This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          Tr+V94Qy0GAOOU4SJV2v21SxGO9sT/FtY25mX0t0lew=
Subject key identifier:   07:39:79:B1:4C:01:68:24:AD:1B:35:5F:89:8D:4C:10:57:1F:73:40
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       063F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          0633
Signing time:             Sat 06 Dec 2025 21:38:43 +0000
Manifest this update:     Sat 06 Dec 2025 21:38:42 +0000
Manifest next update:     Sat 13 Dec 2025 21:38:42 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: T0cfHbG2Cyh7r5pji2Namcpdw5uiHgXfeUxX0X6qpJI=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: taOVx7nk0yJP7nOzPIUbOsf7C8xITqEbR1CM6ndaNjQ=)
                          3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: QV6x7t1GNDY1enVK8NGqWm1qI1rxu4buJOSstDWJdT0=)
                          4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: aPH84FEP6ZN7kMoON0X2LyO7xuFcySH9Oy6iOBdgxYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599 (0x63f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Dec  6 21:38:42 2025 GMT
            Not After : Dec 13 21:38:42 2025 GMT
        Subject: CN=6934a263-1d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:45:36:e6:04:d6:e3:b2:30:d9:d6:d3:8e:
                    9e:af:29:56:eb:59:8e:8c:a5:a4:80:29:9b:96:24:
                    35:66:bd:a2:b3:55:2c:2e:8b:f3:95:99:6d:40:b8:
                    7e:25:c2:c4:87:43:03:57:5e:6c:2b:ed:8e:f6:50:
                    ea:40:4f:a2:ff:ee:cc:2b:b3:34:b0:67:eb:d6:cd:
                    12:ed:01:7c:55:6f:cb:d9:f1:d6:75:61:26:32:65:
                    0b:40:86:71:19:9a:bb:61:d8:aa:66:43:ae:2b:1c:
                    54:82:65:62:58:4d:18:51:2b:f2:25:58:60:2a:d5:
                    59:05:ff:23:61:e1:e9:94:f3:99:5f:8e:3f:52:25:
                    f1:3d:ba:10:d7:7d:fe:f9:85:7e:fe:6c:0a:be:46:
                    70:9f:50:33:fa:3e:1e:42:25:da:14:80:2b:d8:69:
                    51:7a:1b:a8:3b:73:60:b2:34:38:b3:00:b6:25:97:
                    f4:4f:14:f2:c9:dc:ed:01:92:ac:ce:14:1f:59:12:
                    e8:89:0e:53:17:d9:c2:90:5c:c3:90:68:da:de:dc:
                    cc:b3:2b:e3:15:2f:12:81:09:8b:ed:07:91:78:88:
                    07:80:a3:2f:a8:e2:76:51:51:f8:54:53:14:ad:15:
                    ea:0b:37:ee:0a:34:f4:0b:6d:70:e7:0c:2e:6e:a7:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:39:79:B1:4C:01:68:24:AD:1B:35:5F:89:8D:4C:10:57:1F:73:40
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:43:0d:eb:82:16:29:6a:be:b5:c3:d9:a0:92:f6:25:6a:
         1d:ae:3f:e6:e6:4a:f6:8a:5d:8f:f8:a6:a1:02:10:bf:bb:6a:
         e4:dd:2a:e0:42:48:92:17:12:45:8b:47:1e:5f:98:a5:ef:fb:
         af:30:87:51:84:f0:04:d8:e9:88:ad:5f:26:3f:06:cf:1c:9c:
         5b:c7:bd:aa:0f:d6:fa:15:88:9f:cd:6a:f0:52:e3:d1:4f:c2:
         9f:88:e8:d5:4a:79:be:db:cd:39:77:6b:24:01:2f:49:1e:69:
         bb:75:da:8e:0a:9f:e8:f7:67:b6:04:d0:45:57:75:73:08:83:
         9a:90:58:cb:6d:b9:5e:21:84:e7:ed:c3:7c:a5:f2:05:c6:c9:
         44:e3:c9:66:a2:d5:d9:66:79:14:6c:d7:1d:b4:b6:ba:03:54:
         5a:e2:28:d7:44:d7:0f:e1:bf:7b:8f:a1:eb:fb:aa:3e:41:20:
         82:74:f8:29:f2:fc:17:f1:0f:46:cb:59:83:4b:08:5b:e0:2e:
         1b:46:bb:d3:da:6b:80:72:88:82:07:50:c5:a1:73:a7:88:57:
         bb:15:63:10:b2:09:6c:ce:dc:85:bf:93:11:a0:b8:15:d3:26:
         a0:2c:14:d6:67:74:71:be:ca:4c:db:c7:be:93:bf:07:7f:4f:
         3d:6b:5b:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF
NDZDRTBGN0YwHhcNMjUxMjA2MjEzODQyWhcNMjUxMjEzMjEzODQyWjAYMRYwFAYD
VQQDEw02OTM0YTI2My0xZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv8FFNuYE1uOyMNnW046erylW61mOjKWkgCmbliQ1Zr2is1UsLovzlZltQLh+
JcLEh0MDV15sK+2O9lDqQE+i/+7MK7M0sGfr1s0S7QF8VW/L2fHWdWEmMmULQIZx
GZq7YdiqZkOuKxxUgmViWE0YUSvyJVhgKtVZBf8jYeHplPOZX44/UiXxPboQ133+
+YV+/mwKvkZwn1Az+j4eQiXaFIAr2GlRehuoO3NgsjQ4swC2JZf0TxTyydztAZKs
zhQfWRLoiQ5TF9nCkFzDkGja3tzMsyvjFS8SgQmL7QeReIgHgKMvqOJ2UVH4VFMU
rRXqCzfuCjT0C21w5wwubqde4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc5ebFM
AWgkrRs1X4mNTBBXH3NAMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF
NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3
TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQACbEMN64IWKWq+tcPZoJL2JWodrj/m5kr2il2P+KahAhC/u2rk3Srg
QkiSFxJFi0ceX5il7/uvMIdRhPAE2OmIrV8mPwbPHJxbx72qD9b6FYifzWrwUuPR
T8KfiOjVSnm+2805d2skAS9JHmm7ddqOCp/o92e2BNBFV3VzCIOakFjLbbleIYTn
7cN8pfIFxslE48lmotXZZnkUbNcdtLa6A1Ra4ijXRNcP4b97j6Hr+6o+QSCCdPgp
8vwX8Q9Gy1mDSwhb4C4bRrvT2muAcoiCB1DFoXOniFe7FWMQsglsztyFv5MRoLgV
0yagLBTWZ3RxvspM28e+k78Hf089a1tM
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:07 2025 by rpki-client