This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File:                     QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier:          6UT0Ht+nvjEL15FYr5xu8fFhCgRIv16nDtacf33X3XQ=
Subject key identifier:   3F:EF:39:1F:8F:C6:CB:D6:57:8C:68:B3:11:7C:8D:7D:5A:5B:B4:0F
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer:       /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number:          C2
Signing time:             Wed 03 Dec 2025 01:39:41 +0000
Manifest this update:     Wed 03 Dec 2025 01:39:41 +0000
Manifest next update:     Wed 10 Dec 2025 01:39:41 +0000
Files and hashes:         1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: 6d4Uv1B6jRQBLby0CJRseuLtwNVV34UWsajIJhFowqE=)
                          2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mZ/ViBjIVIPe+nE/GVSLUGS2VukLj6yBRBsTJ8+0mQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 01:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
        Validity
            Not Before: Dec  3 01:39:41 2025 GMT
            Not After : Dec 10 01:39:41 2025 GMT
        Subject: CN=692f94dd-3d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:58:55:a2:1d:a3:fe:0a:30:57:bc:36:3a:
                    bd:9f:78:83:ef:02:3b:f1:4c:fc:47:6e:cd:6d:cf:
                    cf:8b:68:35:f0:17:45:a4:51:a1:86:bf:8d:78:05:
                    81:0a:6a:fb:62:c0:be:44:f3:31:04:dd:29:07:84:
                    ab:d9:1f:5d:0c:a8:f4:3c:0a:ef:51:a4:b6:d2:7d:
                    72:2c:5b:9d:45:5b:1d:da:1c:ae:27:42:aa:0c:ff:
                    1c:e3:45:d9:37:f5:0e:f3:ed:b2:89:01:96:d1:2e:
                    c7:e2:f0:4c:25:f1:59:7c:df:e1:83:74:ea:60:df:
                    4d:f9:9a:93:74:9e:ae:37:75:09:36:4c:53:6c:61:
                    b1:39:b5:0c:34:e6:b4:de:eb:99:08:ec:f0:1e:68:
                    0f:9b:4e:45:c6:88:e5:2d:3d:fd:0e:3b:b9:23:bc:
                    60:cb:d1:6b:e7:30:76:59:ec:30:f1:d2:57:17:25:
                    88:7e:22:2a:58:63:68:26:13:ab:c7:80:08:50:6c:
                    e7:e5:37:36:84:bc:cc:bc:a2:12:27:9b:03:5d:da:
                    35:bf:be:62:8f:ff:b8:83:60:37:3b:82:f9:34:21:
                    29:4a:21:4d:2e:09:53:f0:33:08:75:a2:03:98:69:
                    2c:06:84:a9:aa:7d:c4:ae:60:7e:ae:ef:dd:68:24:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EF:39:1F:8F:C6:CB:D6:57:8C:68:B3:11:7C:8D:7D:5A:5B:B4:0F
            X509v3 Authority Key Identifier:
                keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:5a:57:39:4b:85:52:9a:5b:b3:29:14:a9:5b:81:2a:ca:
         c7:a4:e4:a5:47:2f:d7:89:9b:5b:ef:0b:ab:7a:4c:35:2e:3f:
         ff:b5:f0:2e:33:ae:f0:74:32:b8:e6:4a:44:d2:75:81:5b:3c:
         5b:4a:f8:a0:f5:73:87:9c:f2:df:97:fd:1f:97:47:ff:0b:15:
         8e:ef:7d:6b:5d:1c:cb:87:72:f5:f3:75:e1:40:fe:d8:88:8e:
         82:b9:be:cf:a7:14:25:59:a7:df:7a:ec:71:0b:1f:b7:ad:19:
         c6:00:4b:11:a8:70:8b:a1:3c:d2:32:09:76:1e:e2:d0:23:db:
         bb:fe:c7:ee:a5:93:9b:ce:71:2a:be:63:7d:73:86:90:53:9b:
         68:59:11:53:59:f9:4f:7c:64:de:80:1d:fe:08:ab:2d:13:d1:
         b7:cc:ad:fd:14:2a:29:6d:d8:fc:78:7e:c3:f9:f2:e8:3d:c2:
         3f:b7:fe:02:b1:ab:17:c5:f1:fc:06:f0:10:a2:3f:d5:02:eb:
         fd:b1:30:b9:87:ca:1b:13:bd:2e:1c:af:5c:60:58:e9:4e:ab:
         a1:98:fc:bc:be:7b:3d:3c:f3:10:39:bb:e5:d9:b8:2e:40:32:
         68:99:2a:84:a4:87:7b:cf:0d:b6:93:01:3f:63:17:5b:85:e2:
         c1:53:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:57 2025 by rpki-client