This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
File:                     QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json)
Hash identifier:          z3HIwii8j7DMXL7AG4QawQkRu5S6DKnlq3g+xUg+Ks0=
Subject key identifier:   A9:F6:06:7D:65:47:C4:EC:D3:74:C0:D1:89:42:D5:78:3D:B3:78:01
Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
Certificate issuer:       /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
Manifest number:          020C
Signing time:             Tue 23 Dec 2025 01:24:22 +0000
Manifest this update:     Tue 23 Dec 2025 01:24:22 +0000
Manifest next update:     Tue 30 Dec 2025 01:24:22 +0000
Files and hashes:         1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: 5BpDQp1rJljz8O2oTIJe37K9QszvAMO6onm5dUSmaSo=)
                          2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: AlNdMEqXqtWYBM5+8lhBY2zJlx8VS9MwTfRR8jw8484=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
                          rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
        Validity
            Not Before: Dec 23 01:24:22 2025 GMT
            Not After : Dec 30 01:24:22 2025 GMT
        Subject: CN=6949ef46-3e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:74:fc:af:25:5b:47:ea:6d:ec:99:49:84:
                    3d:da:26:65:b3:fd:20:8e:11:68:24:6d:ca:c2:83:
                    1d:bb:78:e5:20:64:da:b8:0b:3b:61:81:8f:1a:d3:
                    88:36:67:c2:ad:97:ae:62:ec:ae:d8:25:3f:46:17:
                    2a:4f:27:37:bd:fe:4e:90:98:a1:a9:b7:75:c7:57:
                    e7:24:ec:03:23:f0:37:d6:2e:e5:d0:49:ce:8f:75:
                    12:05:50:15:ea:65:17:6a:03:7a:b0:61:a0:83:a0:
                    44:6b:74:21:80:2a:58:7a:eb:14:cb:cf:6a:ba:0d:
                    55:6f:2e:6c:db:fc:4d:61:cf:94:93:6b:92:a5:b4:
                    8c:5c:a8:d1:ad:91:6e:4b:19:d5:a7:44:a6:5c:0c:
                    ff:36:83:9b:73:7c:72:ba:ae:42:43:e8:07:73:27:
                    0f:72:35:d9:41:9f:f5:3f:03:f9:b5:71:0e:08:a5:
                    d2:70:e6:bb:e9:92:09:5b:dc:88:c2:b8:67:e2:cd:
                    ee:32:93:73:49:d2:44:0d:b1:5a:7f:b1:21:53:9a:
                    68:ed:5b:f9:14:df:02:b9:e7:a6:d3:59:cc:47:a8:
                    1f:56:44:13:d8:83:e8:aa:aa:d3:e3:8c:89:a9:f7:
                    fa:fc:48:0e:ba:48:67:2f:bb:82:f0:a2:c8:78:05:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:06:7D:65:47:C4:EC:D3:74:C0:D1:89:42:D5:78:3D:B3:78:01
            X509v3 Authority Key Identifier:
                keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:b5:a7:32:92:10:b4:96:a8:01:bb:65:24:f3:17:2f:44:
         9f:3a:b2:9a:d7:24:71:77:14:73:90:5e:17:83:91:c9:24:68:
         d2:38:fa:ff:d2:59:2a:b6:ff:a9:db:18:d3:1e:56:58:63:8f:
         42:83:f5:99:7e:a6:9d:38:e5:90:7c:ba:fb:db:70:d7:b1:c2:
         59:25:3c:9b:5b:82:bb:f7:3d:14:6f:42:75:88:31:6c:c0:b0:
         93:4a:9a:4f:74:bf:85:c3:c7:91:ca:2f:66:73:23:80:6a:0c:
         89:ba:a9:cb:1c:46:b4:98:f3:4b:7a:df:f8:45:fc:41:c7:6b:
         94:f4:e5:ff:8f:55:9d:5d:38:48:48:03:be:be:3f:9c:9c:f3:
         4b:50:43:84:25:df:ac:1f:9b:15:20:fc:6f:a2:63:a8:8e:f6:
         0e:db:1c:6d:84:36:6b:0b:f9:33:91:3e:10:01:b3:98:4b:55:
         b3:9e:07:0f:b3:6e:7e:fa:b6:d0:0c:f8:e1:17:8b:7b:20:0d:
         21:ca:c3:d1:aa:9c:45:ad:ec:68:3a:39:15:b0:df:bb:ee:44:
         e9:6c:16:21:31:b4:fa:36:11:7d:29:83:ae:fd:09:fc:2e:cd:
         be:c3:a9:9b:a9:fc:1a:4a:2e:42:dd:a7:33:b7:74:85:85:f2:
         84:fc:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:11:47 2025 by rpki-client