This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
File:                     qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft (raw, json)
Hash identifier:          tOI7yKn7jNv3LHd63GRd3XCXTHr3PzLCgheMKChmaCI=
Subject key identifier:   54:7E:2F:52:B0:72:55:9C:0A:2E:E4:64:AA:F7:EE:85:24:6E:38:68
Authority key identifier: AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84
Certificate issuer:       /CN=A916DFDD/serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
Manifest number:          63
Signing time:             Tue 23 Dec 2025 05:56:02 +0000
Manifest this update:     Tue 23 Dec 2025 05:56:02 +0000
Manifest next update:     Tue 30 Dec 2025 05:56:02 +0000
Files and hashes:         1: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl (hash: zUh4l2MIshvgoGCLYqZ7uz15/twNeGW77has3vu676g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl
                          rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DFDD, serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884
        Validity
            Not Before: Dec 23 05:56:02 2025 GMT
            Not After : Dec 30 05:56:02 2025 GMT
        Subject: CN=694a2ef2-8870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:0e:8f:9c:31:0a:61:b3:69:d3:b3:3c:98:
                    7a:72:d4:c6:93:8c:2f:d1:95:8f:84:39:50:a1:91:
                    c8:00:6b:f5:b7:c6:f4:d5:6d:97:84:de:55:ca:27:
                    57:c0:02:3c:57:e2:f6:3f:70:a0:d7:f2:7b:7a:f8:
                    0f:6f:36:f8:9a:6c:74:19:fb:69:57:e1:16:f3:78:
                    59:a0:70:fa:3c:04:63:40:d8:c5:67:ef:40:ef:4e:
                    97:8b:a8:3a:90:5f:8c:f6:56:31:cc:1f:fd:1e:0e:
                    3b:b9:f6:04:ed:2e:db:e4:1c:7d:60:a6:9f:4e:e2:
                    9f:1b:20:ce:2e:e8:61:cb:91:77:f2:cf:4c:db:2e:
                    3c:c4:dc:26:3e:b1:d2:93:4b:af:2f:1a:57:9a:28:
                    73:2a:a5:c8:9e:ab:ac:76:fc:cf:06:c3:6e:c9:d1:
                    bc:ef:c8:87:f3:d5:f8:f9:01:d5:76:41:a6:47:dd:
                    a8:4f:b0:39:ce:4d:d9:51:d6:5b:af:27:c9:85:67:
                    3e:39:79:51:f9:44:7d:7f:03:fe:09:e2:cb:88:1f:
                    07:c5:d6:08:eb:f9:d8:83:f3:4c:00:28:9c:62:8d:
                    10:6f:a7:40:15:1e:11:67:e4:d7:e1:0f:0c:ad:dd:
                    0a:d4:4a:cb:0f:2f:f8:52:6e:49:df:ee:8d:66:40:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:2F:52:B0:72:55:9C:0A:2E:E4:64:AA:F7:EE:85:24:6E:38:68
            X509v3 Authority Key Identifier:
                keyid:AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:09:df:02:93:b8:02:c3:af:63:50:51:fc:25:37:e9:46:8e:
         27:db:db:bd:b6:07:8e:34:9e:32:8d:91:65:6d:12:83:47:2e:
         a0:21:5f:9e:d5:be:bc:e3:bf:7d:3f:6e:a7:de:a2:78:a7:a3:
         09:e9:c1:fb:54:90:6d:03:3c:d6:71:71:3e:6a:ff:0b:32:de:
         6d:f9:d8:5c:d0:c8:6f:5e:dd:58:ee:f9:e4:cd:5d:02:2d:9c:
         0b:c4:34:5d:24:b3:f5:af:86:28:1e:13:7f:14:19:34:01:30:
         09:37:f2:19:dc:31:3b:48:c7:40:21:40:ee:84:27:8b:24:40:
         96:36:2e:17:9d:a0:96:0e:50:65:6d:42:51:fc:88:62:6a:73:
         49:fe:30:25:98:97:95:f9:7e:44:da:72:bf:02:3d:73:26:8a:
         c6:fb:de:60:c4:ac:d4:41:01:73:a7:d6:4c:f7:e7:c3:ce:e7:
         22:f2:f5:ed:4c:06:ed:79:f1:38:9f:d2:5f:75:1d:b6:18:c8:
         1f:23:74:5a:56:8a:fd:86:1a:10:f6:8b:fc:db:c6:f7:d9:54:
         d9:30:1d:a8:a7:8f:ba:c3:27:d1:ea:fc:1e:26:0a:e6:9f:fb:
         f8:9d:76:22:96:9b:f5:76:fe:04:15:b5:09:58:79:79:bd:63:
         33:ec:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:29 2025 by rpki-client