This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          j8PwVzVwjxMHrzPAJuUH92ZCey4e0vll2avadPGKuW4=
Subject key identifier:   C3:80:6F:9D:FF:4A:D3:E6:C4:D0:35:AD:F5:3D:D1:76:D3:0F:B7:A7
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A1E
Signing time:             Sat 20 Dec 2025 19:15:53 +0000
Manifest this update:     Sat 20 Dec 2025 19:15:53 +0000
Manifest next update:     Sat 27 Dec 2025 19:15:53 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: QlXAlbWwciUpZXheITZ2LcB3OLuvJDNA943PJfdZpMc=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Dec 20 19:15:53 2025 GMT
            Not After : Dec 27 19:15:53 2025 GMT
        Subject: CN=6946f5e9-0df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:8c:d3:a5:5d:1c:b6:cc:b4:ff:e5:6a:f5:
                    e9:84:ae:e7:27:25:13:ab:9f:6d:47:c0:f7:70:d6:
                    9f:09:5e:1d:ad:76:33:fd:fa:42:a6:f0:64:f1:ab:
                    46:da:c4:0c:ba:d5:9c:46:96:e4:ef:6d:1a:2c:22:
                    00:ec:01:8d:cb:df:66:26:6d:3f:32:f6:e5:e7:25:
                    40:e7:f1:78:1b:a1:f7:aa:27:33:fc:a4:4e:97:7e:
                    ab:d9:d7:74:c9:91:fc:4f:50:54:6f:37:ae:5c:63:
                    af:eb:f5:cb:f2:01:02:f1:39:05:08:92:21:fd:cb:
                    f9:40:94:4f:d9:ef:d7:3f:4d:65:5a:a0:14:48:e0:
                    c2:2b:e0:bc:ea:1d:0e:5c:55:45:cf:cf:d3:bb:2b:
                    57:74:b9:de:92:a5:b2:75:22:8d:7f:f7:49:90:55:
                    9f:25:6b:77:3d:87:e5:17:5b:a8:23:69:d0:bb:9f:
                    aa:31:3f:47:de:c9:46:6b:86:a3:e5:c8:e4:61:d2:
                    80:39:6a:89:ea:43:23:bc:0c:bb:16:94:6f:8c:04:
                    f9:10:03:5f:d7:3e:cc:93:84:79:11:06:dd:4f:0d:
                    42:46:3e:52:29:3f:5d:40:a3:c0:7d:c3:eb:d3:c9:
                    de:54:92:e9:0c:79:94:e4:b1:6e:d5:d0:9e:43:ef:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:80:6F:9D:FF:4A:D3:E6:C4:D0:35:AD:F5:3D:D1:76:D3:0F:B7:A7
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:af:f6:3e:fb:4b:1a:f6:5d:af:ba:88:52:da:45:f3:4e:b3:
         ab:3c:26:90:8f:39:25:da:7a:f0:ea:a9:e3:30:72:46:cb:fa:
         e0:79:a7:d6:ec:24:6f:9d:df:b2:b3:08:9d:9d:c8:d3:50:57:
         60:72:b7:c2:e6:8a:db:2a:bb:e7:93:b7:77:9b:44:d7:9f:cb:
         57:6f:62:25:a7:c1:6f:29:52:af:a5:5f:e6:78:ea:c6:4d:bd:
         d9:f9:c7:78:c9:9c:73:d0:5e:25:48:a6:0a:78:5f:75:07:e8:
         ed:fb:5d:f0:0a:21:55:56:12:28:aa:d0:ee:c0:98:e0:8c:99:
         6f:a5:b2:cb:ae:99:c7:79:57:68:bc:75:f4:f0:d3:08:58:c9:
         36:b1:8b:fd:87:43:c4:dc:ae:e9:c6:8a:ba:17:44:7c:fc:37:
         a1:6a:ad:53:75:c5:00:b8:a3:ce:df:6c:67:4b:fa:ee:1a:9e:
         9b:92:f9:fb:6d:00:39:dd:fb:d9:b6:21:0a:6c:ca:78:8a:fd:
         59:3f:f1:c9:26:76:a5:5b:31:7e:8b:c1:49:5c:28:de:62:ae:
         cd:fb:c4:c3:18:a7:a1:59:5f:57:85:57:24:66:60:ea:81:f9:
         26:78:b4:12:6d:2f:5f:56:7b:77:c6:90:50:50:da:4b:ae:4a:
         0e:7e:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:03:10 2025 by rpki-client