This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
File:                     QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json)
Hash identifier:          pXRUvee0YOwFSWdtyo9KqFhlmpWNdyEeVILvtYVBuhM=
Subject key identifier:   9B:19:BB:89:6F:D4:19:1D:A3:8A:DD:20:7D:F6:44:D1:5F:81:30:6C
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Certificate issuer:       /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
Manifest number:          08
Signing time:             Tue 23 Dec 2025 06:55:21 +0000
Manifest this update:     Tue 23 Dec 2025 06:55:21 +0000
Manifest next update:     Tue 30 Dec 2025 06:55:21 +0000
Files and hashes:         1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: Pb5R6zsZTg5c//2fgdF+OWbk/o5rRrYbCLPqpOTi5kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
                          rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
        Validity
            Not Before: Dec 23 06:55:21 2025 GMT
            Not After : Dec 30 06:55:21 2025 GMT
        Subject: CN=694a3cd9-fa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:23:9a:a8:38:1b:33:e8:db:3b:02:c9:04:
                    8d:f5:79:c7:fe:de:38:40:f6:9c:cb:8c:dc:c9:aa:
                    2f:c8:c6:9c:ee:75:af:72:21:37:91:9a:12:8f:bd:
                    6e:dd:97:00:b6:c8:ea:e7:da:22:42:87:5c:26:eb:
                    59:d0:b3:85:74:e7:6f:2b:2e:86:f5:5c:0c:f3:9e:
                    ff:99:03:86:e9:be:f9:15:44:f2:d9:c6:da:2f:b6:
                    e7:61:3c:b1:9b:a6:64:4c:f5:96:f7:93:b3:7c:cc:
                    6e:f3:f6:6a:ef:56:ca:a7:36:49:ec:a7:13:e1:0c:
                    c7:19:dc:26:34:78:9d:cc:f7:05:2e:e0:1e:28:d3:
                    e4:5e:9f:18:ef:3d:21:9c:39:5c:45:2a:8a:d1:26:
                    08:ef:8b:23:08:e7:40:e6:ae:a4:33:e8:89:bb:63:
                    8e:43:f7:5a:89:ae:39:da:81:76:8a:77:19:da:8b:
                    29:78:3c:c9:15:f9:3b:df:b9:17:f2:a4:92:ec:ff:
                    86:2c:52:d3:c8:62:19:44:ab:28:b2:d1:e4:dd:97:
                    89:b9:c7:2e:20:43:ee:62:01:2c:fb:07:b8:cd:e4:
                    67:e4:90:91:fa:c4:a8:77:d6:e9:5f:cc:90:b6:cf:
                    39:1b:61:7c:0c:37:6f:21:54:56:7b:1c:ca:f4:2f:
                    ca:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:19:BB:89:6F:D4:19:1D:A3:8A:DD:20:7D:F6:44:D1:5F:81:30:6C
            X509v3 Authority Key Identifier:
                keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:2f:79:40:bf:85:d7:3f:72:6c:a1:0b:20:68:f6:58:02:
         44:d6:45:88:35:6f:48:9a:06:6d:81:e1:03:e4:28:6f:bd:67:
         98:87:13:00:de:8a:5b:cd:39:f4:d9:32:0b:2a:ce:34:f7:dc:
         ec:7c:f7:ff:0a:e0:6a:68:2e:5b:76:a4:47:2f:16:fd:08:21:
         75:d6:ce:fa:ab:ef:1f:bf:58:45:bb:18:95:03:57:39:84:d4:
         e2:ef:f9:c2:a7:2a:3a:44:0f:9c:2e:57:eb:9f:e7:d3:17:8b:
         d4:b4:53:52:84:2a:08:42:8c:f5:75:0f:07:5c:2d:f4:43:92:
         a9:e1:8e:e2:ea:17:68:ac:11:9c:55:7f:82:7f:44:b0:6e:9f:
         5e:8a:77:57:0b:6d:fd:b5:c7:d3:16:f9:91:3b:a3:82:d2:02:
         13:56:ca:0a:69:9a:82:4e:8f:9c:4f:df:35:d3:6c:dd:c6:32:
         42:69:7e:06:77:ec:eb:0e:ff:3d:9d:c4:60:7f:09:01:d0:a5:
         a5:2e:7a:58:b3:b3:71:54:30:ed:8f:f5:07:91:e2:8a:54:44:
         74:36:6e:99:48:13:57:e8:d5:58:b3:14:bd:35:ba:d1:34:04:
         4d:10:11:43:84:6e:d9:99:73:55:b4:e4:79:ef:95:38:20:88:
         8b:58:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:35 2025 by rpki-client