This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File:                     QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier:          fleJmDVlg2Lr/qh3IMFxsVFCo+Inz7NhaVm1GEFDxLM=
Subject key identifier:   29:8B:31:F3:82:CC:11:34:20:D2:22:0C:28:77:22:81:71:9D:05:12
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer:       /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number:          C3
Signing time:             Sun 25 Jan 2026 05:04:29 +0000
Manifest this update:     Sun 25 Jan 2026 05:04:28 +0000
Manifest next update:     Sun 01 Feb 2026 05:04:28 +0000
Files and hashes:         1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: 68gUkyI/J0uSLIwvHsLnay+Bbm6kAVNTRWQPzaRpLlM=)
                          2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: DSiGqsj/wHYJqRQngYpUalsfP9r6Z3qaSue0LX+uo6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
                          rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
        Validity
            Not Before: Jan 25 05:04:28 2026 GMT
            Not After : Feb  1 05:04:28 2026 GMT
        Subject: CN=6975a45d-08d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:13:58:4d:78:e3:f7:fe:b1:c8:c7:0f:17:
                    ff:57:92:22:6a:60:fc:c5:41:74:63:07:ea:2b:38:
                    76:19:47:3d:09:f8:91:1c:03:83:3b:25:ed:34:a0:
                    c0:70:50:9f:6e:e0:10:3e:46:d7:20:90:ed:ca:63:
                    dc:21:cb:83:f8:91:5d:df:34:76:3b:fe:93:95:6d:
                    d0:81:87:69:77:f0:43:0b:32:79:fd:85:8e:7e:f7:
                    21:fb:0d:c5:a7:54:71:8a:bd:63:31:54:e2:48:dc:
                    31:1b:14:f7:5f:15:75:4e:46:7c:db:e0:06:d2:f2:
                    38:42:55:e1:25:01:f2:26:33:fb:f1:80:f2:a5:ef:
                    5d:14:3c:6b:f2:ec:62:75:a5:f9:f3:fa:02:49:c0:
                    19:28:46:44:22:10:d6:c4:09:c8:4b:a9:59:65:80:
                    15:9d:fc:9d:3c:76:2a:28:87:44:e3:e0:08:e5:bb:
                    c7:3e:9b:7a:23:ba:34:b5:1a:7d:f9:de:26:10:f2:
                    5e:fb:2c:2e:cd:10:0b:d1:0f:de:ed:4b:18:6e:98:
                    87:21:9d:19:8e:87:ae:78:40:68:5f:0c:6d:11:d1:
                    54:9c:fd:83:7f:84:b5:ab:7b:c8:51:2d:0f:82:b1:
                    6b:6a:c2:64:0b:15:bc:b0:16:de:19:2b:61:81:2f:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:31:F3:82:CC:11:34:20:D2:22:0C:28:77:22:81:71:9D:05:12
            X509v3 Authority Key Identifier:
                keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:7f:ca:4b:2a:58:cd:bf:68:1c:0c:46:ef:79:8d:45:d4:
         39:0d:10:3c:c2:fc:c5:c9:d3:80:77:e9:ca:79:b9:0e:7e:16:
         0c:32:ba:a4:0c:52:21:dc:e6:73:cc:44:ca:d1:46:38:bf:c7:
         d0:de:13:c7:d3:1d:43:60:d8:9d:a7:cd:31:42:c4:93:aa:22:
         a8:1e:f1:f7:b4:c2:2e:52:19:27:0b:12:cb:4f:42:fd:3a:6e:
         4f:6d:4d:97:1e:55:ae:33:39:ec:c6:92:04:b6:16:fd:c8:58:
         14:e4:0b:0b:61:f4:d5:de:37:1c:d2:7c:7f:01:6c:a6:3e:ee:
         f7:89:23:64:68:4f:64:e3:6a:3b:39:b0:63:49:70:5c:c9:a3:
         8b:c3:c4:a3:57:99:0e:dd:cf:7c:69:4b:92:58:9e:c2:ce:b9:
         77:c7:a6:16:8f:40:7b:9d:5d:db:46:79:a2:35:33:84:d4:a3:
         73:a3:a4:d1:b1:96:4c:e1:30:0f:23:c6:17:93:92:c8:e2:9c:
         66:61:24:e6:2a:e8:a2:e8:f6:3f:5a:f5:14:cb:71:65:51:88:
         ec:84:94:0d:72:e6:c9:4d:1f:88:2f:22:08:2a:40:18:41:1f:
         4d:e5:15:f3:b5:07:7e:5d:a8:83:f7:0a:df:3f:39:e4:37:1e:
         f2:2c:27:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzMUYxMTAvBgNVBAUTKDQwM0JCN0I5MThGOTE1NEFEODJDMkFEMzVBRUZDMEFC
RThEMDZBREUwHhcNMjYwMTI1MDUwNDI4WhcNMjYwMjAxMDUwNDI4WjAYMRYwFAYD
VQQDDA02OTc1YTQ1ZC0wOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyPMTWE144/f+scjHDxf/V5IiamD8xUF0YwfqKzh2GUc9CfiRHAODOyXtNKDA
cFCfbuAQPkbXIJDtymPcIcuD+JFd3zR2O/6TlW3QgYdpd/BDCzJ5/YWOfvch+w3F
p1Rxir1jMVTiSNwxGxT3XxV1TkZ82+AG0vI4QlXhJQHyJjP78YDype9dFDxr8uxi
daX58/oCScAZKEZEIhDWxAnIS6lZZYAVnfydPHYqKIdE4+AI5bvHPpt6I7o0tRp9
+d4mEPJe+ywuzRAL0Q/e7UsYbpiHIZ0ZjoeueEBoXwxtEdFUnP2Df4S1q3vIUS0P
grFrasJkCxW8sBbeGSthgS8wwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmLMfOC
zBE0INIiDCh3IoFxnQUSMB8GA1UdIwQYMBaAFEA7t7kY+RVK2Cwq01rvwKvo0Gre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjMxRi83QjNGMEIxQ0NG
MUMxMUVGODE5NDdGODVDNEY5QUUwMi9RRHUzdVJqNUZVcllMQ3JUV3VfQXEtalFh
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FEdTN1Umo1RlVyWUxDclRXdV9BcS1qUWF0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjMxRi83QjNGMEIxQ0NGMUMxMUVGODE5NDdGODVDNEY5QUUwMi9RRHUzdVJqNUZV
cllMQ3JUV3VfQXEtalFhdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+dX/KSypYzb9oHAxG73mNRdQ5DRA8wvzFydOAd+nKebkOfhYMMrqk
DFIh3OZzzETK0UY4v8fQ3hPH0x1DYNidp80xQsSTqiKoHvH3tMIuUhknCxLLT0L9
Om5PbU2XHlWuMznsxpIEthb9yFgU5AsLYfTV3jcc0nx/AWymPu73iSNkaE9k42o7
ObBjSXBcyaOLw8SjV5kO3c98aUuSWJ7Czrl3x6YWj0B7nV3bRnmiNTOE1KNzo6TR
sZZM4TAPI8YXk5LI4pxmYSTmKuii6PY/WvUUy3FlUYjshJQNcubJTR+ILyIIKkAY
QR9N5RXztQd+XaiD9wrfPznkNx7yLCdx
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:08 2026 by rpki-client