This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
File:                     qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json)
Hash identifier:          j4wQ1+SU41wp6kM4o2YOnmmwgUguba569aY/8VytyJc=
Subject key identifier:   3A:15:88:8A:F4:98:2F:8A:4F:E2:A3:8E:FE:DC:AB:99:BE:07:9A:0B
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Certificate issuer:       /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
Manifest number:          9C
Signing time:             Tue 09 Dec 2025 04:19:28 +0000
Manifest this update:     Tue 09 Dec 2025 04:19:28 +0000
Manifest next update:     Tue 16 Dec 2025 04:19:28 +0000
Files and hashes:         1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: UyxRnwxABngHShAL8M5ojsuhYYhHC/r6rKL9afq3GYg=)
                          2: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: bKExJAQVgmsEGcry3muwfFx0/j1cGOEsv7XoDmBLPJE=)
                          3: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: mpt0yv2n2/9qn3jigf6poMZZmtQOJyzbjFP/yr9TelI=)
                          4: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: 2ZNFwVZKhHOWC3D4N4dqgdZpiwiB+c4Fi1WKpctLr0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 04:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
        Validity
            Not Before: Dec  9 04:19:28 2025 GMT
            Not After : Dec 16 04:19:28 2025 GMT
        Subject: CN=6937a350-e1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:84:08:a4:d4:ae:c7:1e:8f:34:12:7d:f5:
                    f8:a0:79:00:55:1d:c4:4b:5d:60:22:ec:54:9d:96:
                    c7:f8:7e:56:cc:d1:1c:d6:9b:8d:5e:9c:63:fe:67:
                    d7:6c:1e:0f:bd:ec:ed:e5:7b:8b:95:3e:c5:c7:3e:
                    1e:70:e1:f2:15:5a:6c:6f:97:76:34:ed:9f:90:75:
                    7f:1f:0b:6a:90:2e:ec:a6:15:c1:16:b5:ce:65:a4:
                    50:6f:37:5b:de:aa:dc:02:72:c0:cd:78:60:e3:7b:
                    3f:25:90:7c:8c:ff:93:ad:68:cc:76:3e:4e:0d:60:
                    e7:8c:30:58:70:84:0e:20:58:1f:be:cd:0b:9b:ae:
                    e5:fc:aa:a2:10:c1:42:9b:ab:f8:e7:59:86:af:8e:
                    23:26:4d:69:70:9e:56:50:29:c2:f1:71:34:ff:00:
                    37:c4:59:0c:8f:6c:0f:36:c5:8f:36:fa:0b:61:f4:
                    95:30:ad:55:54:12:6b:41:4c:39:ec:a5:4c:52:e9:
                    8a:fa:f3:43:d3:90:f8:ae:18:ba:2e:37:25:be:0d:
                    bc:25:f3:29:0a:dc:29:8a:6d:2f:c1:25:71:c3:6b:
                    e2:ff:9c:ca:15:c3:57:7b:da:10:49:da:46:b0:7e:
                    c4:81:cc:cd:fb:16:89:bd:77:19:f4:f7:5f:96:90:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:15:88:8A:F4:98:2F:8A:4F:E2:A3:8E:FE:DC:AB:99:BE:07:9A:0B
            X509v3 Authority Key Identifier:
                keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:c3:a5:78:ce:e3:73:02:d0:b6:87:6f:9e:e4:8a:fb:03:d7:
         a0:b5:ef:22:35:9d:81:91:b7:14:6a:59:72:62:0b:30:ff:29:
         83:df:37:da:0a:73:46:ad:05:40:5e:0a:18:22:a8:ee:7f:48:
         82:a4:96:f6:31:77:b3:67:ba:c5:00:e7:bf:0d:d6:55:97:e5:
         e5:7f:c5:44:09:28:13:ca:0b:47:5a:8b:3c:5b:38:4d:f7:4a:
         a1:65:f9:78:06:a6:9f:fc:5d:f1:9b:b6:04:3d:c9:9d:42:28:
         a3:3a:32:df:b9:3c:3b:a2:c3:57:13:32:ab:84:eb:a5:42:24:
         3d:09:aa:5c:c8:42:02:16:da:86:fb:50:6e:64:64:86:03:83:
         5a:15:49:be:08:0d:d8:f5:16:8f:b9:ba:81:d0:88:ca:e6:e3:
         d4:35:85:ae:78:2b:07:fa:89:e4:64:65:78:37:12:7b:1f:da:
         97:9c:b7:2e:b7:39:4d:92:65:87:85:3d:83:24:ff:ff:40:01:
         92:7a:e8:15:1f:aa:3b:8c:d0:bd:8d:16:82:0b:db:40:68:ab:
         cc:5e:f3:0d:12:ce:8a:6e:9a:b4:99:bc:5c:56:b8:93:00:f2:
         1c:a8:c9:38:91:13:29:5f:31:22:4a:07:50:9d:bb:d4:c3:1a:
         3c:79:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 01:32:57 2025 by rpki-client