This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
File:                     vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft (raw, json)
Hash identifier:          kr4hY3H2RAH9f+JWg9hShnf4uI5tS0V7+f3K87P5vGk=
Subject key identifier:   23:97:14:6C:C1:E4:D5:EC:21:E0:FC:43:1C:33:8F:93:74:C4:30:63
Authority key identifier: BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66
Certificate issuer:       /CN=A91BCA5B/serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
Manifest number:          0C
Signing time:             Wed 03 Dec 2025 06:08:48 +0000
Manifest this update:     Wed 03 Dec 2025 06:08:47 +0000
Manifest next update:     Wed 10 Dec 2025 06:08:47 +0000
Files and hashes:         1: vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl (hash: QswzDgfbebCyTShD7nF6/9S48q2AFRyqxP/LwSsVXkU=)
                          2: 36FD77BEC38511F083512C58C4F9AE02.roa (hash: OM79iMcHZz0+f2u6YD3gfL1nVc1woBeV5/J4QTxN8SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCA5B, serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
        Validity
            Not Before: Dec  3 06:08:47 2025 GMT
            Not After : Dec 10 06:08:47 2025 GMT
        Subject: CN=692fd3ef-1ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:4a:b0:fe:40:9a:24:59:56:07:32:73:71:
                    a7:b5:35:43:e7:ed:71:46:7e:cd:63:e7:c6:a7:78:
                    40:96:c4:25:1f:0f:ea:63:6c:f7:49:47:dd:26:18:
                    4d:72:f5:42:ae:65:4f:d1:e8:ec:f1:b5:64:ff:6b:
                    42:89:e9:d4:44:b8:d7:3a:58:3a:65:6b:3d:1d:82:
                    23:c9:c3:1b:58:f0:95:cb:73:73:d1:4e:58:07:bf:
                    d3:5d:2f:6c:11:e8:4e:3c:83:22:e2:9d:82:e9:72:
                    b2:d3:0b:cb:c5:53:f0:27:7a:69:f2:2a:b5:dd:7b:
                    d5:df:5e:59:f5:4f:69:cc:e5:a7:72:fd:ca:0a:09:
                    c4:bd:5c:64:88:e3:2b:e0:8e:b2:7b:b1:d2:33:38:
                    71:24:fe:18:48:e5:ba:4a:89:0f:34:f3:de:a0:9c:
                    d7:d6:84:8d:21:20:11:d1:d2:1c:5f:14:3a:d1:9c:
                    22:9a:6a:1a:7f:5d:4f:82:4d:8f:aa:7b:0c:ec:94:
                    29:1b:68:bb:46:d1:c1:69:63:9f:fc:02:62:e3:71:
                    6c:47:90:d8:1f:34:57:14:6a:42:23:d4:d8:19:8b:
                    4b:7c:a9:aa:5a:28:d9:82:66:74:87:57:3c:d5:b4:
                    5b:01:59:0b:52:dc:d2:ad:3a:3c:5e:45:40:34:cb:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:14:6C:C1:E4:D5:EC:21:E0:FC:43:1C:33:8F:93:74:C4:30:63
            X509v3 Authority Key Identifier:
                keyid:BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:27:5b:8f:a8:9d:d8:1f:78:63:9a:7c:93:5a:49:e8:c1:
         fd:fc:d9:a0:62:fe:fb:62:04:61:9c:45:b8:8a:5a:fe:0a:70:
         e7:5a:26:bb:89:cd:a9:61:d9:b5:83:ae:60:2a:d9:cb:12:b2:
         5b:f8:24:6f:ba:6b:29:69:74:dc:42:6c:80:65:72:93:bc:0d:
         7b:bc:6d:fe:a4:b8:a6:8e:de:54:1d:85:6e:94:41:32:d4:74:
         7f:76:1d:5c:64:2d:40:90:5f:1c:62:82:5c:67:ff:56:4c:c0:
         7f:08:20:c2:24:10:5e:0a:3f:5b:0f:9a:9d:46:92:a6:ed:92:
         2e:ec:95:26:2f:45:bb:49:f1:a0:93:20:70:c8:9e:de:e6:7b:
         bb:3d:13:52:38:bf:ba:3f:72:15:66:d1:48:80:83:9a:37:9f:
         11:81:d5:98:b7:9f:93:89:17:9b:da:c1:9e:38:93:b9:f8:8d:
         3e:e2:53:4f:b3:27:81:62:b3:05:39:57:8a:e6:7f:19:41:3f:
         09:81:9e:b4:85:a5:92:fd:f9:d9:70:3c:25:d4:60:83:a1:9c:
         3b:b7:67:90:e8:c0:13:02:c2:d1:5d:f6:9d:e7:7b:05:ab:6f:
         8c:7a:6c:b0:ea:82:35:24:69:34:93:b0:24:ff:dc:43:5b:69:
         36:2e:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:16 2025 by rpki-client