This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          LNK8nErqlZUieqUd/f4TddpciXPmM9v5h4U3sdoX9Qw=
Subject key identifier:   32:D2:5A:B0:92:6D:94:66:57:64:30:95:07:8C:2F:51:E6:DF:AB:68
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          0195
Signing time:             Tue 23 Dec 2025 02:38:08 +0000
Manifest this update:     Tue 23 Dec 2025 02:38:07 +0000
Manifest next update:     Tue 30 Dec 2025 02:38:07 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: 429Y0LeC4MdzFnx0Oe8xHZ1URRO3ASirL/XjVsjFR4I=)
                          2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: /7gtZFsLsyHJNir9Gd/XvdqnjJVrpsqBtRIA/+ab938=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Dec 23 02:38:07 2025 GMT
            Not After : Dec 30 02:38:07 2025 GMT
        Subject: CN=694a0090-9317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:88:0c:80:74:52:66:82:0f:9c:22:81:79:
                    f4:2a:8a:79:90:d8:a1:0f:69:f7:db:63:63:a6:02:
                    54:a5:ac:e9:f0:45:68:e7:e6:39:39:7a:f7:8f:0e:
                    ea:4d:ad:aa:1b:18:bb:80:c8:03:5d:14:72:7d:dc:
                    22:eb:3e:d3:47:99:68:c5:d9:fd:50:84:2a:77:01:
                    20:1b:a2:80:ab:63:1f:2b:05:d6:4f:4b:f5:df:58:
                    2a:b9:60:ff:dd:03:43:c3:93:b3:28:28:39:c6:9d:
                    11:06:79:e6:b6:71:32:eb:52:e1:c8:2d:2e:e7:0c:
                    50:b6:66:a9:50:14:76:52:b1:16:4b:4c:1c:af:b0:
                    3d:1a:30:f8:d2:ba:da:80:21:ed:f2:98:c1:ec:c0:
                    93:af:37:fc:08:2d:f1:a6:85:f0:41:88:1c:aa:53:
                    63:51:4d:27:4e:87:0f:84:85:78:4d:dc:5f:12:02:
                    6a:1c:cf:b5:05:e9:be:25:0b:c2:87:2f:e9:62:f8:
                    73:79:74:26:1a:e4:f2:52:e8:e0:e5:7c:ca:95:be:
                    85:84:db:b9:bd:38:f1:fe:96:fb:8d:b7:f0:a0:b1:
                    48:26:fe:64:bf:ef:b4:99:20:95:f2:b8:f8:6c:6e:
                    c3:c5:2e:d8:cd:84:07:a7:87:9c:1f:da:b9:6d:55:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:5A:B0:92:6D:94:66:57:64:30:95:07:8C:2F:51:E6:DF:AB:68
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c4:ae:af:86:50:41:ba:b0:f0:23:ef:ca:1d:f6:5b:fe:1e:
         de:93:5c:78:43:35:41:35:56:86:75:f8:d0:98:d6:50:bd:7f:
         68:42:be:d1:71:0a:71:da:a9:07:54:14:64:f8:fd:83:4a:f9:
         5f:a1:4f:e4:c8:89:c2:4c:af:84:d0:30:b7:08:15:dc:58:c9:
         62:c0:f2:08:32:f0:3a:97:61:b4:74:11:5c:3d:23:34:97:e9:
         25:93:62:e5:23:26:10:18:a7:47:de:5b:8a:99:74:29:f7:b5:
         80:16:7b:a2:7a:fd:bc:a7:70:e9:f2:ae:8f:6f:e8:85:a8:4b:
         dc:e8:79:9f:5a:b5:73:c2:5e:9f:4d:03:17:72:c5:a7:28:f0:
         7c:0b:0a:d5:e1:0a:11:14:b3:72:ba:58:79:86:f6:d7:aa:14:
         cd:4a:ea:33:37:d4:e0:21:f5:df:53:7d:24:d6:b7:f4:21:c1:
         17:d6:92:ff:9e:f8:40:d6:b3:51:36:fb:bb:ae:39:44:2b:f1:
         f8:68:3b:e8:98:00:39:58:28:4b:65:37:a1:9d:ae:81:3f:58:
         d2:b8:74:ec:c0:40:5d:b4:24:8c:2a:4a:df:7f:d3:2f:f5:72:
         e6:08:cc:f4:46:8c:48:1d:a0:e1:b3:24:39:c0:81:80:07:59:
         ec:14:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:03:43 2025 by rpki-client