This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
File:                     QG4t-6oOoAfdxmmT8sezCNoKGlc.mft (raw, json)
Hash identifier:          Z98QHtf2IZRiuc50GCQIQV/GzNPkoqQUF18F9IRU+Lo=
Subject key identifier:   4A:33:68:22:32:22:DA:F2:CE:58:17:DC:AE:B0:CB:A6:D1:5A:AE:B9
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Certificate issuer:       /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
Manifest number:          0C44
Signing time:             Sat 24 Jan 2026 18:16:02 +0000
Manifest this update:     Sat 24 Jan 2026 18:16:01 +0000
Manifest next update:     Sat 31 Jan 2026 18:16:01 +0000
Files and hashes:         1: QG4t-6oOoAfdxmmT8sezCNoKGlc.crl (hash: KYf+WIfbtgb8Jb10YRkHgoBN+eAP6gtp1J9P3J+T7QI=)
                          2: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (hash: fjLr8uQxYz0b2IkiqsLdHlpaSbA1UhMnKJdo096hNVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
                          rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
        Validity
            Not Before: Jan 24 18:16:01 2026 GMT
            Not After : Jan 31 18:16:01 2026 GMT
        Subject: CN=69750c61-76d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:7a:c7:f1:0e:d0:74:d6:67:cb:9d:3e:a7:
                    44:17:63:94:5c:7a:a3:17:c2:9e:a8:e9:77:b3:ca:
                    a4:74:15:ea:69:7e:3c:03:6b:d6:83:8c:33:a1:07:
                    5b:51:20:7e:eb:40:3c:fb:cc:a1:01:94:f7:a2:8a:
                    6f:b7:78:24:47:13:1b:d1:20:08:3c:bc:46:1c:ae:
                    24:90:26:c1:41:26:48:4f:f8:ae:f4:30:66:1b:b7:
                    5a:48:aa:f0:03:97:cd:b4:a2:5c:6e:85:30:ea:fd:
                    10:9d:f2:fc:6b:59:b0:21:8e:31:62:c5:b4:1a:c6:
                    f4:d5:e7:3d:61:bd:e7:49:bb:0e:40:7f:c3:81:33:
                    74:bc:76:2c:eb:8b:dd:a4:f7:be:d5:23:c6:b7:e9:
                    37:cc:71:17:6a:e8:38:65:be:d6:92:71:a8:61:5a:
                    41:a0:2d:a2:59:8f:80:46:3d:15:a3:ec:31:a0:0d:
                    c9:8a:a4:d0:c2:d5:78:e2:15:60:4f:22:76:f5:f9:
                    f6:f1:66:86:07:49:41:0d:97:08:aa:eb:4c:25:94:
                    2f:2c:05:f9:e2:83:29:b1:8d:3d:76:67:d2:84:02:
                    37:68:f2:36:aa:c7:31:ff:34:4c:2a:08:89:bf:35:
                    72:44:56:bd:e7:a6:eb:7f:be:a8:a3:3b:87:44:93:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:68:22:32:22:DA:F2:CE:58:17:DC:AE:B0:CB:A6:D1:5A:AE:B9
            X509v3 Authority Key Identifier:
                keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:88:0b:70:3e:44:a6:49:49:46:4d:34:28:ee:72:f3:2c:5b:
         c0:b6:c7:d9:78:42:75:1c:e1:c5:a7:d8:a2:f6:c2:18:ab:57:
         09:89:06:33:94:9b:c3:00:cd:ef:5b:73:53:fa:07:83:ae:1e:
         1f:a4:3f:9a:c0:42:41:a9:e4:d2:d3:5c:9f:c2:3b:06:0c:27:
         b3:e8:bd:67:3b:dd:1c:91:b0:31:95:2e:ae:d3:ed:c2:96:85:
         e5:d0:50:61:d8:29:4c:0b:93:f1:0b:2d:fc:37:98:6c:7e:2a:
         7f:19:6d:f9:7a:16:81:2b:84:97:57:f0:9c:07:cb:08:3c:93:
         61:f6:c7:56:62:04:4d:51:61:1f:29:24:9b:61:d4:3e:69:bc:
         51:7e:00:3c:84:22:61:59:f3:8f:5f:10:52:a9:00:75:61:a0:
         69:71:6b:52:c8:2e:d5:36:a5:89:91:4f:35:af:39:5e:72:da:
         b7:66:eb:ea:e5:83:60:7b:89:34:05:3d:90:b1:bd:65:c7:80:
         01:cc:4d:07:85:49:4b:6d:77:38:2d:8a:d4:b3:e9:0c:9e:07:
         11:ba:27:e1:5d:2d:fd:8a:5e:bf:5e:46:12:62:ff:d1:fc:87:
         50:3b:cd:5a:40:b2:db:d3:b0:5c:ce:a2:1e:6e:2b:67:b3:67:
         ee:d5:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:44 2026 by rpki-client