This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          1pbX9zP0tR7JEuXMxyWu1J6noiceRiIGC4jsytigx1Y=
Subject key identifier:   7C:E7:4F:AE:CA:B5:B4:42:EB:B5:B1:2F:69:74:74:63:0C:B6:42:53
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       35D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          3571
Signing time:             Sat 24 Jan 2026 14:18:25 +0000
Manifest this update:     Sat 24 Jan 2026 14:18:25 +0000
Manifest next update:     Sat 31 Jan 2026 14:18:25 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: fg9ujcYX7P3vqBbbyD1F6+Uqmmz2DMsrt6ezWR5eAxQ=)
                          2: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: 3CbheGLf7uJhmbUNdy9gSvSRtLJJeEHbny/TO1DTF3Q=)
                          3: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: EhEXBuPzBWhzkOB9D79utIvLCnQ6Mbwgg0WndIUIPp0=)
                          4: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: YFvhz1PGC7q57PnuhHNHoL2UdVqoUNbc1jn2FslOikU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13778 (0x35d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Jan 24 14:18:25 2026 GMT
            Not After : Jan 31 14:18:25 2026 GMT
        Subject: CN=6974d4b1-4bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:0c:95:68:dc:60:3d:f6:a2:32:cd:0d:42:
                    64:bc:cb:5f:0f:77:27:e9:f5:95:f6:94:9a:d9:ec:
                    cd:a3:d3:57:e2:7f:be:b9:d4:e1:ce:8a:05:cf:d4:
                    4f:77:de:57:ca:65:d8:18:f2:1b:e9:14:35:83:78:
                    f2:b9:00:7c:5c:76:9e:c9:35:ed:1d:7b:58:60:a1:
                    a4:bb:2e:57:dd:55:2a:05:b3:22:c2:be:dc:cb:02:
                    0d:a4:fc:8e:54:b8:fb:19:f9:c1:fc:0b:59:67:2d:
                    fd:f3:7b:a8:06:e5:40:10:de:fb:c5:cb:58:27:ee:
                    4f:43:86:f2:45:47:f2:4c:45:64:ef:e9:6a:80:50:
                    1d:e2:43:c3:df:ee:ed:c0:2d:59:ca:5f:44:99:c8:
                    4e:19:37:b0:4e:1a:e1:82:2c:61:98:bc:85:be:fa:
                    61:78:48:ff:3d:00:11:5c:3d:b2:21:29:8b:c4:28:
                    54:7f:8f:ba:cb:e2:e5:69:77:19:ce:19:a9:c6:08:
                    83:88:ad:47:38:ea:29:21:7b:12:82:09:85:ef:bb:
                    e7:5f:d4:e5:3e:7c:e7:82:ca:bd:af:d4:03:cf:4e:
                    ad:98:a7:34:78:b6:32:2d:66:b2:52:4d:73:78:da:
                    49:c5:41:12:82:7b:3d:49:24:29:24:5d:ca:09:fe:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:4F:AE:CA:B5:B4:42:EB:B5:B1:2F:69:74:74:63:0C:B6:42:53
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b8:61:f2:75:5b:26:8f:9b:2d:40:31:18:a0:f6:4d:fb:fa:
         c7:67:cd:84:da:77:6d:7d:71:9a:6f:c6:36:1f:ea:29:af:7c:
         bc:4b:cc:96:ce:3e:0a:38:b8:09:a0:51:a7:29:de:ca:30:c4:
         b8:13:29:fd:fd:82:da:20:19:db:0b:61:c8:ef:ef:3a:8c:29:
         57:0c:82:05:2b:88:c6:d6:65:60:d8:e1:f8:29:1c:c2:d9:df:
         41:11:f4:eb:0c:c9:66:62:2b:47:5f:d3:f5:d4:72:52:2c:a3:
         54:df:da:6c:70:9c:40:8f:7e:70:3e:c2:16:55:09:84:fe:44:
         8e:43:13:2a:d2:30:2a:38:02:6c:3c:79:a1:e7:6d:5f:44:37:
         55:cf:b9:2a:13:fd:5c:b3:e7:dd:fa:77:f5:e1:6d:24:f3:c1:
         e9:63:2b:47:c4:57:3e:4e:e3:ea:87:c6:c3:90:60:8d:59:3e:
         35:0a:1c:14:46:62:02:8e:67:f3:0a:1f:91:89:98:8b:f8:34:
         cf:29:b4:2d:fc:65:6b:0d:0d:f5:99:44:e9:6f:d5:f8:89:7c:
         1b:d7:9c:c2:ff:95:e7:0b:c8:e2:a9:8f:81:66:0c:e5:19:3b:
         d4:53:8f:85:cf:c9:25:cf:90:5f:15:8b:0f:7d:3a:74:a6:a1:
         2d:84:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:53 2026 by rpki-client