This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File:                     QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier:          lKtQeJIr2gaTnbWHni/CwNiseRZlVPU5CiP7yOQW+Ws=
Subject key identifier:   7C:CF:78:02:29:24:76:3A:6A:61:91:7A:A3:67:BD:C7:55:A7:73:A6
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number:          E6
Signing time:             Wed 03 Dec 2025 03:52:10 +0000
Manifest this update:     Wed 03 Dec 2025 03:52:10 +0000
Manifest next update:     Wed 10 Dec 2025 03:52:10 +0000
Files and hashes:         1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: 7TIiUpz5QRu6xlUQIAEBz55Y2hiPhlE+6XVCAh+Tb4Y=)
                          2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Dec  3 03:52:10 2025 GMT
            Not After : Dec 10 03:52:10 2025 GMT
        Subject: CN=692fb3ea-f704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:ea:39:3f:27:ff:36:d1:d0:63:81:f4:0a:
                    9c:53:ba:2e:14:88:d2:b2:e6:b1:39:f3:36:92:db:
                    c5:d3:6a:19:23:4d:2c:0a:40:ac:db:11:d3:be:63:
                    b1:57:ba:ce:8f:e6:f3:b9:8f:22:ea:e3:86:6c:eb:
                    4f:af:9a:7f:fa:db:92:0e:57:72:d2:b4:ad:c6:02:
                    b6:53:27:46:15:17:c8:da:ac:2d:bb:f7:8f:3a:0b:
                    3e:25:f6:16:a8:43:90:ea:64:4c:0a:83:4e:9e:17:
                    66:fb:04:4b:5d:9d:af:cc:51:3f:77:8c:27:ce:3b:
                    98:7a:45:50:db:e5:69:ac:35:d3:fd:55:25:b1:22:
                    3a:91:d6:b1:80:64:0a:3a:25:45:54:e5:9b:8f:cb:
                    30:80:3c:20:b4:09:66:8c:aa:e9:7e:1d:f9:a6:bb:
                    95:5e:ee:e7:35:c3:af:28:b6:ba:b7:8a:18:fa:1d:
                    e9:1b:1d:57:51:ac:7a:37:5a:a9:8f:c9:1c:50:e9:
                    d1:00:1c:ee:eb:17:d0:0e:05:ee:62:3a:54:04:a9:
                    86:c5:9d:08:37:11:28:ca:d6:3d:76:6c:27:95:63:
                    d9:30:36:66:5b:d0:be:10:3d:37:77:e0:08:fc:3e:
                    95:4b:a7:f8:cc:3e:e3:59:cb:8c:53:c3:83:ec:ee:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:78:02:29:24:76:3A:6A:61:91:7A:A3:67:BD:C7:55:A7:73:A6
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:c3:b1:f0:3d:a6:72:d4:d2:16:a0:f4:b1:4b:2d:2e:16:
         4c:8d:d9:70:cf:39:7c:33:85:2e:8a:a4:ed:95:b5:2b:94:cc:
         95:64:7f:5e:04:f1:68:73:28:20:f7:a3:5a:17:54:b9:c8:61:
         36:36:aa:ce:50:ff:b8:40:9c:7c:97:7a:ca:2b:48:ba:66:48:
         aa:2d:e2:57:09:87:0e:84:c0:97:00:6e:12:cb:41:91:e8:20:
         04:e3:41:bd:6f:b0:93:4a:8b:22:87:75:f4:da:a8:ff:1c:b5:
         09:77:f4:12:7a:86:02:58:61:f5:0d:7c:25:18:1f:8e:a5:08:
         40:ae:22:ef:d7:80:42:c4:50:d1:1b:b8:19:72:24:38:d5:11:
         7d:21:1e:ad:dc:92:cb:b6:2f:ea:65:f2:02:06:4d:77:bb:85:
         cf:92:39:91:d0:29:9d:e4:0a:9b:4c:40:c7:a2:1e:05:61:d4:
         40:3b:2b:85:5d:e1:2a:13:c2:a5:b0:27:b0:66:ce:dd:07:21:
         06:7b:b0:0a:5e:9f:4f:2e:29:72:a9:53:5f:81:b4:39:e7:83:
         65:38:a9:b9:5c:94:68:af:76:26:35:19:b7:e4:df:77:df:d6:
         fb:95:dc:26:15:6f:9b:f1:6b:0a:97:7f:89:b0:77:f1:8a:cb:
         44:f1:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:45 2025 by rpki-client