This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File:                     qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier:          Bhd2zpISJXMXgf/76E/5oFyYZ9CAmd2JWt+tfzqAz8Q=
Subject key identifier:   E3:71:87:35:0D:D3:C6:BC:9F:F3:B3:F5:F8:FB:7F:01:73:7B:7C:1C
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number:          0139
Signing time:             Tue 23 Dec 2025 03:37:03 +0000
Manifest this update:     Tue 23 Dec 2025 03:37:03 +0000
Manifest next update:     Tue 30 Dec 2025 03:37:03 +0000
Files and hashes:         1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: cnQnkYdLrRTChUvXZCFKvodveGSiyr2Fgh/qlVFhU30=)
                          2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: GnAy7gUWULKK+0ha0Z5VnbvN7dc+3rJnS4hS/5snCUs=)
                          3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 32ChZuN5aLmUO2MNOxKOn9C6wDIBYJGI4WGeVTj7tjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Dec 23 03:37:03 2025 GMT
            Not After : Dec 30 03:37:03 2025 GMT
        Subject: CN=694a0e5f-0ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:41:5b:ae:7e:c3:e2:99:b8:17:65:f1:91:
                    b8:12:a7:22:7b:f1:6b:90:e9:29:87:d1:a8:58:69:
                    d2:ef:60:a5:e0:17:4a:45:e5:0a:53:06:78:0f:e2:
                    40:21:ca:b2:07:c1:fe:6c:b9:12:aa:5d:e2:9c:06:
                    a8:1b:07:d7:fc:51:31:9e:04:78:4e:e5:46:c5:97:
                    1f:06:51:e2:c5:28:74:11:82:c4:23:67:a7:3d:28:
                    c5:5a:66:c1:94:b8:9b:e0:21:40:01:23:34:73:80:
                    49:ed:ad:72:40:47:39:66:ec:30:e3:bc:c7:7b:a4:
                    74:07:a4:6b:e2:4d:e2:ac:65:61:8b:8d:eb:d8:32:
                    aa:09:d7:bb:ca:57:f7:10:e3:47:71:fb:bf:07:c4:
                    54:32:f7:1c:4a:83:e0:78:15:7c:56:1d:1c:c4:d8:
                    40:6a:98:01:88:df:38:e6:92:af:eb:02:fa:f3:91:
                    32:d2:35:78:8f:10:39:d6:ea:08:08:a7:06:48:6b:
                    ca:50:6d:0e:64:b9:29:dd:e8:be:47:58:8f:bf:26:
                    24:17:7f:3b:47:1c:29:1d:fe:28:e4:c8:4b:98:51:
                    c8:e1:1a:4d:29:e8:5a:33:e0:a4:33:a6:bd:a0:15:
                    5b:f7:df:70:a9:a3:e6:e4:77:09:d4:11:ee:76:5d:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:71:87:35:0D:D3:C6:BC:9F:F3:B3:F5:F8:FB:7F:01:73:7B:7C:1C
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:58:91:66:68:61:d4:29:62:a3:e2:0d:dc:3e:44:22:48:
         67:2c:b8:bf:8e:ff:a4:ac:d7:f0:34:e7:93:30:2a:51:1b:0e:
         9f:f9:ab:4a:3f:9a:02:39:0b:2d:cf:99:0e:25:fa:9e:f5:87:
         ea:59:56:97:f9:75:18:fd:18:6e:37:c3:0e:63:29:78:4d:62:
         10:9d:be:ce:c2:55:36:aa:10:a5:59:e4:83:b6:6b:36:f4:a3:
         20:03:f4:92:a7:d1:ca:56:99:a3:4e:f8:3e:a5:2f:f4:fd:1e:
         c8:25:4d:ae:d3:4b:6f:99:c0:f5:fb:49:49:3b:32:3c:8a:ea:
         62:9b:fe:21:52:57:b4:98:f9:da:fc:9a:4b:be:57:48:96:ae:
         47:53:52:04:75:ab:ae:70:32:e0:07:cd:89:5a:c2:dd:1c:a4:
         56:e5:24:12:12:c5:e9:c9:de:8b:02:e0:47:e5:c4:8e:07:03:
         13:0f:34:2e:95:03:1a:58:51:a8:c4:d4:fc:ef:d7:b6:70:61:
         00:0f:56:82:0b:a7:83:26:26:30:44:9a:6a:89:c5:8c:12:41:
         e6:68:5e:c5:0c:51:ac:b5:da:1a:95:01:40:03:a7:11:04:72:
         36:60:36:1a:47:90:54:c2:c9:de:86:75:b0:32:4c:4a:05:bd:
         f2:54:a7:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4
RjU4QTc3RTUwHhcNMjUxMjIzMDMzNzAzWhcNMjUxMjMwMDMzNzAzWjAYMRYwFAYD
VQQDDA02OTRhMGU1Zi0wZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA34NBW65+w+KZuBdl8ZG4Eqcie/FrkOkph9GoWGnS72Cl4BdKReUKUwZ4D+JA
IcqyB8H+bLkSql3inAaoGwfX/FExngR4TuVGxZcfBlHixSh0EYLEI2enPSjFWmbB
lLib4CFAASM0c4BJ7a1yQEc5Zuww47zHe6R0B6Rr4k3irGVhi43r2DKqCde7ylf3
EONHcfu/B8RUMvccSoPgeBV8Vh0cxNhAapgBiN845pKv6wL685Ey0jV4jxA51uoI
CKcGSGvKUG0OZLkp3ei+R1iPvyYkF387RxwpHf4o5MhLmFHI4RpNKehaM+CkM6a9
oBVb999wqaPm5HcJ1BHudl3XGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONxhzUN
08a8n/Oz9fj7fwFze3wcMB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2
RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK
eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMRFiRZmhh1Clio+IN3D5EIkhnLLi/jv+krNfwNOeTMCpRGw6f+atK
P5oCOQstz5kOJfqe9YfqWVaX+XUY/RhuN8MOYyl4TWIQnb7OwlU2qhClWeSDtms2
9KMgA/SSp9HKVpmjTvg+pS/0/R7IJU2u00tvmcD1+0lJOzI8iupim/4hUle0mPna
/JpLvldIlq5HU1IEdauucDLgB82JWsLdHKRW5SQSEsXpyd6LAuBH5cSOBwMTDzQu
lQMaWFGoxNT879e2cGEAD1aCC6eDJiYwRJpqicWMEkHmaF7FDFGstdoalQFAA6cR
BHI2YDYaR5BUwsnehnWwMkxKBb3yVKdr
-----END CERTIFICATE-----
Generated at Thu Dec 25 04:52:07 2025 by rpki-client