This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
File:                     QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json)
Hash identifier:          X4bJBq2CEQRnyco3llVFtH+szpM1O4vvgUlgA+gIG3A=
Subject key identifier:   3C:C4:5F:3E:52:3B:78:44:78:94:5C:85:DB:C9:C6:B1:8F:4A:E2:D1
Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
Certificate issuer:       /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
Manifest number:          C8
Signing time:             Tue 23 Dec 2025 04:45:42 +0000
Manifest this update:     Tue 23 Dec 2025 04:45:42 +0000
Manifest next update:     Tue 30 Dec 2025 04:45:42 +0000
Files and hashes:         1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: uj1VSP0VrYz2o0vYWsifxK9zmhDWJ5Vje0INYeomcXY=)
                          2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
                          rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
        Validity
            Not Before: Dec 23 04:45:42 2025 GMT
            Not After : Dec 30 04:45:42 2025 GMT
        Subject: CN=694a1e76-2030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:0d:89:5a:27:c8:c8:43:cd:cc:7b:d1:ec:
                    4f:8f:01:af:05:1b:0d:c9:cf:3b:a5:ce:2a:1c:26:
                    fb:cd:4d:aa:a4:27:5c:29:63:9a:79:ec:2b:e5:28:
                    5c:48:b0:fc:09:08:03:1e:9a:0e:be:a1:77:e9:b2:
                    2e:86:bf:a6:ce:12:b4:e5:bf:c9:1b:ae:8b:4b:26:
                    49:38:d4:f0:b6:72:67:d4:31:95:f6:25:c1:9f:4a:
                    f8:ba:df:b0:8f:27:06:a2:d9:0f:e9:1b:fe:20:84:
                    03:ec:3e:22:49:12:1d:7a:b3:7b:a7:e1:49:e2:e2:
                    c5:96:ee:f3:b3:2d:61:39:90:cd:2b:97:83:b3:a4:
                    99:aa:78:7f:25:74:db:28:03:93:da:81:87:2d:41:
                    69:01:f8:d9:f8:28:86:5f:26:43:03:2d:77:ff:c0:
                    af:6f:13:cf:7a:e1:77:85:49:c7:e2:3e:65:3f:4e:
                    3d:8e:93:57:45:a4:39:57:c1:5c:8c:b2:7c:3d:5b:
                    dc:54:81:fd:80:98:85:03:bd:a3:81:6f:eb:2e:70:
                    b1:fe:7e:3a:01:c9:0c:4c:96:d6:1f:c4:ae:ae:46:
                    b1:f6:7c:d4:8b:14:9e:c9:ae:fc:f5:47:f7:b8:e6:
                    f4:38:5b:5b:56:69:e2:10:d5:1c:a2:e0:b0:5e:05:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C4:5F:3E:52:3B:78:44:78:94:5C:85:DB:C9:C6:B1:8F:4A:E2:D1
            X509v3 Authority Key Identifier:
                keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:23:42:a8:8c:ca:0a:74:ec:49:78:bf:fe:89:63:33:2c:
         81:a7:bd:bd:48:01:69:92:a3:54:12:52:e1:5d:a7:20:58:f1:
         b9:a2:51:be:18:1d:f9:b7:25:42:ac:16:dc:97:5a:60:d9:cf:
         50:12:27:3b:81:f0:2e:2c:6d:81:b9:be:98:dd:0e:2a:32:d8:
         17:36:17:ba:06:93:16:51:ff:ee:5c:33:27:05:d6:2f:14:af:
         bb:2b:46:d1:3f:35:31:98:d6:0e:f6:96:22:56:d8:0e:8e:9e:
         27:82:34:fc:5a:0c:b6:4b:38:ac:22:40:bc:02:e8:64:56:6a:
         54:58:ed:84:16:f2:ad:d4:9c:3a:29:b7:20:9c:1b:0f:8b:e8:
         b0:db:50:cc:37:4e:b3:64:c2:00:97:5a:be:e5:bc:89:af:a1:
         11:b0:0c:40:d6:a1:02:2f:59:7d:09:74:2a:ab:96:42:b5:85:
         c1:d1:25:6d:fc:bb:88:a2:f5:4f:e2:5d:c1:8b:fa:24:3f:c0:
         6a:79:bf:a4:07:71:f7:22:3b:56:2f:18:b2:13:0d:01:f4:18:
         9f:77:6e:a7:7c:21:99:da:61:cd:83:a8:e7:4e:db:ff:e9:0e:
         c3:46:4f:ad:ca:87:a1:88:43:f1:a1:c3:e1:fd:dd:0d:47:92:
         9b:32:a8:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYxNzkxMTAvBgNVBAUTKDQwNTAyQTRCMEMxRkY0NjgyRjUyRTM0MDY0MDQ0NDQ1
Mjg3RDRCQjgwHhcNMjUxMjIzMDQ0NTQyWhcNMjUxMjMwMDQ0NTQyWjAYMRYwFAYD
VQQDDA02OTRhMWU3Ni0yMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjxMNiVonyMhDzcx70exPjwGvBRsNyc87pc4qHCb7zU2qpCdcKWOaeewr5Shc
SLD8CQgDHpoOvqF36bIuhr+mzhK05b/JG66LSyZJONTwtnJn1DGV9iXBn0r4ut+w
jycGotkP6Rv+IIQD7D4iSRIderN7p+FJ4uLFlu7zsy1hOZDNK5eDs6SZqnh/JXTb
KAOT2oGHLUFpAfjZ+CiGXyZDAy13/8CvbxPPeuF3hUnH4j5lP049jpNXRaQ5V8Fc
jLJ8PVvcVIH9gJiFA72jgW/rLnCx/n46AckMTJbWH8Surkax9nzUixSeya789Uf3
uOb0OFtbVmniENUcouCwXgWPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzEXz5S
O3hEeJRchdvJxrGPSuLRMB8GA1UdIwQYMBaAFEBQKksMH/RoL1LjQGQEREUofUu4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS81NEUwNDcxNkFB
N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlHZ3ZVdU5BWkFSRVJTaDlT
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjE3OS81NEUwNDcxNkFBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlH
Z3ZVdU5BWkFSRVJTaDlTN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCduiNCqIzKCnTsSXi//oljMyyBp729SAFpkqNUElLhXacgWPG5olG+
GB35tyVCrBbcl1pg2c9QEic7gfAuLG2Bub6Y3Q4qMtgXNhe6BpMWUf/uXDMnBdYv
FK+7K0bRPzUxmNYO9pYiVtgOjp4ngjT8Wgy2SzisIkC8AuhkVmpUWO2EFvKt1Jw6
KbcgnBsPi+iw21DMN06zZMIAl1q+5byJr6ERsAxA1qECL1l9CXQqq5ZCtYXB0SVt
/LuIovVP4l3Bi/okP8Bqeb+kB3H3IjtWLxiyEw0B9Bifd26nfCGZ2mHNg6jnTtv/
6Q7DRk+tyoehiEPxocPh/d0NR5KbMqgY
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:18 2025 by rpki-client