This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          uEv09VECpMj8ljJ6DTrNi2Sfe4yi2aPnbplJn9JfsEA=
Subject key identifier:   8C:DE:64:0B:69:26:B0:77:CA:B4:DF:C5:9B:D8:1A:06:EC:5E:8D:A2
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       327A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          3271
Signing time:             Mon 22 Dec 2025 15:17:45 +0000
Manifest this update:     Mon 22 Dec 2025 15:17:44 +0000
Manifest next update:     Mon 29 Dec 2025 15:17:44 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: OO9cnMZWOH9inxwSBpVTv+dK7xcvFUi8hQW9EKiM9Rg=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12922 (0x327a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: Dec 22 15:17:44 2025 GMT
            Not After : Dec 29 15:17:44 2025 GMT
        Subject: CN=69496118-5fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:29:72:22:24:f0:0f:7e:4b:ed:6b:6d:19:
                    78:70:d6:f2:a9:96:41:2a:93:72:7d:80:68:ef:90:
                    bf:12:0c:3a:cb:90:c2:5e:97:07:56:f1:f9:ea:a5:
                    43:96:62:9e:24:7d:55:b2:92:3d:76:ec:71:20:f7:
                    27:cb:d1:77:79:be:c2:66:d7:c3:88:5f:84:38:22:
                    ba:72:d0:75:23:5c:e9:b8:c2:a1:b8:74:90:e1:df:
                    0f:7c:1a:61:eb:76:68:dc:97:2a:e9:27:3b:d2:0c:
                    de:56:24:18:db:02:4d:57:48:50:a6:a9:c2:bc:27:
                    10:85:b3:38:f8:d0:64:82:48:a8:79:7d:01:8e:47:
                    5e:ae:31:75:7f:12:2f:06:40:fe:c5:9b:48:73:6e:
                    d2:0e:83:84:3f:a8:d6:0b:1b:b9:a7:28:84:34:e0:
                    b7:0a:2d:d0:50:ad:ed:1d:33:84:95:2b:12:08:26:
                    64:21:d3:dd:ed:d7:8b:95:1e:8b:b3:6f:82:cf:72:
                    5a:43:e9:b5:0d:41:f6:70:81:e5:55:1c:41:ab:40:
                    92:16:c6:3e:8c:b5:b2:c6:a6:82:4c:b1:07:a8:e1:
                    e5:19:b1:29:e8:bd:0a:f3:f8:93:e9:a4:a3:fb:3b:
                    d6:b6:dd:fe:52:a7:cf:af:3b:c9:de:a3:59:a6:b6:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DE:64:0B:69:26:B0:77:CA:B4:DF:C5:9B:D8:1A:06:EC:5E:8D:A2
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:2e:6b:e9:88:c2:81:ca:44:10:2c:e3:58:02:f7:47:82:
         34:06:42:13:59:3f:3b:2a:04:ee:a5:a2:84:1d:d3:32:82:95:
         a4:6f:ee:14:b8:dc:cb:c7:c0:57:c6:a5:d1:8b:16:30:18:c8:
         30:c9:12:a1:b4:bd:df:1c:50:b6:21:ba:2a:cc:71:2b:e0:8f:
         a1:08:b2:be:ae:5c:9f:51:81:d9:8d:b8:b6:3a:5c:25:8f:bf:
         e8:e0:e0:24:fd:c7:1c:5a:61:0d:6c:12:30:8e:06:c9:cb:ae:
         5f:ea:f4:b1:b7:b7:d3:25:55:d5:5a:17:91:4f:7e:39:ef:a7:
         82:2c:ce:ba:63:c9:36:c5:db:96:61:69:45:d8:52:71:65:94:
         06:67:38:de:df:ca:13:d4:fa:43:d6:5b:78:0c:03:b0:29:ba:
         4a:bf:75:65:d3:c1:9f:e5:53:d3:3c:e3:9a:60:a4:e4:84:14:
         8b:69:d7:82:1c:40:3e:72:33:87:b9:e7:77:3d:ff:d7:9e:b0:
         af:cd:2d:57:fe:46:e9:6e:2e:9e:c7:e4:62:9d:99:00:49:d5:
         97:9c:51:ff:b0:d7:e5:3a:16:70:e1:ea:9d:7a:11:96:cc:c4:
         a4:f0:4b:5d:8e:fb:b5:5c:49:31:41:a6:56:06:91:d7:4e:d7:
         37:16:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:45:25 2025 by rpki-client