This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File:                     QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier:          K6uTSqGZiqt3Q454Tk0NeJbDJzxEik8Gh3BPdvg+Peg=
Subject key identifier:   EC:E6:D8:59:9C:AF:27:7E:30:94:86:A9:D2:28:04:99:91:EF:B2:E4
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer:       /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial:       3507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number:          34FB
Signing time:             Sat 20 Dec 2025 14:36:18 +0000
Manifest this update:     Sat 20 Dec 2025 14:36:18 +0000
Manifest next update:     Sat 27 Dec 2025 14:36:18 +0000
Files and hashes:         1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: XxXKgpcLzJMTKY6MVPX4uA+xERNzL+v2ajVQhWpbIQc=)
                          2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 06z9d5fjWqhjFaZliDpCRNH7Mjl/zpi5d4kXWnQYoQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
                          rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13575 (0x3507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
        Validity
            Not Before: Dec 20 14:36:18 2025 GMT
            Not After : Dec 27 14:36:18 2025 GMT
        Subject: CN=6946b462-a381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:a3:7d:1a:07:0e:5d:0a:04:6c:5e:64:a5:
                    b7:25:ff:3f:c7:1f:5f:83:22:9b:5f:fb:ad:99:59:
                    42:c5:20:78:2b:7a:98:a4:a2:df:17:e4:ba:a4:6f:
                    7c:b3:a2:78:d3:79:93:7e:c2:03:da:01:e0:ba:44:
                    96:12:d0:c9:76:2e:49:df:69:37:9c:d5:01:17:81:
                    bb:ef:da:9c:18:fe:a6:af:cc:da:d1:20:ff:5a:e2:
                    87:22:1f:a4:26:43:df:80:dc:b5:73:41:f5:cb:fb:
                    79:3a:d7:5f:49:27:f4:5f:59:00:ba:9f:11:71:5b:
                    07:52:56:74:6c:24:be:d1:8c:d0:52:de:be:fc:3b:
                    b8:71:90:98:b4:79:6e:36:0f:0f:9c:6f:c1:d4:a8:
                    ae:e3:6e:60:3b:d6:99:be:8a:b2:64:40:61:bd:e6:
                    7c:03:15:93:f1:a2:9a:9a:06:22:1d:88:ed:af:b5:
                    18:83:c4:81:e0:94:7d:47:3a:3d:00:86:1e:2a:20:
                    8e:14:d2:04:1d:a1:db:4b:fd:40:9e:96:21:61:45:
                    6f:10:80:2e:06:ef:6c:f7:4e:93:53:8c:f3:5b:2c:
                    44:43:87:34:e1:47:a2:9f:ae:66:1f:1d:d8:fe:53:
                    4e:41:80:ec:00:92:e8:91:ad:06:cc:06:d5:51:4b:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E6:D8:59:9C:AF:27:7E:30:94:86:A9:D2:28:04:99:91:EF:B2:E4
            X509v3 Authority Key Identifier:
                keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:c0:f9:67:91:f3:0f:c3:c8:df:e3:86:fc:0e:c0:cc:9f:
         00:3d:16:11:1a:0c:b5:10:34:e5:75:b8:21:3e:2a:df:ed:ef:
         df:4b:e6:09:93:e1:e4:6a:ce:36:f4:f6:ba:f4:a4:07:2b:50:
         a2:61:2d:78:1a:b9:fc:6c:ec:b5:0d:ba:d7:d1:a7:ab:26:57:
         b2:ed:16:e0:fa:eb:9c:97:fe:3e:63:68:07:bb:00:ca:4a:0c:
         63:fc:7b:6d:05:e8:58:b0:2c:d6:67:0b:cc:11:d6:be:cb:d5:
         03:3d:02:cc:44:cb:dd:8e:c2:93:b5:af:d2:ed:99:5a:b6:7a:
         f4:d1:39:07:55:e0:5f:8c:4b:d0:78:89:15:7b:34:48:bf:12:
         65:67:d7:fb:48:64:11:1f:40:38:6b:60:86:e9:7d:64:b4:9c:
         2a:1d:32:0d:61:f7:cb:fc:4b:58:5d:83:8c:ea:e7:73:72:17:
         70:b9:0f:52:67:72:98:de:68:80:3d:ac:8e:18:58:a7:2d:a5:
         2b:62:53:93:27:25:3e:be:5a:74:b6:5c:9a:0d:b1:ef:a1:28:
         6d:9f:9f:cc:3b:ae:93:90:9c:d1:6d:19:3b:3b:ed:59:d5:00:
         e0:8c:3a:82:c5:c4:39:7a:4e:4f:f6:b0:41:7b:70:c9:94:64:
         83:d1:e1:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG
OEYyMzhCMzEwHhcNMjUxMjIwMTQzNjE4WhcNMjUxMjI3MTQzNjE4WjAYMRYwFAYD
VQQDDA02OTQ2YjQ2Mi1hMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApf+jfRoHDl0KBGxeZKW3Jf8/xx9fgyKbX/utmVlCxSB4K3qYpKLfF+S6pG98
s6J403mTfsID2gHgukSWEtDJdi5J32k3nNUBF4G779qcGP6mr8za0SD/WuKHIh+k
JkPfgNy1c0H1y/t5OtdfSSf0X1kAup8RcVsHUlZ0bCS+0YzQUt6+/Du4cZCYtHlu
Ng8PnG/B1Kiu425gO9aZvoqyZEBhveZ8AxWT8aKamgYiHYjtr7UYg8SB4JR9Rzo9
AIYeKiCOFNIEHaHbS/1AnpYhYUVvEIAuBu9s906TU4zzWyxEQ4c04Uein65mHx3Y
/lNOQYDsAJLoka0GzAbVUUtIGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzm2Fmc
ryd+MJSGqdIoBJmR77LkMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE
OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl
MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAt0sD5Z5HzD8PI3+OG/A7AzJ8APRYRGgy1EDTldbghPirf7e/fS+YJ
k+Hkas429Pa69KQHK1CiYS14Grn8bOy1DbrX0aerJley7Rbg+uucl/4+Y2gHuwDK
Sgxj/HttBehYsCzWZwvMEda+y9UDPQLMRMvdjsKTta/S7Zlatnr00TkHVeBfjEvQ
eIkVezRIvxJlZ9f7SGQRH0A4a2CG6X1ktJwqHTINYffL/EtYXYOM6udzchdwuQ9S
Z3KY3miAPayOGFinLaUrYlOTJyU+vlp0tlyaDbHvoShtn5/MO66TkJzRbRk7O+1Z
1QDgjDqCxcQ5ek5P9rBBe3DJlGSD0eEc
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:09:24 2025 by rpki-client