This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File:                     qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier:          ChcwVyfsb1O+wOketyd76MK8KYfYq013K78UIe9aqIs=
Subject key identifier:   80:9B:67:F3:27:60:48:F8:99:04:0A:68:7C:9D:5B:E0:0B:95:DF:D7
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer:       /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial:       0826
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number:          081F
Signing time:             Mon 22 Dec 2025 20:13:32 +0000
Manifest this update:     Mon 22 Dec 2025 20:13:32 +0000
Manifest next update:     Mon 29 Dec 2025 20:13:32 +0000
Files and hashes:         1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: OhVpmxR6906hXwqi6hrUjYil7d2IVdBQMucAZOu2DvQ=)
                          2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: PD6vxM8HPQ1TRKqqISE6gvRSXeLWouSMokRSjCqVFPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
                          rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FADC, serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
        Validity
            Not Before: Dec 22 20:13:32 2025 GMT
            Not After : Dec 29 20:13:32 2025 GMT
        Subject: CN=6949a66c-24cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:85:3c:e4:16:da:55:89:76:8a:5e:8b:ab:
                    1c:34:b7:d5:74:c0:cf:df:bb:f3:2e:ac:cb:fb:a3:
                    81:89:c0:7f:9b:15:a4:95:1c:3c:b6:87:a9:c9:50:
                    6c:49:10:4e:99:41:ef:35:e9:f8:30:f4:c0:c6:6e:
                    53:75:09:5b:c9:94:ba:3b:5b:53:d6:16:4e:2a:4e:
                    e8:c5:fe:56:a4:06:ff:22:30:91:3a:16:05:77:d2:
                    8d:1f:22:fa:c7:05:81:30:ad:bb:ca:c0:0c:d6:f1:
                    d7:b4:eb:74:33:d4:ab:26:15:dd:53:fb:c5:87:e2:
                    0a:ab:86:42:4a:57:cf:71:e7:25:3b:a5:10:7a:41:
                    1c:fd:b4:eb:5c:e2:f0:20:c1:db:76:1a:8c:52:68:
                    52:b2:92:26:29:7e:8a:13:10:88:e1:c6:d7:44:71:
                    26:95:7c:bd:e6:58:e0:f3:68:14:b6:18:bb:d3:fa:
                    79:e8:6c:fc:61:ba:f8:67:6f:98:f7:3c:b2:a7:31:
                    45:ee:64:81:b4:ed:60:c7:6b:dc:a3:4f:99:4e:f5:
                    b8:06:ce:8c:e7:4d:e7:3b:01:46:58:47:02:e3:52:
                    47:c7:79:bc:55:a6:e2:fd:21:20:3f:c5:27:97:77:
                    4c:35:a9:90:e9:78:9c:0f:3f:ba:07:67:ec:f9:bf:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:67:F3:27:60:48:F8:99:04:0A:68:7C:9D:5B:E0:0B:95:DF:D7
            X509v3 Authority Key Identifier:
                keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:77:02:68:09:a1:a4:04:dc:86:3b:e0:75:08:52:20:2e:
         75:93:4e:e0:49:c9:f2:a9:e8:6d:a4:c9:fc:79:fe:f8:67:5e:
         70:8f:c0:75:d8:15:23:75:3a:42:a4:73:f0:9e:ef:38:d9:e6:
         fa:73:62:d8:fc:28:88:70:16:0c:c8:c8:f3:10:66:0e:36:13:
         a7:c1:ec:59:d7:76:4b:cc:c4:c0:23:97:50:c8:49:70:d9:ef:
         dc:dd:52:26:c7:b9:9e:e9:a2:ee:72:88:6e:84:37:e6:54:16:
         54:18:78:e1:c8:2b:7a:62:56:c6:bc:f4:e5:cc:10:74:2e:6b:
         5d:9e:26:fe:5e:e7:59:a1:6d:17:f9:50:4e:54:7a:9e:8a:86:
         2b:7e:e9:86:1c:a7:78:c0:6e:9d:5f:23:91:b9:10:ed:73:f7:
         d7:64:f1:fd:28:9c:b2:06:17:0e:56:45:f3:3a:95:31:76:4f:
         54:ae:37:6f:eb:0b:e4:d7:65:cc:dd:36:48:4c:54:fe:e8:68:
         4e:be:ae:68:c3:38:e1:f3:d3:47:76:bd:11:eb:2c:29:0e:b6:
         1c:05:a5:e8:d6:0d:bf:44:cc:5a:90:a9:7b:06:a5:87:f7:ab:
         8d:c3:94:bf:fc:25:55:34:ad:8b:6f:bd:b2:0b:b3:6a:a4:7a:
         5a:6e:71:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:42:16 2025 by rpki-client