This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          pbjsHowwq8cR/fc1nNNSC0SoRpiIr/Y0Ulq4zeyVNp4=
Subject key identifier:   42:3F:14:C3:06:B7:44:96:C9:17:5E:6B:AE:B2:F3:09:AB:60:E0:1C
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          0902
Signing time:             Sat 24 Jan 2026 19:44:17 +0000
Manifest this update:     Sat 24 Jan 2026 19:44:17 +0000
Manifest next update:     Sat 31 Jan 2026 19:44:17 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: FPJKeONcMHyT1twdT+j0P+fHIYo9HGoFFMVtRzA4r9c=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: AenHLZ8tFLrfLlf8LlZoDLQVepIJzcT6WIJ3CgJXjkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: Jan 24 19:44:17 2026 GMT
            Not After : Jan 31 19:44:17 2026 GMT
        Subject: CN=69752111-bc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:0c:2b:d2:f0:4f:27:d0:88:ad:03:14:33:
                    aa:3a:09:cc:15:4d:7f:72:17:17:92:c9:df:f8:30:
                    8f:6e:2b:ca:8a:9e:c4:d4:98:16:fb:11:bd:4b:8b:
                    e9:d6:ff:ca:d8:0b:c0:3c:f4:4a:98:8c:22:68:b6:
                    1e:f4:15:94:3f:2e:6e:5c:cc:6a:8c:5f:c8:53:de:
                    53:71:21:cd:96:fb:44:ba:ad:bf:4a:72:13:d3:84:
                    d4:87:4f:a9:0f:4b:81:33:da:1d:6c:6a:6d:29:b2:
                    08:43:95:24:8b:63:b8:9a:cf:ea:b6:d4:22:7d:19:
                    af:ae:8c:93:3e:ee:e6:ce:4e:63:04:9b:9b:ba:36:
                    bb:d3:4b:51:5c:ab:36:dc:06:e2:5f:f7:b7:05:37:
                    03:05:12:ae:98:70:44:8e:f8:02:b4:4e:33:8d:77:
                    89:ec:c4:d1:0e:1f:90:72:16:28:b8:30:00:d3:00:
                    a3:41:c4:57:82:ee:34:ef:8c:ef:9b:28:91:79:ad:
                    4d:e3:5c:fe:f6:01:b4:69:27:67:a7:2b:92:70:20:
                    d1:e2:08:08:68:d8:d2:88:44:62:7c:01:1a:a6:e1:
                    ee:f0:31:cd:0c:59:a3:95:bb:a6:d3:81:72:78:d3:
                    d6:59:92:08:15:ee:09:4f:f5:24:76:65:0a:66:8e:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3F:14:C3:06:B7:44:96:C9:17:5E:6B:AE:B2:F3:09:AB:60:E0:1C
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e4:6b:3a:c4:de:8a:97:09:c6:2f:4a:fc:22:ad:c3:6a:25:
         a2:ec:5b:ab:da:70:f1:75:92:07:37:33:b2:c2:46:e4:32:61:
         59:32:a4:73:5e:58:4a:c6:a3:88:02:ff:0d:9b:b8:e4:52:76:
         b8:4e:b7:af:77:0f:ee:bc:f7:4d:b7:1f:28:88:cc:b8:37:88:
         f3:40:f1:ec:1e:68:e0:17:62:b8:1b:7c:09:08:b0:98:b2:5a:
         81:8e:3d:df:6a:19:67:b5:1a:43:7e:a6:7c:6c:ea:f0:a8:dd:
         62:b9:67:35:01:c1:25:7c:10:a6:96:9f:9b:95:9d:19:0c:37:
         c6:34:24:e9:47:fd:6b:7b:a2:4b:32:6d:1c:e8:db:1e:35:bc:
         05:77:46:30:4b:a2:91:b3:7e:05:6c:94:d3:91:a1:b4:ec:be:
         3a:ed:2d:3b:7f:88:9b:44:db:b4:a4:4c:52:8e:68:be:e7:e8:
         d7:b7:e9:1c:4d:40:b7:69:92:63:b0:85:5a:ed:ca:3b:84:d9:
         7c:9d:54:83:b9:87:16:98:6e:92:14:d9:41:86:a7:d0:fd:e5:
         28:eb:b9:b6:87:cc:84:b8:e6:6e:49:55:9f:0c:bb:e6:43:3f:
         71:1c:57:f1:56:5c:f9:79:3d:c7:76:91:68:de:e1:4f:62:be:
         cb:60:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:24 2026 by rpki-client