This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          NioWflc5jbWiOrVJtPDSSGPjMEIidcWxOuX3WoC7HU0=
Subject key identifier:   93:28:31:61:67:E4:1F:0E:6A:F1:FB:80:6C:64:E6:F0:71:F1:6D:1F
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          07F4
Signing time:             Mon 22 Dec 2025 20:26:41 +0000
Manifest this update:     Mon 22 Dec 2025 20:26:40 +0000
Manifest next update:     Mon 29 Dec 2025 20:26:40 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: P8ZZO5XuHXUhFXEXAMCv0tfFnEDgkTSHLUMjKvPKauo=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: Dec 22 20:26:40 2025 GMT
            Not After : Dec 29 20:26:40 2025 GMT
        Subject: CN=6949a980-dfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:83:65:45:50:ab:b5:43:ff:df:51:f5:98:
                    84:0b:3d:5c:73:7f:75:93:36:23:02:35:0a:b5:a7:
                    f5:e4:ad:55:76:43:9e:2c:99:5b:ed:59:ca:ca:b9:
                    30:67:6f:4d:39:f4:83:94:d8:80:6e:b9:5c:ba:66:
                    f6:38:04:07:e1:8b:bf:45:ae:35:0c:61:97:34:92:
                    02:c2:76:cc:74:74:04:71:2f:d4:2b:4d:fc:b9:b0:
                    69:d7:a5:8c:0d:82:f0:88:ab:ad:c6:96:78:53:d2:
                    a8:21:ce:43:59:da:42:05:a3:ae:2a:62:03:a2:14:
                    23:43:59:15:cc:86:2c:05:44:2f:ed:8e:9d:81:11:
                    e8:46:ca:e9:50:87:89:ce:58:d7:bb:9e:f9:de:ea:
                    f4:e3:94:9b:f0:b5:1f:62:5c:19:b2:05:ff:37:87:
                    bf:21:59:92:b2:2e:ec:ef:3b:f6:e2:67:ef:3b:f0:
                    b0:16:31:b0:35:4a:98:ce:fc:5a:52:e5:3c:a7:ca:
                    18:71:15:33:9b:fc:e6:e2:43:5c:82:c0:50:5b:62:
                    02:5d:0f:f9:65:91:52:35:eb:c4:4b:68:40:68:7e:
                    19:1f:67:85:9a:47:59:e2:8f:73:09:a7:f5:f3:5a:
                    c8:9b:38:51:09:b0:a5:67:ed:c3:77:0e:74:1d:3a:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:31:61:67:E4:1F:0E:6A:F1:FB:80:6C:64:E6:F0:71:F1:6D:1F
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:7b:bc:76:c3:4c:62:60:99:c1:ae:bb:ab:71:f7:38:90:
         47:09:93:5a:29:4e:5e:90:a1:45:e8:a2:c0:fd:a6:92:a5:12:
         c2:61:42:23:78:2d:02:93:ec:75:df:51:2f:de:a6:4f:5b:d5:
         1c:f8:d9:3f:5b:1d:5b:02:ae:24:24:ed:64:87:f3:6e:cb:6a:
         e6:99:74:64:32:52:9e:2d:52:01:7c:64:9c:34:a1:09:19:13:
         62:0d:0f:fa:9e:e8:c5:8e:4f:3b:6a:d1:f7:7c:91:a6:29:f6:
         83:1e:38:c5:b7:54:18:2a:3d:77:f3:0a:32:81:10:46:f8:55:
         fe:19:c7:e6:64:89:12:27:79:f4:86:cf:5c:c8:b7:5e:3e:e1:
         4e:b3:72:38:7d:1f:bf:87:ae:49:2b:c7:ff:16:47:6d:2b:d5:
         2a:f0:2c:8e:79:34:77:af:5f:93:ef:4d:f8:28:7c:74:65:42:
         4e:39:a9:aa:ad:ef:4b:e5:5e:f5:56:fb:e0:51:20:d5:2a:5a:
         e1:a9:0a:e1:0a:30:06:b7:6a:81:ef:7b:25:38:12:ef:df:f5:
         55:8b:66:78:15:52:e6:2e:00:50:6b:25:8e:1c:1c:d1:8a:29:
         37:a6:17:4e:06:48:b8:4a:4a:81:c2:1b:d2:fa:04:bd:23:c8:
         9a:03:b4:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix
QUU1NDQyMzkwHhcNMjUxMjIyMjAyNjQwWhcNMjUxMjI5MjAyNjQwWjAYMRYwFAYD
VQQDDA02OTQ5YTk4MC1kZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSODZUVQq7VD/99R9ZiECz1cc391kzYjAjUKtaf15K1VdkOeLJlb7VnKyrkw
Z29NOfSDlNiAbrlcumb2OAQH4Yu/Ra41DGGXNJICwnbMdHQEcS/UK038ubBp16WM
DYLwiKutxpZ4U9KoIc5DWdpCBaOuKmIDohQjQ1kVzIYsBUQv7Y6dgRHoRsrpUIeJ
zljXu5753ur045Sb8LUfYlwZsgX/N4e/IVmSsi7s7zv24mfvO/CwFjGwNUqYzvxa
UuU8p8oYcRUzm/zm4kNcgsBQW2ICXQ/5ZZFSNevES2hAaH4ZH2eFmkdZ4o9zCaf1
81rImzhRCbClZ+3Ddw50HTpiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMoMWFn
5B8OavH7gGxk5vBx8W0fMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF
QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM
Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMb3u8dsNMYmCZwa67q3H3OJBHCZNaKU5ekKFF6KLA/aaSpRLCYUIj
eC0Ck+x131Ev3qZPW9Uc+Nk/Wx1bAq4kJO1kh/Nuy2rmmXRkMlKeLVIBfGScNKEJ
GRNiDQ/6nujFjk87atH3fJGmKfaDHjjFt1QYKj138woygRBG+FX+GcfmZIkSJ3n0
hs9cyLdePuFOs3I4fR+/h65JK8f/FkdtK9Uq8CyOeTR3r1+T7034KHx0ZUJOOamq
re9L5V71VvvgUSDVKlrhqQrhCjAGt2qB73slOBLv3/VVi2Z4FVLmLgBQayWOHBzR
iik3phdOBki4SkqBwhvS+gS9I8iaA7RV
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:57 2025 by rpki-client