This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
File:                     qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json)
Hash identifier:          xK1cGtH/+iEJO4oqOoLCV41RAcvD4PpU3uVwPWDaFIY=
Subject key identifier:   07:05:8C:F9:8E:8B:1F:3D:AB:72:93:77:A3:35:EB:69:F7:38:4D:BA
Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
Certificate issuer:       /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Certificate serial:       0497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
Manifest number:          0490
Signing time:             Mon 22 Dec 2025 23:08:27 +0000
Manifest this update:     Mon 22 Dec 2025 23:08:27 +0000
Manifest next update:     Mon 29 Dec 2025 23:08:27 +0000
Files and hashes:         1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: +7KB9rE8SQ0PwOO333jvyyU5GDJPOLdTC2OvcQs2dmU=)
                          2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
                          rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
        Validity
            Not Before: Dec 22 23:08:27 2025 GMT
            Not After : Dec 29 23:08:27 2025 GMT
        Subject: CN=6949cf6b-334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:d8:b2:f3:f8:24:a3:de:09:64:0c:90:77:
                    7c:c8:bb:13:55:08:f7:8b:29:79:ea:6c:46:c1:60:
                    89:62:10:08:a5:f5:68:6f:eb:34:c9:e8:18:aa:94:
                    ff:f1:df:50:15:9d:86:a6:03:43:29:f9:94:30:83:
                    c3:c6:04:91:22:63:e2:0e:c6:58:9f:67:2c:f1:74:
                    c1:fd:49:2a:43:c6:ae:de:9e:a8:bd:f8:29:65:71:
                    29:6d:ff:c7:63:e9:ee:4b:04:75:49:0e:21:91:32:
                    fd:d9:19:37:0f:44:35:57:9f:74:ad:dc:df:fd:8a:
                    80:8d:1a:cb:e7:2b:f4:b2:e2:64:fa:4b:14:ff:1d:
                    c3:d2:4f:57:e5:3e:22:65:a2:53:18:68:86:83:69:
                    0e:7f:9c:8d:f6:5c:a9:dd:ac:f0:f0:cb:00:c3:ce:
                    0a:81:65:dc:61:6b:e6:04:c1:20:8d:bd:cc:9c:0b:
                    bb:79:44:2b:9e:bf:bd:1a:e2:00:8a:96:c9:11:3e:
                    74:47:af:73:ba:0a:ec:51:a0:7e:28:de:d3:55:81:
                    16:bd:4b:21:84:6b:3d:f2:52:4d:f1:36:fd:8d:66:
                    b1:27:ed:ba:8e:ae:32:6a:15:47:0a:b7:bd:e1:81:
                    f2:dd:58:55:97:4b:85:e9:1d:cf:fe:ea:06:1f:83:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:05:8C:F9:8E:8B:1F:3D:AB:72:93:77:A3:35:EB:69:F7:38:4D:BA
            X509v3 Authority Key Identifier:
                keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:29:19:0d:79:8f:67:96:fd:68:62:fa:a0:10:f5:c7:9e:d1:
         4f:da:00:37:d8:cc:ab:c2:2d:55:f2:ba:ea:99:bd:d4:8a:b7:
         86:e9:0b:2f:ae:87:23:11:82:e5:ef:67:23:5a:65:09:db:05:
         d5:41:1c:da:7d:17:2c:6f:52:3d:47:f5:d7:86:d3:16:96:1e:
         ae:37:dc:56:7e:02:e9:f4:b4:85:d7:6f:b4:0f:e8:f6:a1:7d:
         3d:d1:7b:7d:58:d7:3c:51:35:af:78:47:d3:d4:99:53:e2:2a:
         9b:bf:56:91:68:72:7a:3a:14:88:96:eb:ca:a1:4a:a9:42:70:
         55:78:3f:4e:a9:af:2f:79:4b:b3:6e:26:d4:08:8a:50:e6:06:
         d0:60:40:83:df:b7:37:dd:55:21:85:4c:17:b4:40:8e:93:9d:
         dd:7f:89:89:2f:64:a7:64:a5:b4:18:4d:2d:d6:66:6c:5b:f2:
         06:12:65:da:0b:8a:b8:c4:d2:f2:96:3a:ae:e1:42:b4:80:bf:
         31:97:c8:5f:d4:4d:34:9d:55:46:ee:e8:56:fc:2e:82:f3:4d:
         a1:6f:9d:87:78:66:6c:f4:95:e8:e4:54:7c:85:c9:59:51:f7:
         7d:47:45:cb:c6:e8:74:04:04:db:5a:45:27:fb:26:70:13:a7:
         0e:97:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:33:22 2025 by rpki-client