This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File:                     Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier:          tbz1HKHp9UJTs76uxhkY1pHNgUQ8TXB64tV5ZZ/vyeQ=
Subject key identifier:   00:8A:17:D8:78:D4:82:1F:C6:DB:60:74:B0:DA:95:9B:DB:18:F8:F6
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number:          0112
Signing time:             Wed 03 Dec 2025 03:17:57 +0000
Manifest this update:     Wed 03 Dec 2025 03:17:57 +0000
Manifest next update:     Wed 10 Dec 2025 03:17:57 +0000
Files and hashes:         1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: FY89F7VElW89HEuI/fff1+mB70NP8UuJsWftyaZfPEI=)
                          2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=)
                          3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: Dec  3 03:17:57 2025 GMT
            Not After : Dec 10 03:17:57 2025 GMT
        Subject: CN=692fabe5-1c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:9a:f4:48:0c:56:7b:df:40:59:5d:7c:87:
                    67:ec:54:75:a9:a4:1d:1d:8c:48:6a:64:36:b1:4f:
                    ab:60:26:b2:fb:1a:05:b9:99:08:4e:95:fd:b0:f6:
                    9d:90:db:01:1f:98:a2:f2:0d:1e:10:c1:14:8c:c6:
                    b8:af:a8:67:40:ca:f5:8e:d5:7f:ca:88:8b:de:ea:
                    7b:b1:cb:7e:61:17:3d:48:c0:53:62:9d:c7:66:18:
                    48:ea:97:11:4c:6f:f2:6a:23:91:61:f5:ca:62:ce:
                    86:c8:28:12:93:fe:35:82:36:ff:43:08:17:08:06:
                    ad:7f:07:ff:41:50:e3:56:c9:d0:02:c5:a1:7d:60:
                    9d:84:58:70:fd:c0:cd:42:f3:4a:a7:f4:c4:fd:18:
                    da:fe:22:e0:76:10:d8:9d:86:be:ee:c9:e8:5d:c8:
                    ad:1c:83:78:33:c0:0f:50:1b:50:47:93:16:59:b7:
                    74:bf:12:42:78:e0:fe:4d:26:18:f2:af:67:e4:d1:
                    4f:43:4e:2d:4e:33:ca:15:4b:ba:b3:84:e1:18:0a:
                    9f:f2:bc:93:f2:c2:a0:de:67:e8:bb:f5:af:31:6d:
                    13:59:3f:a7:17:69:ed:0f:6e:52:11:62:ad:eb:48:
                    94:4e:e7:a7:f8:a8:44:57:26:6e:7a:29:4b:f5:f5:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:17:D8:78:D4:82:1F:C6:DB:60:74:B0:DA:95:9B:DB:18:F8:F6
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:3b:8b:7f:f9:c1:5c:d7:ab:6a:5e:22:db:de:a8:37:28:
         37:5b:d4:8d:6a:49:c8:00:0d:06:b5:3b:21:53:67:c4:7c:b9:
         a3:94:b0:c1:7b:b1:49:2e:a0:8c:56:35:f5:78:11:25:69:ff:
         9e:92:87:3d:d7:7d:b5:27:c2:d2:d6:a5:34:24:6a:56:96:05:
         ed:cc:79:5a:92:41:5e:2b:71:b4:25:fd:05:27:f5:61:c1:8e:
         3c:fc:32:0e:5e:e3:28:8b:a9:fc:f2:31:8e:3a:2c:95:cc:31:
         5c:47:db:c8:55:ad:e9:6a:8e:b7:c4:a6:52:37:f3:ce:78:e7:
         55:48:65:0b:8f:87:2f:45:94:70:ea:ce:7a:8b:59:33:77:9d:
         ec:55:5b:b9:c6:76:ec:79:e2:00:c9:64:c3:30:62:20:4e:76:
         3b:7f:cb:ee:90:fc:63:c6:52:46:93:ab:0d:0b:59:06:c1:87:
         0e:eb:ff:27:5f:0b:d8:f2:37:59:d5:e3:ba:48:51:f1:f2:10:
         d4:5a:27:99:63:e3:3d:7b:28:ea:f8:f5:0e:62:eb:be:8b:02:
         bf:bb:27:f1:df:61:3d:73:3c:21:3b:81:d1:2e:1d:d1:57:03:
         ba:13:59:5c:ec:23:86:2f:f6:10:b5:ca:d2:a6:74:d5:a7:1c:
         34:22:61:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy
OEQyNjQ5OUQwHhcNMjUxMjAzMDMxNzU3WhcNMjUxMjEwMDMxNzU3WjAYMRYwFAYD
VQQDEw02OTJmYWJlNS0xYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Pea9EgMVnvfQFldfIdn7FR1qaQdHYxIamQ2sU+rYCay+xoFuZkITpX9sPad
kNsBH5ii8g0eEMEUjMa4r6hnQMr1jtV/yoiL3up7sct+YRc9SMBTYp3HZhhI6pcR
TG/yaiORYfXKYs6GyCgSk/41gjb/QwgXCAatfwf/QVDjVsnQAsWhfWCdhFhw/cDN
QvNKp/TE/Rja/iLgdhDYnYa+7snoXcitHIN4M8APUBtQR5MWWbd0vxJCeOD+TSYY
8q9n5NFPQ04tTjPKFUu6s4ThGAqf8ryT8sKg3mfou/WvMW0TWT+nF2ntD25SEWKt
60iUTuen+KhEVyZueilL9fXs5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACKF9h4
1IIfxttgdLDalZvbGPj2MB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF
MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn
bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFpTuLf/nBXNeral4i296oNyg3W9SNaknIAA0GtTshU2fEfLmjlLDB
e7FJLqCMVjX1eBElaf+ekoc91321J8LS1qU0JGpWlgXtzHlakkFeK3G0Jf0FJ/Vh
wY48/DIOXuMoi6n88jGOOiyVzDFcR9vIVa3pao63xKZSN/POeOdVSGULj4cvRZRw
6s56i1kzd53sVVu5xnbseeIAyWTDMGIgTnY7f8vukPxjxlJGk6sNC1kGwYcO6/8n
XwvY8jdZ1eO6SFHx8hDUWieZY+M9eyjq+PUOYuu+iwK/uyfx32E9czwhO4HRLh3R
VwO6E1lc7COGL/YQtcrSpnTVpxw0ImG1
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:48 2025 by rpki-client