This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
File:                     qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json)
Hash identifier:          717Wh1udBQ1HmJVFtdUqOMQHfS3TuBoVFIBafGFNeiw=
Subject key identifier:   54:AA:4B:4C:C3:30:42:C1:28:92:E5:F8:DC:F6:4F:D1:B3:6B:49:51
Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6
Certificate issuer:       /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
Manifest number:          03FB
Signing time:             Thu 18 Dec 2025 23:46:16 +0000
Manifest this update:     Thu 18 Dec 2025 23:46:16 +0000
Manifest next update:     Thu 25 Dec 2025 23:46:16 +0000
Files and hashes:         1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: pQu6V/TcLh7m4mBHuRREvhhXOeCBm6+LQu1A/R1DgPY=)
                          2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl
                          rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
        Validity
            Not Before: Dec 18 23:46:16 2025 GMT
            Not After : Dec 25 23:46:16 2025 GMT
        Subject: CN=69449248-3428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:37:75:f5:b9:32:8c:82:d2:da:be:17:cb:
                    cf:c0:21:98:0f:a2:37:bc:dc:44:2c:5d:a8:e9:b4:
                    e5:8e:c6:4f:fa:d2:c7:ca:49:0d:52:83:b5:ce:d2:
                    ab:9b:52:18:8e:df:d0:4c:27:e3:6a:58:ad:55:ab:
                    4b:8e:fa:9b:18:ef:56:70:35:7d:9e:d3:81:44:49:
                    94:ee:ca:df:df:57:40:9d:7e:71:d2:c2:85:aa:f4:
                    5b:80:8e:71:f5:22:7a:63:16:c8:92:4e:87:da:85:
                    70:e5:0b:68:7e:54:1c:5e:5d:ac:52:64:c8:3c:8c:
                    fc:39:9f:79:73:3d:7d:a6:e8:5a:7f:7d:f6:68:fe:
                    9e:39:39:17:c3:7b:b2:6d:be:8e:c2:15:55:16:4e:
                    a1:e4:43:ef:b9:13:07:41:60:81:6e:2c:af:81:df:
                    0a:aa:f3:eb:29:dc:a4:37:e4:db:32:be:8c:9f:75:
                    1f:5c:8e:5a:20:c4:95:bb:de:09:e0:e5:0f:da:4e:
                    b4:4b:7c:fd:3c:36:e9:a2:77:71:8a:e2:b0:b3:e1:
                    a4:23:d4:a0:f5:79:85:28:41:3b:6b:60:d8:f0:e2:
                    da:b2:de:78:4c:19:e5:8d:fd:6c:2b:6f:4e:5f:00:
                    5d:52:ef:65:7d:4a:60:fc:33:ae:1b:86:20:e0:3b:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AA:4B:4C:C3:30:42:C1:28:92:E5:F8:DC:F6:4F:D1:B3:6B:49:51
            X509v3 Authority Key Identifier:
                keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f1:00:8c:b8:2d:7f:5e:aa:43:26:36:42:74:c1:6e:ad:a1:
         db:83:1c:d0:e7:6c:76:cd:41:61:a6:99:13:27:ac:ed:aa:14:
         e1:59:1e:82:ef:f5:f1:07:53:94:64:db:67:05:7e:bf:6f:f8:
         02:44:5f:0b:d5:d4:b3:d1:9c:01:3e:98:cb:8a:10:d4:fc:3b:
         11:16:70:a8:7a:f6:80:03:00:73:94:9a:ee:ed:fb:cb:23:02:
         ea:7c:7a:a7:a6:fe:34:b4:ca:82:e7:32:17:49:cc:84:6a:66:
         e9:ba:c2:f4:77:da:d5:67:fd:73:70:11:e8:6d:ec:24:f6:e3:
         af:ee:1b:57:5a:b3:e5:d2:32:09:52:11:74:25:3e:91:58:89:
         5f:a6:16:e5:7d:e3:02:91:96:60:ef:62:ff:ec:a3:8f:7e:62:
         28:9f:4c:26:d4:e9:cd:07:44:03:2c:45:cd:49:d9:f9:bd:92:
         25:5f:a4:b2:b4:cb:4f:f5:6a:31:b1:3b:66:5e:41:37:b9:8e:
         47:1c:9a:4c:32:f5:23:85:7b:54:6c:6a:a9:f6:78:2b:3a:b3:
         7c:63:51:db:8b:1a:04:9a:dc:2f:40:31:1b:0a:f9:cf:f1:73:
         29:af:f1:82:22:42:9a:96:64:31:38:76:f9:6b:5c:16:3d:3b:
         a7:17:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:11:53 2025 by rpki-client