This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
File:                     qvGUMwcPxnb61hIGsnGaCFqzi-U.mft (raw, json)
Hash identifier:          8A6IdTZfLHFkgxXkCJWlEAxGOB0wh1QmVsHhgWq92rA=
Subject key identifier:   3A:2C:7F:8A:D5:74:0E:D8:43:A8:AD:0B:23:C8:73:33:61:E5:36:9C
Authority key identifier: AA:F1:94:33:07:0F:C6:76:FA:D6:12:06:B2:71:9A:08:5A:B3:8B:E5
Certificate issuer:       /CN=A91C3B4D/serialNumber=AAF19433070FC676FAD61206B2719A085AB38BE5
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
Manifest number:          0F
Signing time:             Tue 23 Dec 2025 06:50:48 +0000
Manifest this update:     Tue 23 Dec 2025 06:50:48 +0000
Manifest next update:     Tue 30 Dec 2025 06:50:48 +0000
Files and hashes:         1: qvGUMwcPxnb61hIGsnGaCFqzi-U.crl (hash: NX56bUqLw3JlAoUSGEbO4+85kPqoa1ZVf4bM66Ns+mw=)
                          2: 420E09ACCC1D11F08826FE2FC4F9AE02.roa (hash: 0Vj5t03R/1dHwLsHcQykQimFMT6RWGW/MsCL/wik32k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B4D, serialNumber=AAF19433070FC676FAD61206B2719A085AB38BE5
        Validity
            Not Before: Dec 23 06:50:48 2025 GMT
            Not After : Dec 30 06:50:48 2025 GMT
        Subject: CN=694a3bc8-2588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:13:ed:9b:e8:f7:23:81:10:d6:4b:2b:d7:
                    a6:fe:4b:92:65:b8:b6:65:1b:b7:e1:35:97:c6:d9:
                    c9:c5:9c:09:25:e1:4a:8b:90:06:2c:a0:74:ef:11:
                    23:99:34:a8:58:fe:83:d9:96:aa:65:6a:2d:3b:f8:
                    16:28:e0:3b:1a:10:6e:3e:12:1b:6d:44:6f:3c:ad:
                    67:21:9d:31:22:63:88:b5:ef:c8:27:47:7d:f0:01:
                    12:ce:a8:dd:48:2f:22:9c:b3:62:1f:ec:b4:45:a6:
                    e6:b1:f6:b1:9b:1c:8f:73:62:40:5f:f3:f9:a5:9e:
                    50:80:6a:6d:02:d2:e4:f8:09:87:30:32:32:2e:26:
                    2d:45:94:5b:45:f5:7b:3d:43:bc:89:e6:d1:5b:88:
                    4c:fa:53:96:f5:f9:54:31:28:b7:f5:d6:d6:24:57:
                    f2:56:58:56:91:fb:64:97:1d:80:18:f9:e9:c7:ad:
                    e0:c2:fa:39:01:87:99:62:2c:9b:82:ef:58:fe:b6:
                    e1:f8:fd:fe:33:fb:30:0a:f7:04:4c:31:f3:bf:1c:
                    6a:78:09:4e:4a:62:78:b3:71:35:da:7a:00:bb:85:
                    96:e1:1a:8e:08:ad:21:b9:74:48:21:4e:51:30:c6:
                    af:ec:cf:6a:91:5c:f6:4d:cb:08:ab:8f:91:ff:6d:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2C:7F:8A:D5:74:0E:D8:43:A8:AD:0B:23:C8:73:33:61:E5:36:9C
            X509v3 Authority Key Identifier:
                keyid:AA:F1:94:33:07:0F:C6:76:FA:D6:12:06:B2:71:9A:08:5A:B3:8B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:29:36:e3:d6:4d:94:3d:f4:39:c0:f9:45:04:03:46:41:5a:
         0f:d0:be:fd:57:39:23:4a:a2:80:93:aa:ae:9b:b8:be:cf:91:
         75:d3:96:6a:3f:8d:66:e6:29:df:43:b0:77:b6:5d:4f:e0:aa:
         0c:3e:62:ca:ef:06:9b:27:18:55:00:51:80:a9:b3:32:48:f3:
         00:2c:30:f0:51:b0:25:10:57:ed:99:98:8a:3b:e4:bf:51:8d:
         62:15:5e:98:a0:5f:a6:7e:f9:14:52:19:b3:58:2c:ad:5c:3a:
         b1:d1:84:65:79:4e:60:af:e2:fe:b0:ef:ad:01:f7:1e:01:e1:
         1d:e2:9f:6b:d3:0f:cc:af:cd:53:80:da:8f:13:06:fa:a9:82:
         1b:f6:87:bb:72:13:6c:b3:d7:5b:28:b1:5f:c4:15:46:07:86:
         a6:5a:38:12:02:ac:b5:64:e2:d4:36:03:b5:3f:58:87:77:3c:
         6b:36:af:fe:f5:9f:32:15:f2:a2:2a:2c:4b:e8:05:57:9e:9c:
         b8:f9:7e:42:4a:b1:b3:af:3a:7a:f5:68:19:ed:70:bb:cb:4b:
         9c:6b:01:b0:61:03:85:b9:16:47:b2:4f:17:3d:6f:1e:44:50:
         96:18:10:5b:d7:8c:4b:ba:44:f1:18:f4:b6:81:57:0c:45:ac:
         4d:5b:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:24 2025 by rpki-client