This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          809ZruYYR0O9loy8UdgGWIuse1Hj6Loe64DNncxKht8=
Subject key identifier:   D2:81:87:EF:7D:72:CE:E6:C8:9A:9A:7F:F1:3A:44:61:ED:1B:D5:9E
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          C4
Signing time:             Wed 03 Dec 2025 04:11:14 +0000
Manifest this update:     Wed 03 Dec 2025 04:11:14 +0000
Manifest next update:     Wed 10 Dec 2025 04:11:14 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: nTDfmucEsDKbnuWsaThWfLVCsxR9qZboT+1J7bIZXnE=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Dec  3 04:11:14 2025 GMT
            Not After : Dec 10 04:11:14 2025 GMT
        Subject: CN=692fb862-6c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:88:4b:f6:8d:f0:cc:17:c4:92:4d:32:e9:
                    f3:c9:02:8c:35:0d:7b:00:27:fe:c7:db:d2:e6:e7:
                    d5:2b:2b:e5:18:dc:f4:db:36:8d:9d:93:ae:21:02:
                    1f:47:9f:76:58:95:69:15:d4:2b:64:aa:a7:ae:03:
                    2b:68:8f:c0:85:15:96:a4:24:e3:8f:a9:a3:08:f9:
                    92:84:bb:b3:67:1f:3f:d1:b7:df:82:2d:03:34:e3:
                    a7:08:e2:23:91:f0:c0:23:4d:d9:e1:31:a0:81:ea:
                    e9:31:e2:58:16:33:11:9a:b2:15:c9:81:1c:7a:3b:
                    fe:d0:17:54:49:ee:be:50:2b:c1:3a:87:c2:20:cc:
                    1f:f9:d7:b8:b9:5a:f9:b7:fe:b5:0a:a1:60:c8:d4:
                    1f:25:e3:e5:e0:23:7a:94:7d:d6:23:98:3a:a5:15:
                    fd:6c:93:b1:90:1f:3b:d2:25:b3:6f:f8:7a:79:e3:
                    7e:a2:4c:20:bd:6b:4a:e9:34:6e:2d:bb:6a:7f:93:
                    91:ce:3d:91:b9:15:71:26:a5:a6:9d:d4:3a:bb:c0:
                    7e:88:50:3f:e2:7b:ff:99:e9:e2:90:fb:8c:4a:98:
                    6d:13:4b:48:04:4c:d0:75:82:77:bc:72:ea:5a:4c:
                    ea:eb:aa:87:64:fc:4e:8b:f5:77:d7:21:f6:49:d9:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:87:EF:7D:72:CE:E6:C8:9A:9A:7F:F1:3A:44:61:ED:1B:D5:9E
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:1d:80:59:a9:02:2a:85:e8:fd:fe:30:1f:d7:47:64:98:
         5e:b9:d9:44:33:2b:b7:68:f9:5c:3b:eb:d7:12:2a:fc:fb:9e:
         7a:48:81:cd:90:0f:9f:e9:21:ae:39:29:7f:e7:dc:72:00:e7:
         c5:ff:09:48:7a:d1:ff:f6:88:74:34:ea:f8:39:b3:63:6b:3b:
         fb:db:64:d4:de:b5:60:88:dc:b3:cc:4d:8e:12:58:59:94:49:
         53:4a:4e:0c:f8:b1:a5:b9:56:13:3b:6f:3b:ac:aa:4a:ba:ac:
         45:b0:55:88:4d:ec:19:0c:69:48:22:6b:13:44:dd:14:6e:c5:
         a7:f3:b6:72:2e:4f:ac:5d:7a:80:bc:3f:17:51:e3:73:d6:29:
         c3:3e:38:50:dd:d0:8c:45:55:74:6c:64:b3:50:a5:65:c2:07:
         10:67:17:cf:09:64:79:f1:3b:2f:92:79:f6:59:67:20:9c:d5:
         fe:c1:5b:80:e0:56:6d:6f:59:ab:42:de:f3:fa:6b:bf:bb:b3:
         e6:bd:5d:bb:b6:c3:1b:06:46:56:ba:ab:c0:78:95:be:5d:ba:
         14:b6:24:b3:36:4c:67:2b:28:77:79:0b:1c:86:65:c3:e8:ad:
         5c:23:bf:a9:24:89:91:24:4b:6f:97:c3:04:76:78:49:46:f6:
         6e:81:ca:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQxNjQxMTAvBgNVBAUTKEE4NzM3MjAxRkE0QzY0RkEwMDU2NDAyMkRCMDZGNjBF
N0VFMkNEMEQwHhcNMjUxMjAzMDQxMTE0WhcNMjUxMjEwMDQxMTE0WjAYMRYwFAYD
VQQDEw02OTJmYjg2Mi02YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnE2IS/aN8MwXxJJNMunzyQKMNQ17ACf+x9vS5ufVKyvlGNz02zaNnZOuIQIf
R592WJVpFdQrZKqnrgMraI/AhRWWpCTjj6mjCPmShLuzZx8/0bffgi0DNOOnCOIj
kfDAI03Z4TGggerpMeJYFjMRmrIVyYEcejv+0BdUSe6+UCvBOofCIMwf+de4uVr5
t/61CqFgyNQfJePl4CN6lH3WI5g6pRX9bJOxkB870iWzb/h6eeN+okwgvWtK6TRu
Lbtqf5ORzj2RuRVxJqWmndQ6u8B+iFA/4nv/menikPuMSphtE0tIBEzQdYJ3vHLq
Wkzq66qHZPxOi/V31yH2SdmiCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKBh+99
cs7myJqaf/E6RGHtG9WeMB8GA1UdIwQYMBaAFKhzcgH6TGT6AFZAItsG9g5+4s0N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BNjhFMjY0RUEx
ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQb0FWa0FpMndiMkRuN2l6
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDE2NC9BNjhFMjY0RUExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQ
b0FWa0FpMndiMkRuN2l6UTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+JR2AWakCKoXo/f4wH9dHZJheudlEMyu3aPlcO+vXEir8+556SIHN
kA+f6SGuOSl/59xyAOfF/wlIetH/9oh0NOr4ObNjazv722TU3rVgiNyzzE2OElhZ
lElTSk4M+LGluVYTO287rKpKuqxFsFWITewZDGlIImsTRN0UbsWn87ZyLk+sXXqA
vD8XUeNz1inDPjhQ3dCMRVV0bGSzUKVlwgcQZxfPCWR58Tsvknn2WWcgnNX+wVuA
4FZtb1mrQt7z+mu/u7PmvV27tsMbBkZWuqvAeJW+XboUtiSzNkxnKyh3eQschmXD
6K1cI7+pJImRJEtvl8MEdnhJRvZugcoh
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:28 2025 by rpki-client