This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
File:                     cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json)
Hash identifier:          wA0KJhWLl/x2OAFy2U/0ND+Vd8lkvBQsu+YxuQqTDWE=
Subject key identifier:   72:6F:76:3E:25:01:5D:D1:C2:50:63:80:63:D8:CB:1E:0D:B4:5E:B1
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Certificate issuer:       /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial:       2215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
Manifest number:          21DA
Signing time:             Thu 18 Dec 2025 15:50:03 +0000
Manifest this update:     Thu 18 Dec 2025 15:50:02 +0000
Manifest next update:     Thu 25 Dec 2025 15:50:02 +0000
Files and hashes:         1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: EbHVC0koRzIm5+EZXj0wVXZUDbssfSdPPPb1h/3cMEA=)
                          2: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: V6pTdi9Go4VZBEN3XXIn2lnRjqLUf2zngAhmgO8tgA0=)
                          3: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: lgOGf6vXQs55zxCogd+pRQs87jNu5Yd5pLF5QPR8QMk=)
                          4: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: PC1UpxkrsO/0WXvqCVPit0ma41SpwfY7b5bjQTzVpWQ=)
                          5: 1C628A90671411EEA0040661C4F9AE02.roa (hash: CTvIhXrCtBos/LVoBMmH2P68ViNfFaDxoAYBDmOA96g=)
                          6: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: dz1GvojNAIHZyqW3h8Y6bP+YBH4Rk6bXASQ1x7rYr58=)
                          7: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: cgIrr8o9jTXMbYMAZf1J8wAI/DfnpUQHzKHIr7ZgI6c=)
                          8: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: FmtBKEomkwEsg09oOugyzChandkcrHCKNwzoO1agNsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8725 (0x2215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
        Validity
            Not Before: Dec 18 15:50:02 2025 GMT
            Not After : Dec 25 15:50:02 2025 GMT
        Subject: CN=694422aa-d117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:6b:44:69:83:2b:70:47:ee:56:1a:92:33:
                    d4:af:ee:d8:34:84:3b:87:39:59:65:06:9c:b4:01:
                    d4:64:a6:ab:c3:be:10:4a:d2:57:8b:1b:ca:e9:1f:
                    81:c2:c1:c6:7d:75:cc:bf:9c:86:b6:f5:dc:b5:ed:
                    d3:33:7a:b0:a1:0c:c4:b1:ea:9d:4a:98:49:d0:c9:
                    43:3f:76:6b:d0:06:0a:72:0a:23:94:ea:11:9f:56:
                    fe:ec:b5:3c:e8:19:56:5a:44:bf:5e:82:b8:54:9e:
                    80:f1:43:50:93:42:32:f9:68:98:5c:d3:2f:e4:1a:
                    b6:72:91:bd:ec:76:3f:e6:88:ff:3c:4f:06:83:7b:
                    b9:50:50:9e:d2:e7:54:11:d5:36:14:e0:7e:33:26:
                    89:d2:03:2d:24:87:18:9b:6e:ea:7e:4e:11:70:1d:
                    c0:2c:0f:bb:86:a8:74:cf:55:6e:04:34:59:43:a3:
                    9a:59:86:87:af:f1:06:90:b7:24:74:c6:0f:7d:f1:
                    57:eb:1b:96:6c:05:88:51:22:f4:06:70:47:16:76:
                    69:f3:8e:20:ee:3e:d6:d9:d1:32:b9:7a:ff:1a:c6:
                    87:34:1c:53:fa:8d:68:b5:e1:10:3e:b1:83:8b:28:
                    93:59:0b:1d:99:a2:48:70:a1:2e:b0:56:af:d3:17:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:76:3E:25:01:5D:D1:C2:50:63:80:63:D8:CB:1E:0D:B4:5E:B1
            X509v3 Authority Key Identifier:
                keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:12:e6:3b:fe:24:31:e6:a2:50:ed:27:60:6b:8e:6a:03:7b:
         35:ac:10:91:81:e9:1b:ab:ca:e1:b3:89:c7:68:34:ff:01:de:
         03:eb:9c:59:ad:05:ac:07:00:5b:35:d0:d4:5c:10:3e:38:81:
         8a:5c:e9:ab:71:27:3d:5c:e5:05:2d:99:53:0d:4f:2d:c9:5e:
         40:48:48:e7:4f:09:a2:da:42:f5:af:de:8f:1d:8d:ec:fa:89:
         7c:f5:45:5d:b3:e0:ea:5b:6a:56:95:78:0d:3a:2d:0f:dc:2c:
         7e:17:24:cc:0c:ef:07:ae:65:ee:65:26:47:89:f0:4d:ed:69:
         bc:bd:a9:a5:68:78:14:a4:2d:44:99:07:8f:65:22:1f:c6:2e:
         12:df:f4:ae:0d:b2:a6:84:77:1a:a9:fe:ca:ce:41:87:45:93:
         03:8b:44:24:bd:56:8f:de:c5:6b:24:70:f4:8d:d6:ca:fc:72:
         7d:ee:50:75:98:f4:0d:1b:08:1b:8f:bc:61:95:c0:cc:16:9b:
         0d:81:19:c2:0a:06:a7:10:89:9b:0f:6e:17:dd:9e:43:9d:4f:
         f0:9a:f9:bf:bf:22:85:e9:a1:5f:6b:77:f5:f6:01:bb:e7:5d:
         63:07:d5:d3:ef:3a:00:f3:6e:28:e3:89:9a:19:42:11:0a:19:
         95:0e:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:30:10 2025 by rpki-client