This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          HsWDu7fJ2Z8iRhMo6b2QOGHpjg97hmcZ1TOsiD2Q+Ng=
Subject key identifier:   A7:BE:FA:27:DF:D0:F8:A2:10:3A:C2:3B:52:38:7F:50:71:FD:51:16
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       35BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          355E
Signing time:             Thu 18 Dec 2025 14:18:26 +0000
Manifest this update:     Thu 18 Dec 2025 14:18:25 +0000
Manifest next update:     Thu 25 Dec 2025 14:18:25 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: ixyRnZWVj9SNj3BaCw3YykGhbRGSntVyZyOhDhziYt8=)
                          2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: YFvhz1PGC7q57PnuhHNHoL2UdVqoUNbc1jn2FslOikU=)
                          3: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: EhEXBuPzBWhzkOB9D79utIvLCnQ6Mbwgg0WndIUIPp0=)
                          4: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: 3CbheGLf7uJhmbUNdy9gSvSRtLJJeEHbny/TO1DTF3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13759 (0x35bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Dec 18 14:18:25 2025 GMT
            Not After : Dec 25 14:18:25 2025 GMT
        Subject: CN=69440d32-b5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:61:28:08:11:47:70:47:f2:11:ac:ee:4a:
                    6e:fc:46:67:35:a9:d8:72:29:c0:fd:a3:3b:2a:f8:
                    0b:a7:dd:9c:f3:c8:a4:e6:2d:02:1b:e3:21:99:dd:
                    b4:88:01:da:1e:f6:d8:da:10:71:6b:8e:5d:1b:2f:
                    2a:31:6a:d4:00:62:72:c2:55:8f:e6:bb:29:df:10:
                    bb:e8:30:c2:f5:b5:44:fd:96:80:0c:db:e9:f4:fe:
                    f0:1f:0e:89:be:82:a2:76:15:79:ff:09:31:bc:ed:
                    9e:82:ef:91:ab:92:e7:df:2f:54:e2:eb:0e:97:6a:
                    98:47:a7:a1:1d:d5:c5:4e:52:2a:d5:a7:c1:5b:61:
                    c7:a4:db:99:7f:19:f5:1a:84:26:2d:3d:9d:96:16:
                    6e:0d:4c:c5:04:9b:f3:9b:c6:81:96:0d:91:89:0e:
                    b9:e4:07:b5:a2:fc:fc:fd:dd:4c:72:3c:1a:20:1b:
                    b9:63:4f:68:ca:81:85:54:ab:8f:83:8b:df:47:21:
                    e2:7e:86:85:21:64:ac:7b:d3:a2:51:28:cd:d0:d1:
                    32:7e:81:cc:d1:e8:6c:9b:0f:c5:95:74:35:4f:b1:
                    45:0d:11:e4:8a:5f:e5:39:bb:cf:bc:df:48:56:d3:
                    68:a2:75:86:ae:2b:66:45:91:8d:66:b3:09:8c:74:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:FA:27:DF:D0:F8:A2:10:3A:C2:3B:52:38:7F:50:71:FD:51:16
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:e2:62:44:3f:1f:4e:43:0b:82:f6:2f:7b:d8:2e:80:6c:
         4c:57:81:64:72:b6:6d:3a:83:b5:c3:89:93:ab:31:ac:4f:95:
         a5:cc:03:8a:b4:e7:bb:68:ba:91:dd:28:70:8a:ad:ce:7f:9b:
         c0:d2:97:b7:b0:f9:78:04:c9:e9:60:69:78:f2:d0:76:74:84:
         8e:e1:4c:32:d5:5a:3f:81:b9:3c:e9:b4:37:cc:52:96:b4:9b:
         07:4b:71:76:f5:2f:91:2f:63:79:6e:9a:30:35:23:e6:ff:1a:
         1e:4d:a3:f5:cb:60:cf:1a:26:76:d3:33:e8:d5:ec:69:d9:f3:
         47:a6:e5:c3:48:4c:2d:39:c0:9b:17:c1:75:a2:93:e6:46:3d:
         eb:a6:d0:8c:7e:a5:39:64:7c:e5:ef:6c:7d:03:1b:a1:fb:b4:
         d3:37:72:62:d9:b4:1b:83:02:74:ed:06:e4:28:f3:6e:2b:34:
         fe:2c:a6:8a:d4:b5:b0:4a:18:5d:b8:17:e7:b4:38:c1:0f:05:
         9c:9a:8c:18:7f:f8:5f:b8:c6:09:9d:45:30:20:77:f8:d5:1b:
         e7:76:b0:9f:f1:7f:09:46:1a:43:7a:80:d6:6d:fb:ca:fd:97:
         ef:5a:d8:6b:2b:0c:14:4c:71:de:ea:db:04:b7:01:6c:88:18:
         f1:7d:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:41:06 2025 by rpki-client