This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File:                     qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier:          gMCDqQAFLASXJwx/d6lfv8D+CczLNiq6uM/G3VOTZdA=
Subject key identifier:   D9:E4:4E:AE:B2:42:B7:12:4B:56:A4:72:C5:9E:9D:DB:5F:17:F9:29
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number:          017B
Signing time:             Tue 23 Dec 2025 02:50:47 +0000
Manifest this update:     Tue 23 Dec 2025 02:50:47 +0000
Manifest next update:     Tue 30 Dec 2025 02:50:47 +0000
Files and hashes:         1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: foA0EkftCnoMdVcQWgUYJ78/pM0qdwPOR3P5iVZqy6M=)
                          2: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: 53exXb+y74MMiXd9WVR4Lvbmf3aqTfFbV9OKgS6dCTc=)
                          3: E13D8940342E11EF84328672C4F9AE02.roa (hash: ktd5mpPgnA7DVPoDoDI59fbIVSssBE9h3J/Qc3SNd4I=)
                          4: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: 57MB5MLOBu0rlKWbYAUFlVy0tWIAfHRyTSUm9GeesCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Dec 23 02:50:47 2025 GMT
            Not After : Dec 30 02:50:47 2025 GMT
        Subject: CN=694a0387-f0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:ba:20:7e:91:eb:66:10:e3:48:e4:5d:c8:
                    97:ee:2d:5d:7a:8f:28:85:b0:84:29:95:1c:60:95:
                    cb:04:07:1c:28:59:91:23:2e:24:11:58:95:25:80:
                    29:23:71:ce:1f:06:32:a7:4e:84:47:cd:16:a5:ff:
                    ec:df:fc:99:b3:ef:93:f5:d6:cf:fa:e3:8d:1e:40:
                    d2:b4:38:7d:94:23:5f:4e:46:df:48:1c:50:8d:f3:
                    64:51:ee:97:b4:ea:80:67:f3:f3:26:ab:3e:31:ce:
                    0b:42:be:a9:3d:c5:38:cb:ab:2c:c0:ed:5a:c0:78:
                    da:63:a4:15:31:f9:3d:33:14:b1:88:07:c8:48:ec:
                    4b:39:e5:4f:2d:cc:a9:bb:c4:48:e7:62:14:66:2a:
                    9d:09:c0:ae:d2:49:b7:c6:b4:a2:4e:c4:c7:2e:df:
                    b3:1d:49:8f:74:30:86:2b:07:83:41:a9:20:f4:96:
                    ac:76:55:94:2d:88:e7:c4:9a:b5:af:0b:c8:1d:f0:
                    d5:47:e8:4d:12:fc:85:2c:a5:65:83:41:24:96:55:
                    4d:33:67:9a:aa:47:83:15:e8:8b:e3:4d:ec:3d:07:
                    56:e8:0b:35:1c:da:18:c6:b2:08:58:46:38:4d:97:
                    03:e2:34:b7:d6:bb:93:64:4d:1f:d1:6a:85:ed:29:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:4E:AE:B2:42:B7:12:4B:56:A4:72:C5:9E:9D:DB:5F:17:F9:29
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:07:70:a2:c6:4d:2f:11:05:9c:75:c8:d6:9c:27:22:32:3a:
         9b:cf:f4:3a:99:97:c3:56:6a:a3:49:08:73:58:c3:4c:b9:64:
         73:1d:59:e3:7f:0d:d3:a4:ca:ab:68:99:fd:9e:a8:5d:22:da:
         c1:1d:c2:c8:1d:e7:73:88:94:4d:ff:d0:72:22:33:8f:21:d3:
         4d:d9:aa:f2:e0:4b:01:a6:e9:91:4b:94:54:16:cf:ea:90:92:
         86:53:1d:45:00:47:9d:6f:6c:b6:92:6f:93:75:18:ac:b6:fa:
         df:6f:f5:61:36:0f:9d:b5:7e:f2:35:d8:97:d5:55:58:bd:0b:
         9f:4f:16:2d:a8:ac:3b:a5:d0:15:0f:b6:69:de:0b:ac:2b:24:
         d6:68:6c:c9:69:c8:7c:5d:2c:35:b0:84:22:92:15:9f:c0:a0:
         7b:29:28:dd:be:8f:fa:76:76:93:bc:94:85:5d:4d:e1:78:79:
         36:12:7f:ca:a2:15:ea:b9:d5:fa:1c:81:04:99:36:ca:ce:0f:
         c7:2c:72:b6:38:22:9a:da:75:d2:de:12:f2:ef:c7:10:bf:b0:
         46:34:00:f9:c2:dc:ce:47:2e:d0:d0:ad:c8:4c:1e:06:60:cc:
         74:cf:4e:db:93:47:18:b9:79:8b:44:02:62:2f:65:82:87:91:
         13:a2:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:42 2025 by rpki-client