This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
File:                     QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json)
Hash identifier:          n/KK8JvPmhxHyYgxSMRwjE4d/nQEvWijfYTNF/3BUmg=
Subject key identifier:   C0:26:B5:2B:D6:7B:52:29:CC:C1:D3:B1:3B:98:E3:63:60:3C:4E:AB
Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Certificate issuer:       /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Certificate serial:       34FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
Manifest number:          34FF
Signing time:             Sat 24 Jan 2026 14:45:03 +0000
Manifest this update:     Sat 24 Jan 2026 14:45:02 +0000
Manifest next update:     Sat 31 Jan 2026 14:45:02 +0000
Files and hashes:         1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: djXVIKMkYYQveO+eauiLbCuKYhvXj8u4G9dTZ9dXuwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
                          rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13567 (0x34ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
        Validity
            Not Before: Jan 24 14:45:02 2026 GMT
            Not After : Jan 31 14:45:02 2026 GMT
        Subject: CN=6974daef-3dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:db:f3:e4:60:27:50:99:a1:45:9f:0e:9d:
                    9f:c9:5d:5b:b2:65:16:b2:ae:f2:ef:44:ba:69:2b:
                    08:2d:9f:35:be:a9:49:40:3f:1d:84:12:52:ba:b4:
                    87:f3:0c:75:b5:92:25:2b:6e:02:10:15:9f:56:35:
                    1c:83:33:20:1a:84:bc:7e:f3:42:5c:4f:c2:f9:d5:
                    f9:1f:4b:d0:59:ff:df:c1:bb:75:f5:6f:2a:1e:19:
                    d4:f3:e5:12:bc:d5:62:45:ea:86:73:a7:4b:33:2d:
                    fc:a1:17:bb:69:ed:29:88:20:8b:21:27:fd:48:80:
                    1b:c3:d1:4f:aa:49:cd:92:02:77:e8:c6:99:66:84:
                    06:29:19:8f:b5:d1:d0:cd:cb:8b:df:e0:85:b3:54:
                    2c:eb:22:ac:21:21:d2:e9:0e:f9:82:ba:60:14:04:
                    4a:84:d8:1d:e0:7d:9d:5c:5a:74:21:0b:da:e1:58:
                    f3:0c:5a:63:fd:c6:53:4a:2b:80:b0:2c:3a:72:cd:
                    73:06:e0:ee:4e:09:63:11:dc:f9:8b:cf:b7:42:df:
                    29:0e:0f:59:59:ef:d3:cf:e9:36:bb:15:9b:5d:c9:
                    29:0c:59:11:74:fb:52:e5:55:97:35:7c:48:e4:04:
                    82:47:b1:e2:6c:29:6d:58:e8:18:e3:75:ce:9d:59:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:26:B5:2B:D6:7B:52:29:CC:C1:D3:B1:3B:98:E3:63:60:3C:4E:AB
            X509v3 Authority Key Identifier:
                keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1d:fb:b7:64:70:de:7c:9c:cf:cb:e4:e7:9f:27:f9:d3:a9:
         08:69:77:d3:32:d1:42:91:aa:b0:44:2b:cd:8e:e0:d6:b3:ca:
         d5:c6:5d:be:6a:fc:be:21:53:48:3e:e2:01:0a:90:88:5c:a2:
         a6:f7:71:d8:6e:e4:12:7a:6c:df:d4:93:ee:d7:d4:9b:e6:f0:
         34:11:f0:69:ed:57:bf:69:3a:84:5e:9f:f5:58:e9:d8:28:0b:
         c9:8b:66:60:ca:fa:05:48:7e:55:1b:c0:d8:b1:c2:05:2b:4e:
         f7:6d:af:08:64:61:69:53:8a:9f:fe:57:93:ac:d6:9d:21:76:
         cf:c3:56:b8:fe:57:0a:0a:ab:a3:68:53:9e:a3:71:e5:2c:63:
         31:2d:f0:6d:07:06:4e:93:24:b3:7f:66:65:b9:93:41:6a:b7:
         20:09:9f:0e:56:a6:fb:10:f6:2d:35:39:48:5e:96:b5:94:01:
         fe:98:4e:30:34:aa:95:e7:73:0c:aa:78:43:c3:a6:c9:7a:68:
         3e:f8:3a:00:65:77:63:dd:c7:24:41:82:d9:dd:d1:84:0b:15:
         0a:ef:5b:d4:1f:38:6c:a6:88:9a:2e:2a:00:c6:70:28:79:60:
         50:d0:c1:9c:bd:1e:c7:6a:63:6c:a4:cf:3f:f8:7d:60:d5:64:
         41:fa:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:51 2026 by rpki-client