This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File:                     _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier:          dGiV6l7T28lYHulP9dD8be8gmm9N2tZ7ycbAyXT9FsU=
Subject key identifier:   A7:2F:7E:43:8F:AC:7A:30:B3:12:15:29:74:B3:94:EB:7F:9D:69:ED
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       0D90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number:          0D48
Signing time:             Tue 16 Dec 2025 17:55:36 +0000
Manifest this update:     Tue 16 Dec 2025 17:55:36 +0000
Manifest next update:     Tue 23 Dec 2025 17:55:36 +0000
Files and hashes:         1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: KnRK71PzuKGKOGaguLiBGvp3Tty0bINaUJWRUEFTmqM=)
                          2: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: Z4p5IL2wEtdYmX76by5DzgGIGhxAsMyvBXYRGxm6vYc=)
                          3: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 17:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3472 (0xd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: Dec 16 17:55:36 2025 GMT
            Not After : Dec 23 17:55:36 2025 GMT
        Subject: CN=69419d18-2376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:57:18:c8:5c:49:b3:12:57:c9:a8:bf:4f:
                    d8:55:e2:07:a0:35:32:fe:64:1e:e8:fb:fb:c0:e4:
                    cd:80:62:0b:f9:d3:cc:56:fa:5e:17:49:76:f2:28:
                    d7:30:46:37:e9:79:51:f9:ad:78:dd:06:a0:c3:ff:
                    e9:fb:87:16:ec:a2:0b:00:c9:89:cc:5f:2b:a2:5a:
                    24:63:a7:22:c3:6c:54:da:33:74:6a:b1:a0:f0:a1:
                    4d:3c:6f:a6:bb:18:1a:8e:bc:47:0c:41:d5:56:da:
                    c1:aa:d1:b6:73:ad:ec:59:44:53:54:b8:32:32:46:
                    6f:15:ba:96:1f:c3:4b:f1:a1:c1:b7:67:e7:55:5d:
                    09:0d:15:74:77:30:f1:df:34:5f:72:59:5e:69:2c:
                    b4:54:ff:79:a5:8b:37:d2:08:f4:2c:67:da:16:62:
                    b8:d3:0b:41:68:00:ff:4f:0d:9e:28:f4:bd:7d:c1:
                    eb:ef:d0:b1:30:f3:65:b7:88:b6:a6:1b:d4:68:43:
                    dd:ac:62:e9:9c:8e:33:bc:90:4b:a0:3d:c4:57:c6:
                    de:b6:fd:12:ee:5f:2d:89:b8:4c:54:62:ed:9e:f2:
                    6a:f3:84:42:99:6b:88:db:8f:81:3c:50:55:aa:0c:
                    e5:58:27:63:23:28:bc:0a:b0:08:c9:ac:0e:ca:a2:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:7E:43:8F:AC:7A:30:B3:12:15:29:74:B3:94:EB:7F:9D:69:ED
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:db:1c:af:d7:f8:86:43:1a:c2:a8:07:17:db:30:c3:40:
         ed:18:f0:49:a0:33:f3:f6:3a:f3:5e:60:c4:39:8c:69:4a:c2:
         99:48:2c:e7:63:d4:93:7b:7e:ce:bf:fa:ad:5c:1d:26:67:13:
         63:8d:4c:9a:95:94:29:41:51:c6:21:ea:3d:f3:16:69:ea:40:
         9f:64:dc:7d:ef:00:ec:32:bf:9f:75:62:bc:43:02:4e:5f:cf:
         61:32:5f:7d:8e:74:20:79:36:1f:55:cf:77:47:14:60:07:b2:
         1d:c2:7e:fb:71:8f:71:86:7a:98:e4:3e:63:5b:ab:10:78:4b:
         43:56:4e:ca:c9:aa:4f:1a:30:b0:2b:c3:f4:19:14:c0:87:82:
         b6:4a:03:b3:eb:39:70:67:a9:6a:96:e6:17:62:46:71:77:c9:
         f6:aa:66:b2:2c:7b:69:ba:7e:90:66:f8:5b:48:49:c6:b8:77:
         a6:b8:0c:26:ad:f4:47:49:61:b6:93:5a:d2:f2:16:83:65:82:
         a4:59:ae:4c:ce:81:65:5d:79:6b:8f:f0:58:35:75:e2:31:e3:
         4a:11:9c:8a:a1:c9:a4:bc:02:39:d7:5a:fc:3e:1b:40:dd:b5:
         e1:b0:9a:a7:9e:fc:76:28:fe:70:a8:ee:49:f6:c2:0e:99:4f:
         fc:21:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:31:26 2025 by rpki-client