This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
File:                     qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json)
Hash identifier:          G5Q0FFtogkoznP+kkdXMjLrKfVrT0XvrqQAPq2Km2AY=
Subject key identifier:   78:B5:1B:13:06:5D:9F:1E:58:92:C6:73:0A:C8:BC:FF:A8:43:44:55
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Certificate issuer:       /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
Manifest number:          B4
Signing time:             Sun 25 Jan 2026 05:16:46 +0000
Manifest this update:     Sun 25 Jan 2026 05:16:45 +0000
Manifest next update:     Sun 01 Feb 2026 05:16:45 +0000
Files and hashes:         1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: 8n2eLnKkmYhTcBEzuyFEQaTG/Pm9Ww+iCpqxdgVyFvQ=)
                          2: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: 2ZNFwVZKhHOWC3D4N4dqgdZpiwiB+c4Fi1WKpctLr0E=)
                          3: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: bKExJAQVgmsEGcry3muwfFx0/j1cGOEsv7XoDmBLPJE=)
                          4: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: mpt0yv2n2/9qn3jigf6poMZZmtQOJyzbjFP/yr9TelI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
        Validity
            Not Before: Jan 25 05:16:45 2026 GMT
            Not After : Feb  1 05:16:45 2026 GMT
        Subject: CN=6975a73d-ea41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:88:80:f5:27:8b:fb:94:80:c7:f2:2b:e1:
                    a5:91:b0:c7:e5:2b:ce:65:e3:70:95:47:49:9a:ba:
                    8d:0c:3f:9f:04:7b:20:1a:4f:76:e9:e4:a1:69:37:
                    aa:e4:47:51:e1:4c:d8:d6:7d:3f:2d:bf:76:47:9e:
                    97:c5:1c:ea:44:20:78:a4:6a:c3:3d:44:90:8d:33:
                    96:2b:32:b6:06:b5:4e:2f:13:23:9a:3c:25:87:8c:
                    b2:1a:e0:41:00:65:49:f0:a6:6d:7c:2b:a3:c3:ed:
                    e8:66:c1:17:a9:57:35:02:18:97:4e:3e:14:e0:38:
                    c2:5a:52:e0:ba:e9:69:5e:91:39:9a:67:63:55:c3:
                    e7:5a:7a:78:67:e9:67:cb:7e:1e:2f:f7:f4:14:0c:
                    88:72:41:22:73:49:8b:67:e5:d9:a1:d0:08:12:72:
                    e6:cc:73:cd:ea:30:62:6c:69:c4:bd:e4:74:8f:72:
                    94:16:ea:90:78:e7:9d:17:2d:66:df:98:06:a2:41:
                    2e:a8:2d:c2:63:01:a2:a4:19:70:d0:61:18:95:5d:
                    b2:b2:e7:13:cc:b6:10:93:09:b6:2b:af:55:a4:ad:
                    b2:ad:80:db:7a:11:ad:8b:10:12:04:9a:03:1d:61:
                    d9:a2:86:98:9b:13:f3:3e:fd:c6:65:07:70:b9:89:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:1B:13:06:5D:9F:1E:58:92:C6:73:0A:C8:BC:FF:A8:43:44:55
            X509v3 Authority Key Identifier:
                keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a0:d8:ac:2b:7a:9a:7f:7a:25:a0:15:06:a9:40:e1:8a:b7:
         45:d9:6f:0e:4a:f0:90:a1:0e:f8:e6:d1:4b:06:78:dc:e4:3d:
         32:67:82:d6:b4:a7:5c:41:96:0d:17:b0:e5:c0:7b:16:ff:fe:
         58:bf:16:4e:9a:cf:78:97:e3:e2:88:2c:d9:8f:6e:05:e8:c9:
         86:91:0e:2c:5c:81:70:ce:eb:29:e2:23:3b:0a:66:7b:7e:5e:
         43:39:08:0c:b1:4f:02:7f:d2:86:06:2d:bd:1f:2d:4e:bf:20:
         72:71:63:b5:ff:d2:b2:d1:5a:f8:b6:a5:93:0c:8f:6e:bb:3e:
         d3:73:a8:54:53:d7:5a:b5:14:c7:41:ba:3d:4e:f9:7a:a6:33:
         c7:75:20:5a:07:64:a3:42:b0:f3:33:82:ce:e5:d3:7d:73:75:
         85:37:45:b7:39:7d:df:80:76:7e:e3:91:d0:bf:4e:71:27:ad:
         9e:38:91:8a:d5:2a:dc:47:3a:fa:df:24:c7:89:22:38:0f:81:
         79:69:48:eb:71:ac:17:be:d7:b7:5f:64:b5:97:2f:25:5c:2f:
         d2:05:21:a7:ac:ba:2e:6e:2f:b9:d8:34:0e:2b:fd:5c:0b:8d:
         d3:40:e9:8a:07:ea:dc:f3:f0:57:93:0a:ae:f5:42:28:0b:53:
         bb:3e:c2:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0NzcxMTAvBgNVBAUTKEE5MjMwQUU5OTBBMDM2N0FFNTlBMEYyMUJGRUVGRUNE
OTVENzRBODEwHhcNMjYwMTI1MDUxNjQ1WhcNMjYwMjAxMDUxNjQ1WjAYMRYwFAYD
VQQDDA02OTc1YTczZC1lYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqKIgPUni/uUgMfyK+GlkbDH5SvOZeNwlUdJmrqNDD+fBHsgGk926eShaTeq
5EdR4UzY1n0/Lb92R56XxRzqRCB4pGrDPUSQjTOWKzK2BrVOLxMjmjwlh4yyGuBB
AGVJ8KZtfCujw+3oZsEXqVc1AhiXTj4U4DjCWlLguulpXpE5mmdjVcPnWnp4Z+ln
y34eL/f0FAyIckEic0mLZ+XZodAIEnLmzHPN6jBibGnEveR0j3KUFuqQeOedFy1m
35gGokEuqC3CYwGipBlw0GEYlV2ysucTzLYQkwm2K69VpK2yrYDbehGtixASBJoD
HWHZooaYmxPzPv3GZQdwuYl1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi1GxMG
XZ8eWJLGcwrIvP+oQ0RVMB8GA1UdIwQYMBaAFKkjCumQoDZ65ZoPIb/u/s2V10qB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ3Ny80RDI3RDFDQ0U5
RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi9xU01LNlpDZ05ucmxtZzhodi03LXpaWFhT
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FTTUs2WkNnTm5ybG1nOGh2LTctelpYWFNvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDQ3Ny80RDI3RDFDQ0U5RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi9xU01LNlpDZ05u
cmxtZzhodi03LXpaWFhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3oNisK3qaf3oloBUGqUDhirdF2W8OSvCQoQ745tFLBnjc5D0yZ4LW
tKdcQZYNF7DlwHsW//5YvxZOms94l+PiiCzZj24F6MmGkQ4sXIFwzusp4iM7CmZ7
fl5DOQgMsU8Cf9KGBi29Hy1OvyBycWO1/9Ky0Vr4tqWTDI9uuz7Tc6hUU9datRTH
Qbo9Tvl6pjPHdSBaB2SjQrDzM4LO5dN9c3WFN0W3OX3fgHZ+45HQv05xJ62eOJGK
1SrcRzr63yTHiSI4D4F5aUjrcawXvte3X2S1ly8lXC/SBSGnrLoubi+52DQOK/1c
C43TQOmKB+rc8/BXkwqu9UIoC1O7PsLx
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:42 2026 by rpki-client