This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          IXj2REC/kbcXd7L4MJ9jOCN/8rosckWHr5E4z9JQ89A=
Subject key identifier:   27:7D:D4:DC:97:3F:43:74:1D:8D:39:21:CF:90:EC:24:13:E1:39:DE
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          0140
Signing time:             Sun 07 Dec 2025 02:49:06 +0000
Manifest this update:     Sun 07 Dec 2025 02:49:06 +0000
Manifest next update:     Sun 14 Dec 2025 02:49:06 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: xpLSzIMDtINtEOs1I1WQc5LXGfOq2af9lr0SH4Kwako=)
                          2: 47142068221311EFB680F113C4F9AE02.roa (hash: eOIRibnSZ7zb8zXpiC5OYpXytGwFP6zwa+/fbeAxOO4=)
                          3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: k3OjV98AN2SowkZ89FdDV3rmcUlNd8FyOaF8PHB5wqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Dec  7 02:49:06 2025 GMT
            Not After : Dec 14 02:49:06 2025 GMT
        Subject: CN=6934eb22-8c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:e4:c3:4a:40:1b:36:38:67:ce:6a:45:97:
                    c2:af:f0:fb:76:74:4a:9a:55:bd:96:5a:86:d0:da:
                    79:60:2f:bc:d3:e7:ce:7b:3c:50:be:6b:c6:48:f3:
                    38:6d:89:ef:14:67:2a:37:6e:28:1a:f2:17:ea:0b:
                    cf:0e:c1:2c:12:82:4b:ca:3a:33:30:10:7a:7f:d0:
                    87:cf:19:04:66:0d:47:eb:30:97:65:e0:72:76:7a:
                    19:74:26:67:c9:a2:75:31:f3:78:5e:7c:44:53:2e:
                    f3:67:9c:16:7b:14:55:b4:b5:62:e7:13:7a:f9:d1:
                    25:78:4d:a5:63:e6:a6:f4:6d:94:fc:f9:f9:65:da:
                    48:e7:d5:ef:35:9d:bd:af:de:5f:a2:3f:d5:c9:e7:
                    46:5e:95:43:f3:79:10:6f:0e:b9:0a:d7:9d:78:81:
                    57:bc:b6:c8:93:49:8c:a0:69:94:95:3f:59:eb:28:
                    a3:0a:07:78:67:c3:7d:6b:d3:60:db:48:b4:57:4c:
                    74:52:8a:f9:fb:d9:bc:36:d0:59:c6:b1:0d:b1:1a:
                    e8:87:21:4b:06:16:f6:59:34:f5:f5:11:2a:c9:4d:
                    de:e0:5b:30:1c:86:50:0d:76:98:d4:ce:9d:56:39:
                    c9:6a:4c:86:51:82:5c:f4:f9:2f:a7:7a:09:5d:25:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7D:D4:DC:97:3F:43:74:1D:8D:39:21:CF:90:EC:24:13:E1:39:DE
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:21:64:db:26:01:75:e2:21:56:13:b6:d5:68:49:33:fb:0f:
         ce:3c:f5:77:98:47:4a:30:75:44:44:13:36:03:9c:b6:fd:03:
         35:e0:37:f0:ee:0e:2a:5c:aa:14:db:ff:e7:2c:b9:f8:43:25:
         dc:a3:ef:4a:ad:ed:70:85:6c:33:f3:60:c0:1c:dd:49:d2:14:
         1a:d6:a3:48:26:b2:59:6a:fe:1c:36:39:53:41:dd:22:e8:30:
         21:72:f4:c1:84:69:f8:c4:60:b3:f4:df:df:2f:e0:6a:41:64:
         d4:4b:4b:24:2d:9b:0c:05:1a:8a:aa:eb:41:34:4e:06:ee:2f:
         a6:54:05:db:a4:56:7c:b2:b9:21:12:be:ed:4e:75:3d:5e:ee:
         58:c9:a6:fa:79:58:6e:9f:29:8e:87:1e:c1:4a:e2:cf:d9:28:
         2e:de:1d:e2:b4:82:49:dc:b3:3d:1d:8d:12:55:74:13:93:25:
         c6:1a:36:13:c2:ab:2d:1f:e7:f1:b5:a2:ac:e1:5d:3b:bc:f2:
         ea:c0:9c:50:3d:9a:82:7c:3b:39:c5:fd:be:af:6e:a0:da:bd:
         42:8f:3b:9d:62:37:c9:73:82:1e:07:cd:97:f5:6c:74:3b:03:
         e1:44:31:c9:99:cd:9a:27:16:35:ca:ef:e6:ca:8a:9f:96:0a:
         81:0e:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:53:02 2025 by rpki-client