This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
File:                     QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json)
Hash identifier:          UxVkg9K1KhcmywR4fDyLtpzbPKgO6XVp/BYZB3JLEV0=
Subject key identifier:   4E:6F:EF:FA:96:C8:D0:DD:FE:CB:C3:99:82:6F:30:6A:01:15:BE:54
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Certificate issuer:       /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial:       0681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
Manifest number:          067C
Signing time:             Mon 22 Dec 2025 21:43:31 +0000
Manifest this update:     Mon 22 Dec 2025 21:43:31 +0000
Manifest next update:     Mon 29 Dec 2025 21:43:31 +0000
Files and hashes:         1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: L3OI5W6uuXoKpbXPecNhI4GMUngzR11q+DYkVCFsx+s=)
                          2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
                          rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
        Validity
            Not Before: Dec 22 21:43:31 2025 GMT
            Not After : Dec 29 21:43:31 2025 GMT
        Subject: CN=6949bb83-54e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:9a:18:dc:a3:a0:3b:28:e5:87:1b:73:ba:
                    28:7a:1c:c9:93:a4:33:ca:79:7e:55:e8:13:e1:97:
                    e5:44:4b:18:fd:0c:f0:12:83:19:c6:f5:17:63:48:
                    e8:4d:91:1d:ad:b8:0a:bf:e6:7c:66:09:f4:80:05:
                    28:84:01:d7:cb:63:47:fc:f7:99:c4:8b:a0:8b:3e:
                    bb:58:9e:79:67:6c:fd:5a:4c:62:90:c4:4b:b5:21:
                    df:2d:04:32:d8:ab:fe:0c:12:3d:3a:96:06:59:aa:
                    67:37:d3:18:34:0a:c4:b8:68:4e:76:3c:e2:ea:c7:
                    66:a8:20:05:47:51:7e:85:8c:26:20:dc:6b:4a:ae:
                    69:23:70:27:63:5d:ec:e6:3d:b5:68:8e:e1:d2:55:
                    12:a6:9a:bb:1a:97:d3:de:99:5a:7e:7e:1b:71:e5:
                    40:e4:42:4e:44:ea:4e:ef:e4:04:5d:84:a2:c8:26:
                    92:eb:30:d0:74:27:8f:c3:0b:2a:e4:4c:19:4a:72:
                    01:9b:5d:91:f7:ee:1b:44:66:e1:5c:c3:e1:24:af:
                    b4:8a:fd:2f:cb:6a:26:af:b7:fb:59:0b:75:24:66:
                    f8:40:6d:80:0a:4f:d1:4a:5a:fd:3d:0c:47:87:3e:
                    ae:f0:d6:00:db:21:41:80:89:96:f9:a8:8e:d3:83:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:EF:FA:96:C8:D0:DD:FE:CB:C3:99:82:6F:30:6A:01:15:BE:54
            X509v3 Authority Key Identifier:
                keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:05:8f:86:33:42:b0:50:71:d0:97:a2:c6:f3:ae:02:27:
         b2:be:24:e6:c8:ad:e4:e6:7f:27:bf:7e:e7:b0:c9:c2:08:f0:
         35:10:35:4f:e1:d1:e2:46:aa:59:b1:1e:46:30:ae:38:e1:94:
         e7:f5:0d:b5:30:73:3d:d2:3e:46:a0:a6:d3:30:5d:f3:2d:98:
         46:8f:65:03:7c:e3:87:96:1b:ed:50:8f:42:a2:8b:6a:30:4c:
         01:1e:1e:d4:86:60:41:62:90:02:3e:b4:ab:9a:99:77:c3:5b:
         eb:88:9a:0c:74:14:8f:40:89:f4:a8:a4:f3:af:58:cb:5d:b7:
         99:5f:1d:61:d1:95:41:43:92:61:72:2b:0f:7a:35:5b:b5:7c:
         f0:e7:8b:46:d7:6d:dd:f6:55:de:3e:f7:02:7b:38:76:4a:6c:
         06:56:57:5c:5b:05:90:f1:d1:5d:e0:f2:8a:13:83:d4:40:dd:
         a3:64:a3:6e:99:f8:0c:9c:5f:27:38:fe:9d:dd:71:52:84:36:
         5b:4e:a3:83:f5:74:72:5e:ef:22:5e:6b:8e:13:05:f4:ed:87:
         87:16:0b:47:dc:0b:b7:bd:e6:f7:3f:2a:36:bd:47:55:0f:37:
         d5:5a:65:4e:bf:eb:94:e4:14:b1:c5:50:34:04:74:09:eb:91:
         a5:22:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:33 2025 by rpki-client