This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File:                     qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier:          iVKZVAZt3gsb93Uy5QJnJtHZYv9tRdObnTXYJfN71kA=
Subject key identifier:   21:0E:DE:6E:A0:A9:67:71:14:7D:3A:E4:78:13:67:85:0F:FF:BD:58
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer:       /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial:       0B67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number:          0B67
Signing time:             Mon 22 Dec 2025 18:39:04 +0000
Manifest this update:     Mon 22 Dec 2025 18:39:04 +0000
Manifest next update:     Mon 29 Dec 2025 18:39:04 +0000
Files and hashes:         1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: 7Uhg27OeYvWZHKVEKxIstH5/ePb/rQf9BDgG4t3VMFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919 (0xb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
        Validity
            Not Before: Dec 22 18:39:04 2025 GMT
            Not After : Dec 29 18:39:04 2025 GMT
        Subject: CN=69499048-eaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bf:38:f4:01:02:66:97:bc:78:62:ae:d5:8b:
                    96:64:bd:0b:49:ed:8f:de:24:b8:bc:8a:b5:10:22:
                    cb:7d:06:09:f5:ca:b3:7b:66:76:66:2e:a8:0c:63:
                    87:54:4f:8d:51:48:a8:dc:f2:c9:22:ce:da:ff:e5:
                    ad:a7:2f:db:f4:d3:f5:58:c7:3e:c2:01:91:a2:6b:
                    7d:b4:bb:71:03:08:ea:b9:86:4f:5d:30:09:7e:e9:
                    02:dc:1a:4b:45:d8:b1:18:f0:87:26:11:b3:4e:39:
                    89:97:7a:40:a5:f6:1b:95:a1:e8:d4:82:ff:ef:29:
                    5d:bf:3f:8a:bf:b4:9e:cc:a5:8d:62:80:f5:ce:28:
                    53:32:f6:b9:ea:3a:39:5c:9b:20:32:d8:3a:e1:18:
                    44:97:cc:8c:6b:64:f0:1a:51:12:f0:3e:07:16:91:
                    d8:1b:d4:60:f8:03:d4:4d:5a:2b:5d:e4:25:e1:51:
                    88:d2:4a:fb:9d:5e:8d:e4:c0:e6:45:81:40:dc:3f:
                    52:80:04:75:48:54:f8:fa:88:e0:4e:c4:a1:1b:56:
                    de:bc:51:01:6b:20:61:c6:f7:72:0e:76:ff:8b:7d:
                    88:96:a7:be:91:c0:04:41:2a:3f:b1:b5:28:ae:15:
                    01:57:a9:fb:58:e4:b8:bb:0a:d4:62:6f:cc:39:06:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0E:DE:6E:A0:A9:67:71:14:7D:3A:E4:78:13:67:85:0F:FF:BD:58
            X509v3 Authority Key Identifier:
                keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:40:4d:be:7d:12:3e:2a:5c:e7:ab:1f:3e:33:45:e2:fe:91:
         43:7b:a9:cf:1b:11:12:d8:93:8c:3c:99:54:cc:6c:c9:dc:e6:
         03:c9:8e:f1:6f:fd:b7:74:a8:10:ee:06:a4:ea:65:8e:cb:7e:
         d1:43:1d:d3:30:18:51:1f:0b:6e:31:b2:1a:9e:0b:11:e8:0a:
         97:03:65:9e:ee:bf:ad:e9:f9:55:20:ea:54:97:35:14:6f:ce:
         eb:d0:c8:7e:02:73:5e:e3:ed:8c:e2:5e:6a:75:c1:b4:5c:3a:
         a0:fc:93:38:6c:9a:46:eb:70:a0:1e:07:d9:4b:d1:ed:53:57:
         53:e0:94:3d:b4:55:9d:e8:4e:d8:0e:63:1c:c6:ad:be:64:e2:
         46:59:29:5a:49:fe:63:f9:1d:6f:2e:72:62:eb:65:24:12:b8:
         c4:d0:c0:f6:68:6e:8c:de:17:bc:2c:9d:d3:16:17:28:14:71:
         a9:fe:83:db:cc:7c:5b:57:ce:42:e9:b9:a6:d0:83:0a:16:3f:
         03:28:52:4e:cd:ce:61:71:79:35:df:be:cd:09:71:d0:56:27:
         c9:29:98:a4:3d:79:5f:b2:ec:71:23:06:a3:83:f8:93:48:f1:
         61:42:62:7f:59:f9:3c:f4:e4:ed:5b:ba:a7:43:59:be:0a:1a:
         4e:8b:af:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxOEYxMTAvBgNVBAUTKEE5QTZBNjgxQUIwMUJBNTE1RjIxOUEyQ0FERUEwOTQ1
QjRBRDU5OUQwHhcNMjUxMjIyMTgzOTA0WhcNMjUxMjI5MTgzOTA0WjAYMRYwFAYD
VQQDDA02OTQ5OTA0OC1lYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5L849AECZpe8eGKu1YuWZL0LSe2P3iS4vIq1ECLLfQYJ9cqze2Z2Zi6oDGOH
VE+NUUio3PLJIs7a/+Wtpy/b9NP1WMc+wgGRomt9tLtxAwjquYZPXTAJfukC3BpL
RdixGPCHJhGzTjmJl3pApfYblaHo1IL/7yldvz+Kv7SezKWNYoD1zihTMva56jo5
XJsgMtg64RhEl8yMa2TwGlES8D4HFpHYG9Rg+APUTVorXeQl4VGI0kr7nV6N5MDm
RYFA3D9SgAR1SFT4+ojgTsShG1bevFEBayBhxvdyDnb/i32Ilqe+kcAEQSo/sbUo
rhUBV6n7WOS4uwrUYm/MOQbkYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEO3m6g
qWdxFH065HgTZ4UP/71YMB8GA1UdIwQYMBaAFKmmpoGrAbpRXyGaLK3qCUW0rVmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE4Ri8xNjgzOTI0ODQz
RTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVsRmZJWm9zcmVvSlJiU3RX
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FhYW1nYXNCdWxGZklab3NyZW9KUmJTdFdaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjE4Ri8xNjgzOTI0ODQzRTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVs
RmZJWm9zcmVvSlJiU3RXWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASQE2+fRI+Klznqx8+M0Xi/pFDe6nPGxES2JOMPJlUzGzJ3OYDyY7x
b/23dKgQ7gak6mWOy37RQx3TMBhRHwtuMbIangsR6AqXA2We7r+t6flVIOpUlzUU
b87r0Mh+AnNe4+2M4l5qdcG0XDqg/JM4bJpG63CgHgfZS9HtU1dT4JQ9tFWd6E7Y
DmMcxq2+ZOJGWSlaSf5j+R1vLnJi62UkErjE0MD2aG6M3he8LJ3TFhcoFHGp/oPb
zHxbV85C6bmm0IMKFj8DKFJOzc5hcXk1377NCXHQVifJKZikPXlfsuxxIwajg/iT
SPFhQmJ/Wfk89OTtW7qnQ1m+ChpOi69q
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:16 2025 by rpki-client