This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          P+WH2BtEe613ESxVgYSD1xm8RUeyuC3n9Tln4ghOtZU=
Subject key identifier:   54:0D:95:D8:E6:06:CB:DC:F6:E4:7A:8C:95:C3:99:60:A4:EB:B6:E0
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0D84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0C9C
Signing time:             Sat 24 Jan 2026 18:29:03 +0000
Manifest this update:     Sat 24 Jan 2026 18:29:03 +0000
Manifest next update:     Sat 31 Jan 2026 18:29:03 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: M/Kcc1M6duiyy1mt2A2v/z5ycTJjSPvwegCL+RGHOcY=)
                          2: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: 2TDhWa5aEDfj/OSlXTwrUwhI6/Fx1H9p120AVX8QFaw=)
                          3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: mXW/o+2lA5CH8jN2VyvKEwBUBouEpc3dMmyPpKEoHZM=)
                          4: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: auKtqb5gzHutedVTKNtnJRubcnvktJVt0VqmZO9kd5I=)
                          5: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: oIlNxA/X4w99Dtq7i69xwEidK0QOO+TfD/eZvN+32J0=)
                          6: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: YhNbhFzO7WHU8UmccgfY4hoJ4t2k4JoW/bwFa0YyNSk=)
                          7: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: WvJTTw2h2x8eNtvB9hnnw/qG2i/35vtgBc53uEDUyyE=)
                          8: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: 7eWRkSZdf992QxbF3h3c0q+aJY3RkuNNtdN+bDuFcbA=)
                          9: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: JtPXx1WRgsbzmrsNLInF92woE+rUeMA5vr5GiqEQHmw=)
                          10: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: 7+0RKtv/QFqUJhAIU0jwK/kD2sQJylo8+nExaHdj0YU=)
                          11: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: FBcOfIAiLQzUwARh2vRnAPUlJE7QYwm514/u+ntzHTg=)
                          12: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: CD4VpLZIjAnREdFcpXUGct5U+Mw4EMKjpjAEDuYsKeI=)
                          13: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 93zu71Bbjz/nav2+CvE7DZaoexH+Z1OOLkl6NHafn3s=)
                          14: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zctn/DI/I3BOanvNBzpc9IpPDcrqCUE0GkQVT4ki+nE=)
                          15: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: LVCceArjrNx9uJHc32TrQrfuXNf5yNmqL+LVGTZ/kcg=)
                          16: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: tQ4cyb3heb45htZx1h245p6eBfZ/hq4FrcBUNHIJiPo=)
                          17: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: fnkMj+nr5Q7iQNfww9b8AyH+pO8Tw9U80LkD+4bYx0w=)
                          18: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: JS8uyA5ZDD31OuyzTdeFf/XwQTyv6XqrH8RkgQ1lshw=)
                          19: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: yQvc3ntNpG7BJNIHH6+Ojk1HrYYp15Nu10dcUFhCOA8=)
                          20: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: Y/n3NB4Jr09jG3Cs+pVr+0yWJBuRJo/kO/On8tf2V5E=)
                          21: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: ba+G7MIs0RgCQosv/d6yBO5KvwyRloGnmrJta7ui9GM=)
                          22: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: I5wPyYqqdfF0mXRXOECwyg6iI7z8KBKDKIwaF8mL0MA=)
                          23: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: ht52TuAJDLY4uwUtrNchRV8xkg3G9MLjO4Fq4TB9fIk=)
                          24: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SfxwUXkZ6scs6b9stvrkH0M3EDnjNSsIuRA3moh8vhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3460 (0xd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Jan 24 18:29:03 2026 GMT
            Not After : Jan 31 18:29:03 2026 GMT
        Subject: CN=69750f6f-8ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:45:75:63:74:9c:a0:18:b8:4f:74:0e:77:42:
                    9d:26:bb:6e:b3:3b:a1:d0:fb:aa:eb:57:b6:82:25:
                    05:66:6f:7f:3e:cc:47:cb:60:63:c7:2d:59:7d:1d:
                    60:24:52:5f:c1:8a:ca:70:e0:20:33:95:1e:d0:b6:
                    ea:55:71:fd:1b:e5:1b:b8:4f:e2:c4:9e:e7:f4:d9:
                    7a:c7:37:b8:87:01:66:d7:82:7e:2f:eb:c1:08:20:
                    e2:f5:bb:5c:50:2e:a0:3b:32:9a:79:56:01:2a:f3:
                    6b:1d:f6:10:e1:e6:77:93:93:8d:c9:fa:77:83:af:
                    ac:83:5b:9d:48:58:0f:a5:3f:a6:07:3e:d8:b6:42:
                    e1:9f:b9:3f:4d:81:9d:71:e5:8c:f6:86:fa:2f:bf:
                    6c:d0:37:d7:5e:64:62:0a:9c:76:da:ba:36:8a:08:
                    52:b5:7c:10:f1:c8:c2:9f:05:20:e9:ac:df:8c:0c:
                    33:8c:3c:50:d8:ba:3f:d6:51:7a:f1:8a:41:c3:f2:
                    c7:3a:cc:57:87:db:41:b8:78:7f:49:56:e2:27:b5:
                    c1:f9:d1:cf:53:98:9e:81:b3:14:85:d7:2a:e0:49:
                    e8:2e:3c:f1:3d:68:d1:f8:d2:cb:fb:48:00:a6:2b:
                    7d:2b:1d:73:e3:c2:71:bc:d3:4a:88:eb:99:01:19:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0D:95:D8:E6:06:CB:DC:F6:E4:7A:8C:95:C3:99:60:A4:EB:B6:E0
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:be:c3:10:24:3b:cf:4a:36:b2:75:4c:eb:39:c3:7f:9b:
         0f:25:97:e6:d5:1f:60:60:0a:a9:49:9a:e6:cd:cf:82:25:91:
         04:c0:5f:24:eb:d9:97:12:1a:fe:17:26:90:60:e3:b6:51:90:
         ee:3c:23:69:73:a6:19:7b:6d:e5:2b:61:81:09:b0:7e:4e:3c:
         73:29:ce:92:4f:81:45:d6:e9:44:39:b3:9d:26:a2:22:ef:72:
         0a:ad:6f:a9:71:93:7d:99:aa:66:6b:f1:4d:20:87:95:b8:d1:
         89:ec:9a:0c:24:36:b8:10:76:14:00:7b:d3:cb:7f:11:30:1c:
         e9:9c:ff:e8:a4:ee:3d:a3:8f:5f:28:a3:aa:66:a0:eb:aa:a9:
         3e:0c:9c:84:83:0a:f2:cf:aa:6a:f5:ab:07:ca:ab:b5:6e:13:
         b9:d2:17:8c:85:0d:97:69:70:2e:2d:14:de:61:f2:7f:bd:30:
         71:02:1c:35:af:6c:01:a2:8d:a7:88:e8:a8:cf:e1:57:65:f8:
         81:65:9e:0c:9e:cc:17:50:b4:f8:ef:61:e9:87:8b:d6:11:c9:
         e2:05:72:48:71:a1:f6:b4:51:a5:8f:ba:a6:a8:04:0d:be:60:
         25:df:5d:fb:74:8b:36:77:a3:de:cd:da:51:f2:41:7e:cb:c2:
         56:d7:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:26 2026 by rpki-client