This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
File:                     QVaOgAk79NEF6TJNX4ISRTGsQT8.mft (raw, json)
Hash identifier:          1prGlmv+yOORhmsJLlat7sEPjaYr1aMLZ9V1bcD2EE0=
Subject key identifier:   7E:23:90:A1:F2:F3:37:02:DD:33:E7:03:83:39:2A:6C:61:96:79:10
Authority key identifier: 41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F
Certificate issuer:       /CN=A91B6A04/serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
Manifest number:          10
Signing time:             Tue 23 Dec 2025 06:49:13 +0000
Manifest this update:     Tue 23 Dec 2025 06:49:13 +0000
Manifest next update:     Tue 30 Dec 2025 06:49:13 +0000
Files and hashes:         1: QVaOgAk79NEF6TJNX4ISRTGsQT8.crl (hash: 5FzZY7/MRZ746uqne5uUVpoowL1hGNk+Lil0uRsSC18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl
                          rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6A04, serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
        Validity
            Not Before: Dec 23 06:49:13 2025 GMT
            Not After : Dec 30 06:49:13 2025 GMT
        Subject: CN=694a3b69-fc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:af:ab:da:1d:e7:55:82:3a:d4:b5:ed:c7:
                    e6:e0:81:74:f6:36:d1:9d:92:b1:22:b8:fa:07:e1:
                    3b:58:bd:89:97:69:5b:25:5e:7f:91:8a:a3:98:e9:
                    05:7a:32:53:45:98:11:6c:7e:22:c3:97:34:5d:f1:
                    e2:28:b9:e7:f7:18:a0:78:a5:17:4c:c2:11:a2:05:
                    26:e9:54:66:ec:2a:e6:4c:cc:40:2c:f4:93:b4:6a:
                    4b:a4:f0:d5:1e:8f:26:6a:fc:ce:cc:ed:41:b7:f7:
                    0d:48:87:6f:97:90:22:57:d9:36:73:1d:6b:ff:b9:
                    7f:32:fe:aa:38:73:a4:0b:5c:06:e6:83:b6:6a:74:
                    00:36:12:a2:cf:60:34:a0:9f:f7:db:5a:ac:e3:6d:
                    c8:2d:78:ef:23:b6:58:ea:61:3b:41:13:9f:dd:22:
                    c7:73:fb:36:bd:9e:b9:fa:4e:c3:7f:94:d3:84:fe:
                    2f:ed:8f:4e:f1:45:d2:0b:38:6d:49:30:bc:2d:ae:
                    05:3f:0e:93:62:cb:d6:ae:58:fd:1c:fa:e2:c5:3c:
                    80:59:d1:c5:41:01:d3:9e:9e:e5:d0:9a:7c:71:d1:
                    79:4f:18:9d:b5:52:c5:2a:eb:34:0b:2e:4b:f1:78:
                    9c:c5:f3:e7:61:7e:c5:cd:79:71:6b:ed:94:03:74:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:90:A1:F2:F3:37:02:DD:33:E7:03:83:39:2A:6C:61:96:79:10
            X509v3 Authority Key Identifier:
                keyid:41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:28:e6:27:4f:31:d2:00:3d:dc:a5:0f:11:70:4f:44:fb:
         ba:2e:30:c3:f3:00:04:aa:37:6e:c6:59:62:b8:a6:fd:08:8a:
         fc:f3:e5:bf:59:4f:0e:c8:88:1f:04:4f:9a:d9:91:44:5a:12:
         3c:cd:85:04:19:13:a0:c5:5f:05:6c:29:12:51:e4:6c:1f:0c:
         dc:75:96:1e:e8:36:7b:0c:64:e5:80:e2:af:0b:2b:09:f4:d3:
         f1:8e:7a:7b:21:94:41:87:45:95:3d:c2:82:53:eb:e3:b5:55:
         63:a3:5a:21:e7:ce:46:94:e8:fd:d1:54:6a:56:3b:ba:4a:5d:
         8a:64:30:99:73:0c:e4:fb:a0:35:b9:ad:8c:a4:a2:ee:23:f7:
         c4:97:33:c2:cd:35:18:d2:1a:e0:5c:f3:45:db:4e:c5:59:88:
         36:aa:23:ea:a3:76:4a:b5:0c:04:a3:dd:9c:87:ae:88:7d:b0:
         7b:7f:65:70:7f:03:28:6f:ff:4b:34:8a:bd:3c:e4:26:d2:64:
         77:bd:43:ac:ae:ff:70:87:15:05:0b:d4:ae:9c:c1:70:b4:02:
         85:1c:15:24:12:9a:3e:d1:07:0c:af:cd:d7:9d:c3:f3:70:ab:
         3a:d6:77:85:9c:2a:1c:4c:d3:19:8d:e7:17:08:b0:b4:f7:82:
         10:7a:46:69
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NkEwNDExMC8GA1UEBRMoNDE1NjhFODAwOTNCRjREMTA1RTkzMjRENUY4MjEyNDUz
MUFDNDEzRjAeFw0yNTEyMjMwNjQ5MTNaFw0yNTEyMzAwNjQ5MTNaMBgxFjAUBgNV
BAMMDTY5NGEzYjY5LWZjNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVta+r2h3nVYI61LXtx+bggXT2NtGdkrEiuPoH4TtYvYmXaVslXn+RiqOY6QV6
MlNFmBFsfiLDlzRd8eIouef3GKB4pRdMwhGiBSbpVGbsKuZMzEAs9JO0akuk8NUe
jyZq/M7M7UG39w1Ih2+XkCJX2TZzHWv/uX8y/qo4c6QLXAbmg7ZqdAA2EqLPYDSg
n/fbWqzjbcgteO8jtljqYTtBE5/dIsdz+za9nrn6TsN/lNOE/i/tj07xRdILOG1J
MLwtrgU/DpNiy9auWP0c+uLFPIBZ0cVBAdOenuXQmnxx0XlPGJ21UsUq6zQLLkvx
eJzF8+dhfsXNeXFr7ZQDdGP5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfiOQofLz
NwLdM+cDgzkqbGGWeRAwHwYDVR0jBBgwFoAUQVaOgAk79NEF6TJNX4ISRTGsQT8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzMwRDc3OTk2QzlB
RTExRjBCQTIyMjc0NUM0RjlBRTAyL1FWYU9nQWs3OU5FRjZUSk5YNElTUlRHc1FU
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUVZhT2dBazc5TkVGNlRKTlg0SVNSVEdzUVQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
QTA0LzMwRDc3OTk2QzlBRTExRjBCQTIyMjc0NUM0RjlBRTAyL1FWYU9nQWs3OU5F
RjZUSk5YNElTUlRHc1FUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAC6WKOYnTzHSAD3cpQ8RcE9E+7ouMMPzAASqN27GWWK4pv0Iivzz5b9Z
Tw7IiB8ET5rZkURaEjzNhQQZE6DFXwVsKRJR5GwfDNx1lh7oNnsMZOWA4q8LKwn0
0/GOenshlEGHRZU9woJT6+O1VWOjWiHnzkaU6P3RVGpWO7pKXYpkMJlzDOT7oDW5
rYykou4j98SXM8LNNRjSGuBc80XbTsVZiDaqI+qjdkq1DASj3ZyHroh9sHt/ZXB/
Ayhv/0s0ir085CbSZHe9Q6yu/3CHFQUL1K6cwXC0AoUcFSQSmj7RBwyvzdedw/Nw
qzrWd4WcKhxM0xmN5xcIsLT3ghB6Rmk=
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:06 2025 by rpki-client