This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
File:                     qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json)
Hash identifier:          Q0SENbtAKEJVczzxv0+Ov8kF2UJY8Utmjf6AFIhvv7Y=
Subject key identifier:   73:3F:13:2F:60:F7:0F:06:17:63:75:41:53:74:A1:FF:6F:59:84:8E
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Certificate issuer:       /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
Manifest number:          8B
Signing time:             Wed 17 Dec 2025 06:12:44 +0000
Manifest this update:     Wed 17 Dec 2025 06:12:43 +0000
Manifest next update:     Wed 24 Dec 2025 06:12:43 +0000
Files and hashes:         1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: 17hyacdBzjXVoUwY/08J3bTaHQwpjnlW1HEClmJst3E=)
                          2: DC02E120A82511F0919E5F6EC4F9AE02.roa (hash: 7FVEC/IFa+cdZewBKkcb0e2EOdOIv+6jM+tdnsCxhjg=)
                          3: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (hash: +2ndLjbvJ/FC5QVpNRaE7vUXuw0EK/JBW1SNXfBSkkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
                          rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 06:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
        Validity
            Not Before: Dec 17 06:12:43 2025 GMT
            Not After : Dec 24 06:12:43 2025 GMT
        Subject: CN=694249dc-d9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:0b:70:ff:6e:41:b3:04:5d:5b:a3:0e:10:
                    69:7a:04:c4:9f:46:ab:29:35:1a:cb:8f:6d:7b:b3:
                    53:68:c4:3b:95:94:4c:3d:72:72:bc:b0:18:fa:52:
                    5c:bb:c4:1f:8d:c4:d9:7d:cd:ec:d9:57:40:8c:f9:
                    ac:01:1f:6b:0a:1b:46:28:09:c4:0d:60:c8:61:81:
                    cd:39:ba:85:8e:11:ea:54:a3:94:9f:70:6a:b6:7d:
                    77:d0:d6:80:e2:26:ab:c9:7c:c4:18:f6:1d:b0:0c:
                    be:51:d2:31:60:12:3e:d6:5a:b4:51:6d:bb:8b:b8:
                    ac:ff:89:6d:15:f4:52:d7:8b:66:47:7f:79:7d:83:
                    81:73:c7:f8:8c:59:8e:ec:45:28:0b:c1:fa:df:89:
                    38:89:01:c6:44:1a:4d:bb:97:39:a9:cb:aa:12:1b:
                    d5:e1:ac:a5:b1:5c:48:97:9f:3b:57:88:b0:ce:7a:
                    4e:5a:61:b1:ed:f1:fe:ce:9b:35:48:fa:b8:30:8d:
                    15:46:46:b7:a0:04:4f:b1:92:da:c3:36:53:80:94:
                    5f:d1:77:46:22:39:5f:f1:05:d2:8b:36:cd:0c:62:
                    be:4e:a3:20:b4:b4:ca:50:a2:3b:37:62:ef:6d:57:
                    78:d9:29:6c:e5:98:e4:d9:da:66:0e:64:68:98:3f:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:13:2F:60:F7:0F:06:17:63:75:41:53:74:A1:FF:6F:59:84:8E
            X509v3 Authority Key Identifier:
                keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:6c:2c:c0:ca:08:fa:eb:c5:81:bd:2e:09:f5:cf:f1:e5:
         36:7d:a6:f2:41:3b:c7:5c:1f:ff:a7:c6:e5:20:2d:23:07:e7:
         dc:34:3f:a9:d2:82:1a:51:57:25:a9:a2:22:85:f7:2c:4c:85:
         28:29:56:12:2a:6c:a8:39:df:9f:35:61:38:16:fc:7e:a9:06:
         91:dd:c8:2e:5c:62:88:9b:ce:50:ce:c2:30:12:b1:76:6c:b7:
         f5:74:91:f2:fc:64:2d:9c:f9:f4:68:76:84:80:c4:88:a7:97:
         2a:db:f9:3e:a7:1a:b5:b6:e9:e4:94:ac:72:16:71:83:30:dc:
         f4:65:15:52:d7:d1:3d:fb:6d:94:f9:3e:e9:1f:93:6a:c2:e2:
         3d:24:bf:8e:7b:cd:e5:db:cf:3d:bf:cc:6c:aa:51:e7:72:8c:
         14:09:fc:03:59:48:2b:ef:25:ef:6b:fd:19:85:11:c0:a6:e5:
         cd:75:70:93:be:6b:c3:c8:9d:45:df:ad:5e:6a:08:4f:6d:5a:
         53:be:b1:e7:e1:95:7a:ae:f7:cb:45:9f:ad:7e:0e:cd:68:dd:
         39:2f:02:b7:c7:93:c6:61:26:f4:9f:d6:4b:36:48:7c:9f:8d:
         c1:19:2d:95:33:67:a6:c8:a3:40:f1:68:29:a7:f7:04:60:11:
         cb:22:fb:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhGNzIxMTAvBgNVBAUTKEFBOTA5REVCMzU1QkUzMTRGMDU1MzIxOTQzMEQwOUFD
RTJEOEU3NzEwHhcNMjUxMjE3MDYxMjQzWhcNMjUxMjI0MDYxMjQzWjAYMRYwFAYD
VQQDDA02OTQyNDlkYy1kOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFwLcP9uQbMEXVujDhBpegTEn0arKTUay49te7NTaMQ7lZRMPXJyvLAY+lJc
u8QfjcTZfc3s2VdAjPmsAR9rChtGKAnEDWDIYYHNObqFjhHqVKOUn3Bqtn130NaA
4iaryXzEGPYdsAy+UdIxYBI+1lq0UW27i7is/4ltFfRS14tmR395fYOBc8f4jFmO
7EUoC8H634k4iQHGRBpNu5c5qcuqEhvV4aylsVxIl587V4iwznpOWmGx7fH+zps1
SPq4MI0VRka3oARPsZLawzZTgJRf0XdGIjlf8QXSizbNDGK+TqMgtLTKUKI7N2Lv
bVd42Sls5Zjk2dpmDmRomD8G4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM/Ey9g
9w8GF2N1QVN0of9vWYSOMB8GA1UdIwQYMBaAFKqQnes1W+MU8FUyGUMNCazi2Odx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Mi9DQUFGMEQ0QzBF
MkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4VHdWVElaUXcwSnJPTFk1
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEY3Mi9DQUFGMEQ0QzBFMkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4
VHdWVElaUXcwSnJPTFk1M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfh2wswMoI+uvFgb0uCfXP8eU2fabyQTvHXB//p8blIC0jB+fcND+p
0oIaUVclqaIihfcsTIUoKVYSKmyoOd+fNWE4Fvx+qQaR3cguXGKIm85QzsIwErF2
bLf1dJHy/GQtnPn0aHaEgMSIp5cq2/k+pxq1tunklKxyFnGDMNz0ZRVS19E9+22U
+T7pH5NqwuI9JL+Oe83l2889v8xsqlHncowUCfwDWUgr7yXva/0ZhRHApuXNdXCT
vmvDyJ1F361eaghPbVpTvrHn4ZV6rvfLRZ+tfg7NaN05LwK3x5PGYSb0n9ZLNkh8
n43BGS2VM2emyKNA8Wgpp/cEYBHLIvtv
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:47:18 2025 by rpki-client