This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          CmTrv6DSrF2joFzHc23GU40t+lxLibKBLOliII6Bgzs=
Subject key identifier:   AE:52:FB:97:95:CF:E8:8E:70:1B:99:48:69:A0:6D:74:C6:90:9B:F8
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          D7
Signing time:             Wed 03 Dec 2025 04:05:02 +0000
Manifest this update:     Wed 03 Dec 2025 04:05:02 +0000
Manifest next update:     Wed 10 Dec 2025 04:05:02 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: kussn/5X/uCnOogFaD2Mk/9hjFHJ7ETAKSx9wMzZEb8=)
                          2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=)
                          3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 04:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Dec  3 04:05:02 2025 GMT
            Not After : Dec 10 04:05:02 2025 GMT
        Subject: CN=692fb6ee-fb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:ac:d7:17:72:d2:44:3f:a6:54:f3:37:f1:
                    8f:c4:56:57:0b:d9:ca:d7:db:86:0a:d1:7e:4c:d6:
                    b8:ae:d1:3d:8f:e4:8f:87:80:4e:07:c6:c5:c8:11:
                    a2:f0:00:11:bb:05:22:08:dd:3f:df:24:23:ff:4f:
                    89:ce:e2:8e:06:24:84:74:80:93:50:2c:a0:4e:4e:
                    32:ee:45:cc:75:02:00:1b:d0:6e:35:59:92:d7:2c:
                    4c:1d:73:77:ed:35:fd:76:75:03:35:02:fb:98:78:
                    73:43:d4:ea:71:ec:db:09:f8:24:77:95:3f:66:eb:
                    db:e5:9c:09:da:04:02:27:a2:4d:d2:2c:5f:e4:3e:
                    e4:d6:d7:fc:cf:7d:69:1e:ea:a7:9e:18:ff:99:89:
                    40:00:ee:06:fc:69:85:7a:b2:ce:b8:65:ea:21:84:
                    11:63:a9:ff:44:72:63:ac:f8:fd:18:ee:db:35:42:
                    42:3f:f4:c2:c7:aa:93:97:c9:56:fe:a3:40:7b:e3:
                    94:6e:61:a0:59:85:69:cd:0d:cd:e6:fe:0f:f9:28:
                    55:2b:59:fa:ce:fe:2e:c2:f8:9b:52:68:0a:06:6a:
                    0a:25:0e:0f:27:21:10:94:b4:d2:8a:d6:1d:0b:07:
                    15:9c:19:b7:a1:37:30:26:2d:fa:43:3b:57:83:11:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:52:FB:97:95:CF:E8:8E:70:1B:99:48:69:A0:6D:74:C6:90:9B:F8
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:cf:46:2c:e2:f8:95:ff:8a:74:41:cb:11:26:c1:3d:44:
         c9:3c:5b:97:55:ab:d2:78:ca:74:d0:d2:11:28:15:56:c5:d2:
         82:e3:6e:d1:fd:cc:a6:b8:7a:82:e8:55:00:09:88:9e:31:bd:
         a8:da:8d:62:45:13:9a:88:25:e2:be:c0:e5:2a:36:72:8d:46:
         32:1e:53:23:0f:64:93:13:92:75:b5:c8:66:f5:d2:51:95:2c:
         e1:d4:9d:0b:e7:2d:2e:ee:6b:6a:ad:a9:58:98:37:96:a6:38:
         51:6e:c0:e2:4a:07:9d:02:c8:16:0e:5f:c3:0e:a3:69:ee:43:
         d0:29:f4:de:c9:59:55:6f:8e:43:5d:29:dd:c1:49:c0:82:08:
         24:de:a1:03:ee:6a:0a:bf:bc:a1:d4:f1:25:91:3b:e6:34:22:
         75:dd:d2:94:ac:1b:49:3c:a9:97:78:15:00:12:33:47:7d:89:
         da:d4:b2:1d:a2:cc:2f:f6:8e:fe:06:ff:df:97:86:7a:bb:a9:
         09:07:47:f9:f5:9d:83:87:8d:1f:9d:a1:af:6f:55:f1:8c:ad:
         eb:e9:35:fc:d7:f3:2e:16:7a:bc:3f:92:c8:b2:05:fe:18:5f:
         e5:29:1f:2b:f7:18:cf:a6:f8:da:ff:cf:f0:37:77:b6:ab:e5:
         31:3e:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:35 2025 by rpki-client