This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          ysFUCqJ0+oOCjai9AI1vpU9KiOYqk5Dxc2BSILbYYqQ=
Subject key identifier:   7E:4D:2F:9D:9D:8C:37:B1:41:7C:18:28:D0:64:83:A8:3C:F6:C9:E9
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0571
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0D26
Signing time:             Thu 18 Dec 2025 20:45:37 +0000
Manifest this update:     Thu 18 Dec 2025 20:45:37 +0000
Manifest next update:     Thu 25 Dec 2025 20:45:37 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: GMSk1p5JXNjhTY9fBc/bclKsQVu3sTnUWp9XBzox7jQ=)
                          2: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: DQKnkPiyi5yFhInT8cazQ0WWqMZZ/NRSyMH4kCN4yVg=)
                          3: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: OzR5m76bC5p8Qn4iW9ZQqG9vOQByfBzOqdZe3AXXfw4=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: V08dtQEG7kMtP+yJo1aJfEkwIclQOyk17r+rjbxf9Vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Dec 18 20:45:37 2025 GMT
            Not After : Dec 25 20:45:37 2025 GMT
        Subject: CN=694467f1-47c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e6:36:bc:df:99:03:04:7a:78:fd:4c:79:03:
                    7a:bf:53:fc:1b:85:73:1b:7e:78:fc:e8:3b:63:ee:
                    1f:96:ea:01:9e:93:35:6e:d1:e2:03:7e:58:4e:d0:
                    39:28:fd:ba:e4:c8:5d:ae:d4:0a:a5:68:1b:2c:b0:
                    82:81:c8:90:87:3f:27:7b:d0:a2:7e:88:c0:d8:5a:
                    40:c4:aa:9c:ba:6c:7f:ce:ba:6c:e8:b2:e9:83:1e:
                    7d:73:e9:98:e9:20:c0:84:87:28:1c:38:59:75:9f:
                    93:11:fc:96:3b:0b:09:77:38:7f:79:b4:e4:a4:35:
                    2c:70:b6:7d:fe:e0:d7:35:41:fb:f7:e9:ce:44:55:
                    70:eb:b2:14:3a:4f:28:b2:6b:99:92:22:c7:7e:59:
                    55:c6:92:57:33:01:5a:75:ad:a6:c8:cd:d4:ad:e6:
                    64:c7:0b:75:b8:7d:d6:57:94:b5:5c:73:6f:6f:dd:
                    e3:a8:18:8e:69:a5:be:78:33:b9:c7:58:69:39:82:
                    f4:5c:0c:57:c9:31:b8:13:a3:01:16:be:08:da:98:
                    f8:c9:aa:92:96:b3:fa:75:02:e0:f7:b8:df:fe:93:
                    7a:19:6b:a7:b6:d5:35:35:bb:21:5a:2c:14:7d:91:
                    11:92:91:f7:18:fc:e0:67:4a:65:0d:bf:6d:dc:75:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4D:2F:9D:9D:8C:37:B1:41:7C:18:28:D0:64:83:A8:3C:F6:C9:E9
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:18:a9:87:3e:eb:0e:3f:32:27:b9:4f:18:e3:0c:5b:87:
         be:db:3a:ea:2a:57:7d:aa:ee:f8:ea:d6:32:eb:b0:41:b5:08:
         c9:d7:16:38:43:47:0a:ed:9e:ce:e1:cf:1f:01:66:27:f9:09:
         a5:df:61:2d:8a:52:28:0e:17:d0:7c:8f:4a:94:1b:ed:d6:3a:
         d6:74:28:b1:66:51:cc:0d:7b:97:5a:ec:55:4b:ec:0b:1e:e8:
         8b:4d:2b:8d:e9:23:0a:09:02:f0:f9:ef:be:08:04:09:37:a1:
         9d:36:f3:2a:6a:16:89:f2:64:87:d0:d4:e1:01:bc:a9:20:84:
         3a:30:db:3e:55:57:ac:44:1a:dd:cc:91:26:cd:4a:94:17:1b:
         06:d5:c1:39:0b:76:b1:d9:13:a9:fc:2a:a5:cc:65:03:d4:3e:
         72:53:26:e6:b5:31:0a:fd:70:74:bb:e0:de:6b:a9:ae:d0:f5:
         7b:0c:66:41:0d:c3:62:5f:a1:ec:41:7d:7a:f6:64:27:e6:c4:
         41:1c:ee:7f:fa:a0:7f:00:d5:25:86:10:a7:2c:bd:a8:1c:12:
         e6:d9:a9:4a:d3:5c:12:bd:8d:5c:5d:d8:52:04:03:43:15:cc:
         3b:98:d3:7e:78:de:ef:b2:33:89:e3:3a:70:50:08:30:74:13:
         63:84:0f:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz
RkU4NTU1RjcwHhcNMjUxMjE4MjA0NTM3WhcNMjUxMjI1MjA0NTM3WjAYMRYwFAYD
VQQDDA02OTQ0NjdmMS00N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOY2vN+ZAwR6eP1MeQN6v1P8G4VzG354/Og7Y+4fluoBnpM1btHiA35YTtA5
KP265MhdrtQKpWgbLLCCgciQhz8ne9CifojA2FpAxKqcumx/zrps6LLpgx59c+mY
6SDAhIcoHDhZdZ+TEfyWOwsJdzh/ebTkpDUscLZ9/uDXNUH79+nORFVw67IUOk8o
smuZkiLHfllVxpJXMwFada2myM3UreZkxwt1uH3WV5S1XHNvb93jqBiOaaW+eDO5
x1hpOYL0XAxXyTG4E6MBFr4I2pj4yaqSlrP6dQLg97jf/pN6GWunttU1NbshWiwU
fZERkpH3GPzgZ0plDb9t3HW0pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5NL52d
jDexQXwYKNBkg6g89snpMB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD
QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgt
MTdGenQ0RGdGLTBfNkZWZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1Cxiphz7rDj8yJ7lPGOMMW4e+2zrqKld9qu746tYy67BBtQjJ1xY4
Q0cK7Z7O4c8fAWYn+Qml32EtilIoDhfQfI9KlBvt1jrWdCixZlHMDXuXWuxVS+wL
HuiLTSuN6SMKCQLw+e++CAQJN6GdNvMqahaJ8mSH0NThAbypIIQ6MNs+VVesRBrd
zJEmzUqUFxsG1cE5C3ax2ROp/CqlzGUD1D5yUybmtTEK/XB0u+Dea6mu0PV7DGZB
DcNiX6HsQX169mQn5sRBHO5/+qB/ANUlhhCnLL2oHBLm2alK01wSvY1cXdhSBAND
Fcw7mNN+eN7vsjOJ4zpwUAgwdBNjhA9X
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:39:07 2025 by rpki-client