This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          ifxBuxuiGpUXurwEW6jJcRFEb5TU57e3T5eGUm8SFG4=
Subject key identifier:   3C:4C:B7:91:09:77:F3:3C:78:B4:EE:68:05:79:A1:8E:27:55:84:54
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A30
Signing time:             Sat 24 Jan 2026 19:12:45 +0000
Manifest this update:     Sat 24 Jan 2026 19:12:45 +0000
Manifest next update:     Sat 31 Jan 2026 19:12:45 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: i4C5XnAg/BwT5YQqDowqgtc9IrN38ucAbnKoLwZqAVw=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2616 (0xa38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jan 24 19:12:45 2026 GMT
            Not After : Jan 31 19:12:45 2026 GMT
        Subject: CN=697519ad-2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:ff:1f:04:c8:66:35:0c:73:7b:c2:a2:c3:
                    82:11:2d:b7:dd:f4:a2:37:82:b6:06:46:63:9d:09:
                    55:90:3f:2e:9e:af:45:37:21:5c:f6:06:b0:59:46:
                    0d:fa:bb:63:34:13:75:4a:14:ce:ee:85:59:52:95:
                    81:da:b7:46:d6:12:ce:a3:9c:bc:98:ac:75:87:3c:
                    98:b5:3c:75:de:0a:ca:bc:58:a4:b4:ae:73:7a:a0:
                    0b:9a:1a:83:99:9e:96:8e:c5:be:c3:e9:0e:9e:82:
                    2f:31:94:96:26:6f:55:ef:2e:0f:76:b5:b5:3e:84:
                    79:1e:80:3f:b5:20:c4:1e:56:4b:81:e1:f4:59:0f:
                    0e:1b:a7:dd:c6:d3:a4:1f:d1:2e:bc:0b:13:4c:2e:
                    72:a0:85:89:07:de:52:36:14:ee:a6:1a:35:86:45:
                    6a:38:19:f9:55:ac:a8:5d:3a:9d:b9:cf:a2:87:e2:
                    b7:bc:49:10:19:db:fb:53:31:ae:24:3f:16:81:9a:
                    eb:59:e0:32:6c:d2:de:d4:13:49:4b:c8:53:2c:41:
                    d7:ee:2d:3f:fd:df:85:c9:aa:59:85:b3:49:90:b1:
                    91:4a:5e:e8:45:71:1f:60:95:c1:7f:1d:4e:20:7d:
                    c6:f7:5d:29:79:ac:23:ff:b7:4b:2a:cb:28:b5:41:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:B7:91:09:77:F3:3C:78:B4:EE:68:05:79:A1:8E:27:55:84:54
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3b:ad:0f:d0:f2:10:6b:53:7d:4c:10:43:3f:eb:2d:32:43:
         f9:3b:3b:ee:d3:3e:c9:62:cb:7d:70:bb:b6:5f:3b:c5:f1:55:
         ae:8b:9e:1f:0e:a8:4f:a6:91:6f:f1:70:e1:37:a5:6c:fd:af:
         2f:68:25:61:23:e6:6d:d7:a6:85:04:af:cd:f6:7d:bd:eb:f0:
         d9:80:2a:68:73:25:bb:bf:30:77:e3:f4:1b:db:87:77:da:4c:
         1a:95:fe:d0:eb:92:7f:f0:ea:01:e6:88:3f:b0:cd:13:8e:3a:
         63:ca:36:b0:89:37:96:3e:f5:f5:c9:bc:4d:89:75:b6:70:db:
         72:40:2d:fd:b7:a3:c9:f7:e3:57:df:f3:c5:1e:41:6b:19:d9:
         b7:78:a3:cb:fd:af:68:8f:07:5a:d5:e2:43:7d:f4:3d:38:18:
         0a:f1:17:95:74:a4:5c:39:ab:df:eb:60:9f:e0:c4:00:3d:cd:
         af:73:db:a7:d4:47:a2:8a:cb:72:4f:f2:c4:39:75:b5:4a:2d:
         4c:38:5c:e5:4f:26:21:27:47:d3:c0:24:f2:c1:60:df:53:ff:
         ca:ea:68:ae:1a:0e:d8:2c:20:f4:f5:d6:f4:68:6b:aa:9d:31:
         a4:5c:d6:50:d1:9b:99:64:5c:99:88:c5:63:b3:7b:8f:9b:30:
         41:44:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:16 2026 by rpki-client