This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
File:                     Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json)
Hash identifier:          HGN5/9Zt35XLqo/LFVatcZBS416ZZ0CPooK2eCZfFjQ=
Subject key identifier:   64:27:55:FE:A8:A2:0E:31:0B:F3:D5:1A:2C:F0:47:CE:09:69:77:00
Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
Certificate issuer:       /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
Manifest number:          0192
Signing time:             Sun 25 Jan 2026 02:49:00 +0000
Manifest this update:     Sun 25 Jan 2026 02:48:59 +0000
Manifest next update:     Sun 01 Feb 2026 02:48:59 +0000
Files and hashes:         1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: VzSOu7ghnd2qAl2ScgjEJ62d0ZwVgoUYNOsriLHEiDw=)
                          2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: BnhXnmbrZvn4TUpNGo1fZeRsdqCO9c2ErR/1CCvmiV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
                          rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
        Validity
            Not Before: Jan 25 02:48:59 2026 GMT
            Not After : Feb  1 02:48:59 2026 GMT
        Subject: CN=6975849c-e8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:32:2a:45:e8:57:f8:aa:b1:18:f1:78:68:
                    8d:54:6f:95:19:16:5f:60:4b:28:dc:08:da:20:31:
                    ae:b0:36:25:7c:88:51:29:56:6d:0a:89:fc:1b:4f:
                    7e:2c:96:b3:a8:4a:c5:db:f6:16:dc:78:9b:bc:bc:
                    54:d7:67:92:44:a4:8d:a5:86:81:3a:4d:39:f7:6f:
                    35:36:e7:e7:3f:96:91:45:cd:84:be:1e:87:ab:dd:
                    15:cc:58:27:97:e4:a3:c6:fe:6c:13:f0:57:72:5c:
                    68:32:2a:69:a2:41:8b:7e:f1:cc:d3:d1:7f:47:3b:
                    0a:ac:6d:5f:de:90:27:d4:9c:a1:c5:52:f2:90:be:
                    cf:9f:9c:0c:fd:98:09:60:e8:d1:d4:2f:70:53:61:
                    d9:bf:5e:da:0d:58:69:a9:c4:32:92:a5:ef:db:16:
                    7c:6a:87:29:6c:96:87:33:92:1d:f1:1b:b4:97:3b:
                    80:84:ca:65:e3:51:80:33:ed:93:94:9a:7d:7d:c8:
                    f0:92:85:29:44:aa:29:7c:05:db:c9:f0:f6:9b:75:
                    78:b2:25:c0:ff:3d:66:9c:12:2c:51:72:f1:66:37:
                    c5:5f:0f:d2:e3:7a:dc:15:5d:ab:a2:92:92:93:01:
                    00:8e:eb:93:68:20:65:38:2a:ef:d8:99:a9:f1:1d:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:27:55:FE:A8:A2:0E:31:0B:F3:D5:1A:2C:F0:47:CE:09:69:77:00
            X509v3 Authority Key Identifier:
                keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:bf:7e:f0:fb:c7:66:4e:31:a5:ff:39:b2:39:7b:7e:7b:45:
         2e:62:ad:3c:97:cc:31:e6:62:81:da:d6:fc:d0:1b:e6:62:ad:
         8c:22:4e:66:9f:0d:84:c0:ff:ff:a5:8e:d3:c5:cb:c5:3f:dd:
         28:f1:2a:e3:53:60:54:91:76:54:9e:64:65:8a:0d:79:39:9f:
         51:17:b2:01:0c:47:c1:70:71:23:19:8b:69:a6:88:6d:3f:65:
         12:9a:bc:7a:4d:b6:d3:63:05:c4:fb:2a:97:2d:37:0e:64:40:
         91:00:dd:0a:da:61:fe:02:2f:53:38:c2:37:86:7f:1d:48:29:
         8d:6f:22:0e:f0:41:ab:60:62:2c:65:42:97:d9:9c:f8:81:ff:
         5f:80:ab:3d:f1:a5:c6:b9:38:f6:34:95:17:ef:77:36:91:22:
         87:00:bf:32:e7:21:ed:eb:25:8d:1f:31:e3:43:5d:f9:86:27:
         36:1f:79:d8:da:a4:cf:63:04:8b:72:38:27:cf:46:30:07:d1:
         78:be:df:c7:c9:15:05:15:24:a7:9e:54:10:45:27:d7:d5:c6:
         c2:62:89:b2:b6:d9:f3:74:05:32:fb:b9:2d:98:73:e4:02:da:
         0e:a6:db:af:02:e4:79:54:3f:76:92:20:00:ea:1e:63:d9:b7:
         1e:62:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:56 2026 by rpki-client