This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File:                     QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier:          wWZUogl/3Yj6loEoC2EV+a3aXgTfgzP2VX+CD0wx6mU=
Subject key identifier:   1F:BC:99:83:9C:7C:7C:FB:C6:CE:6D:DA:34:69:4C:34:0C:B1:6B:4D
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer:       /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial:       0C34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number:          0C34
Signing time:             Sat 24 Jan 2026 18:19:48 +0000
Manifest this update:     Sat 24 Jan 2026 18:19:47 +0000
Manifest next update:     Sat 31 Jan 2026 18:19:47 +0000
Files and hashes:         1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: 2/4MdRavQQplrpySBtpdbgfvGD4W5/FieDpL7THZ1xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
        Validity
            Not Before: Jan 24 18:19:47 2026 GMT
            Not After : Jan 31 18:19:47 2026 GMT
        Subject: CN=69750d44-f6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:ab:8a:c9:0f:1f:fc:2e:34:67:39:70:70:
                    99:1f:05:22:6d:bc:41:54:72:4c:d2:31:35:a1:8c:
                    7e:7a:08:aa:51:7b:4a:1b:ed:65:fe:06:0a:78:29:
                    a9:6d:58:f5:d0:ef:ad:93:ae:0b:ce:4d:f3:11:fd:
                    f5:b5:39:01:6b:5f:ae:a6:ea:64:8a:02:c8:7f:f9:
                    5e:9f:fa:cb:62:ce:af:76:cb:86:14:ef:7f:73:34:
                    e2:c4:5e:0f:3b:e0:03:68:b7:23:1e:36:11:ff:83:
                    9a:7e:77:84:b2:4f:d7:37:02:76:08:f7:8d:7a:34:
                    45:92:57:f2:d9:69:51:4f:d7:5c:55:54:37:22:e2:
                    3e:0d:f4:d3:2b:1c:db:aa:e0:f2:3e:30:7e:12:9b:
                    01:16:b3:9f:c5:dd:4c:16:52:34:1a:05:7d:ec:48:
                    7a:06:a5:fa:9e:8d:50:d3:2b:7d:2e:f9:ed:b7:53:
                    ef:0f:1e:be:03:3c:8a:c2:2f:08:30:bc:02:cf:55:
                    5a:af:f8:cd:44:99:c5:12:7d:3e:06:cd:0f:28:e7:
                    52:c9:56:ba:5b:9d:4c:ee:9e:74:d4:6f:00:a4:ae:
                    5d:87:fa:f1:e8:d4:8e:42:40:8e:fa:52:aa:4c:a9:
                    f7:a3:a7:b6:30:71:1a:67:fa:9b:c1:56:fe:08:f6:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BC:99:83:9C:7C:7C:FB:C6:CE:6D:DA:34:69:4C:34:0C:B1:6B:4D
            X509v3 Authority Key Identifier:
                keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:64:cb:c5:84:6e:32:36:c2:8d:56:d7:0c:ea:25:cb:63:0b:
         04:70:eb:fd:7f:c1:c2:9f:9c:87:9c:56:18:6d:75:19:40:dd:
         49:2d:f2:2f:5c:52:1d:3e:b1:98:73:96:c1:8e:14:f7:db:bd:
         f6:c7:56:a6:8b:4e:70:ed:e9:5e:26:13:93:df:3c:6f:96:8c:
         bf:a9:84:06:f2:ff:25:f3:d1:93:11:2b:1a:38:81:10:8c:31:
         f5:5a:ec:9f:92:f8:ee:d1:5c:2e:6b:3f:c6:f3:01:29:d2:af:
         ac:43:5b:df:7e:63:e3:ca:eb:f7:7f:01:20:ac:97:01:e5:02:
         29:9d:c1:57:16:04:bd:45:1a:9a:3b:9e:23:dd:ae:39:ab:37:
         0e:12:2b:5d:a8:57:41:57:e7:e4:fb:19:8f:24:9f:cd:88:45:
         99:e8:62:86:46:a7:1e:3b:58:fc:3e:7f:57:66:d3:2d:c8:32:
         3b:5b:9b:9d:8b:2a:08:73:4b:8a:4a:5d:7b:41:ad:73:ee:1e:
         0a:0e:d3:3d:cd:14:75:66:78:f5:1a:bd:a4:0b:0f:2f:71:f0:
         30:e8:cf:ab:41:e4:ca:32:4d:1e:57:31:b5:9a:73:47:dc:c7:
         7b:3e:1d:88:c8:08:92:9a:f0:db:ac:c9:52:c5:5a:1c:bf:aa:
         3a:ad:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:44 2026 by rpki-client