This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
File:                     qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json)
Hash identifier:          7p387bkeafl5pZWZPkVoVc9nlAvz8HkLdbM8UxSv2I4=
Subject key identifier:   87:A2:96:64:E6:05:3D:0C:82:3B:46:57:2F:98:57:78:85:24:52:B7
Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
Certificate issuer:       /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
Manifest number:          8C
Signing time:             Sun 25 Jan 2026 05:41:17 +0000
Manifest this update:     Sun 25 Jan 2026 05:41:17 +0000
Manifest next update:     Sun 01 Feb 2026 05:41:17 +0000
Files and hashes:         1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: nkSK8FKlWCFxcJO1ErdtnItJPRP5aVjInZCgcBWFwBc=)
                          2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
                          rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
        Validity
            Not Before: Jan 25 05:41:17 2026 GMT
            Not After : Feb  1 05:41:17 2026 GMT
        Subject: CN=6975acfd-86b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:39:d1:23:b3:ed:03:42:ee:7c:cf:4d:bc:
                    e0:cb:60:f3:51:88:35:32:ef:c1:b1:7c:d1:bc:26:
                    a6:95:a8:d4:21:c7:7c:26:50:57:9c:59:b6:53:9e:
                    59:c5:8b:e6:52:be:97:79:5b:e8:1c:78:24:35:b7:
                    4c:7a:4a:ef:1b:95:df:62:54:ec:4d:12:a7:58:e3:
                    a5:66:61:aa:c6:26:cc:a7:93:92:ef:48:5a:99:54:
                    e7:51:7c:f2:23:f2:5b:43:d8:c8:fa:a3:2f:e7:a8:
                    81:0c:50:51:f4:44:24:bb:12:2e:d5:45:12:fb:a4:
                    1e:23:54:15:95:27:e4:6e:a7:1b:05:42:59:3b:90:
                    99:10:24:e6:1b:c2:64:64:a2:7e:93:3d:c6:cf:9f:
                    70:79:dc:5b:f6:5d:a5:e8:fe:73:79:25:1e:6c:6b:
                    47:84:ff:39:d4:74:89:50:a0:fe:03:0f:fb:07:7e:
                    77:6d:2a:9d:23:10:bf:9e:1b:d2:63:63:a5:13:b5:
                    b4:b7:c6:33:c7:85:52:8a:ac:e9:26:95:bc:82:97:
                    78:76:07:53:ee:c5:8a:92:d1:cd:01:77:f0:f1:dc:
                    35:ca:2b:8c:9c:d7:d7:d8:5d:08:38:ce:ee:50:85:
                    f5:16:45:4e:ed:0c:55:5e:97:ad:0f:cc:cb:eb:33:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A2:96:64:E6:05:3D:0C:82:3B:46:57:2F:98:57:78:85:24:52:B7
            X509v3 Authority Key Identifier:
                keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:06:38:bf:cd:0f:d0:8b:93:80:8e:e2:7d:65:fd:a5:63:eb:
         6a:43:3a:e9:66:46:f8:89:3d:d2:80:15:3e:bb:6d:6c:a1:a1:
         fa:93:0b:9a:cc:05:2a:0e:b3:3f:57:5d:94:39:01:43:9b:f3:
         40:49:42:59:90:dd:24:58:a8:f3:7f:16:b6:be:63:e7:18:80:
         0a:db:9b:35:d0:34:73:25:0d:c5:f5:fa:ee:e5:49:ab:05:74:
         60:98:ab:6f:ea:66:83:a9:5a:49:15:50:d8:c2:ea:84:d8:71:
         c7:43:2d:23:bf:c6:85:de:af:16:37:3e:bd:8f:08:c6:5d:a5:
         e5:a7:74:d1:f4:68:4a:8a:2d:2a:77:0a:91:58:e7:7f:cf:40:
         4f:0d:46:0b:03:20:a2:66:b1:56:95:77:6a:f9:57:e9:e5:7a:
         6f:02:d4:47:57:73:08:57:89:52:52:85:84:ab:16:a2:8b:77:
         eb:10:b7:74:9d:6d:11:fd:2f:60:31:83:bc:f4:8c:81:14:2b:
         b5:dd:d8:d9:b7:53:8c:cb:33:f7:23:86:1b:2b:1c:e7:2f:a7:
         ee:24:48:85:de:57:21:9f:eb:b2:91:07:eb:9e:63:bc:61:f5:
         e1:ef:76:53:8c:da:87:f0:b8:cd:3a:79:0a:86:3d:ee:9b:e0:
         7e:eb:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:18:03 2026 by rpki-client