:aa:0c:cb:
                    e0:fa:e8:6b:bb:f0:53:67:15:01:b4:9e:a3:45:5b:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:45:9F:DB:F1:4C:8B:05:C2:E2:77:DC:D9:A1:BC:F6:E1:CF:2A
            X509v3 Authority Key Identifier:
                keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:8b:6b:5d:e6:36:79:6d:8d:18:08:37:76:12:50:60:54:
         2b:19:7b:79:50:69:8d:5f:07:8d:be:67:92:bc:af:1a:ed:ac:
         c0:aa:c6:0c:4b:76:ac:ab:1a:00:8e:c1:e7:38:36:f8:0f:dc:
         76:c1:f3:62:96:0e:b2:05:c6:58:18:f9:e0:95:66:92:f5:ea:
         b4:12:a1:1b:8a:d1:da:8b:e2:8a:08:36:25:8a:b5:cc:ef:8a:
         22:75:0a:2c:ed:21:7a:e6:1a:3c:91:a7:c0:d9:8c:d5:58:38:
         78:0e:98:7a:df:5a:7d:00:71:0e:d9:b4:59:69:ee:d3:bc:73:
         87:f4:5f:24:de:09:77:0a:c7:83:85:a8:a7:ce:d5:83:49:e1:
         53:19:bc:35:86:ef:d6:e6:1d:26:09:b0:6e:8b:88:39:1b:1a:
         93:2a:18:d2:97:80:cc:d7:a4:d6:c3:49:3c:a6:82:6e:ac:45:
         8c:3b:d1:cb:9a:be:81:47:cc:05:7c:1a:f3:7d:29:7c:8e:90:
         f4:91:cb:41:c5:18:98:9f:cd:f1:48:6e:00:7c:33:44:63:79:
         30:bd:c3:1b:2f:75:45:31:67:34:02:a1:3a:e4:1e:1f:09:8c:
         52:63:69:e0:e4:ff:59:0d:83:58:21:f6:18:59:f3:58:04:30:
         81:35:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:23 2025 by rpki-client