This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
File:                     Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json)
Hash identifier:          nN3kXt5+sbXmmdbOvu3rDR+4mP/2d4uVVWkroS4isXI=
Subject key identifier:   21:03:2E:8F:6F:89:EF:47:D3:EA:7A:C3:F2:96:3A:7E:6D:BE:EA:2E
Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
Certificate issuer:       /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
Manifest number:          92
Signing time:             Fri 23 Jan 2026 05:36:40 +0000
Manifest this update:     Fri 23 Jan 2026 05:36:39 +0000
Manifest next update:     Fri 30 Jan 2026 05:36:39 +0000
Files and hashes:         1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: zNT9jdKyJpYO7TqnBhJbKxn3r/nFGOSXPjXFTmO96Es=)
                          2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: B/h8D9AtkLxxeNSxrmR6L44eqKck0IxPDYkIdafIUXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
                          rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
        Validity
            Not Before: Jan 23 05:36:39 2026 GMT
            Not After : Jan 30 05:36:39 2026 GMT
        Subject: CN=697308e8-d793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:ab:16:f8:36:30:b2:d0:0b:98:30:da:c7:
                    0b:b3:d4:48:56:22:f7:f1:ef:f2:60:ac:ff:cc:62:
                    9e:8a:9f:49:fc:70:5d:c3:88:43:1d:f9:6a:93:a4:
                    19:2a:96:3c:81:1e:e1:a6:e8:ed:79:f5:44:ba:b7:
                    59:c8:30:15:c7:04:9e:9c:76:94:31:69:b1:4b:a1:
                    d1:ae:35:5c:f4:20:1a:47:cb:24:61:59:d7:34:69:
                    24:c1:07:d9:f6:7d:ca:5c:2c:e6:cc:52:a5:7a:6e:
                    0b:a3:2a:d3:68:40:f4:05:85:59:7b:6c:8a:51:03:
                    34:42:22:93:81:8f:be:fb:4d:1b:c7:e7:4d:fb:ad:
                    ed:9d:f1:36:d2:f8:3f:4e:76:ed:2f:f5:ab:f8:f9:
                    88:50:8f:a4:44:72:e0:2a:df:5c:4d:01:81:b0:b9:
                    64:51:a1:34:de:b9:b7:14:34:6e:78:d5:e8:9c:74:
                    5b:86:b1:56:e1:5b:97:df:ff:49:81:f8:c2:66:33:
                    ac:3c:a9:01:99:8e:f8:e9:67:6a:ae:f1:b1:a7:26:
                    00:91:28:c2:ab:d0:64:ef:e1:e0:22:40:40:fe:46:
                    0a:ee:66:9d:06:4c:88:e8:8e:1e:b4:04:b8:2d:0a:
                    75:4b:56:bc:3d:42:6e:e9:fa:53:4b:cc:24:74:6c:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:03:2E:8F:6F:89:EF:47:D3:EA:7A:C3:F2:96:3A:7E:6D:BE:EA:2E
            X509v3 Authority Key Identifier:
                keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:04:19:66:e3:eb:c3:b5:af:ce:1d:41:d6:61:cf:07:82:
         b8:91:7b:b2:a0:3d:b9:10:1d:c1:4b:8d:57:6a:1d:68:fe:d8:
         65:3f:12:65:d1:61:2e:57:0c:be:2a:fc:0b:e8:cb:ba:1c:b6:
         1f:7b:62:d6:d1:c9:fe:20:39:37:4e:7a:22:7a:6b:13:eb:4a:
         5c:5d:bf:5b:00:1e:77:bf:7b:70:fd:b4:b5:58:f9:64:fa:26:
         00:e1:52:59:56:7d:46:92:c2:18:d4:6c:b9:87:7c:4d:ab:e8:
         cd:70:93:10:98:3c:fa:ea:34:d7:a5:a6:99:95:a4:9e:64:e4:
         6e:6f:3b:27:4c:42:15:c7:b8:5a:f9:46:48:03:ed:d5:46:be:
         be:19:9c:bc:e7:ff:d1:91:db:e5:6d:ab:65:02:45:05:4d:21:
         d2:b5:9a:81:e2:7e:6d:61:ba:3d:d1:5c:36:32:fb:82:a0:38:
         bb:9f:71:4e:95:b2:8a:a7:40:ff:a0:3d:00:2c:7e:51:bf:cd:
         d3:6e:6c:8c:27:c7:90:96:58:0a:15:54:56:03:58:55:89:5f:
         90:7d:3f:06:21:33:44:dd:1a:c8:6e:d6:ee:c6:95:ea:fa:93:
         39:b7:a8:b6:f5:34:53:70:29:1e:31:24:7b:ce:72:1a:95:1e:
         30:f1:2e:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzhCQzExMTAvBgNVBAUTKDQyNzczQUE4NDFENzBFNzNDNEVGN0QyN0M5OEZDQjlE
NDQyMEM0NkMwHhcNMjYwMTIzMDUzNjM5WhcNMjYwMTMwMDUzNjM5WjAYMRYwFAYD
VQQDDA02OTczMDhlOC1kNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi1CrFvg2MLLQC5gw2scLs9RIViL38e/yYKz/zGKeip9J/HBdw4hDHflqk6QZ
KpY8gR7hpujtefVEurdZyDAVxwSenHaUMWmxS6HRrjVc9CAaR8skYVnXNGkkwQfZ
9n3KXCzmzFKlem4LoyrTaED0BYVZe2yKUQM0QiKTgY+++00bx+dN+63tnfE20vg/
TnbtL/Wr+PmIUI+kRHLgKt9cTQGBsLlkUaE03rm3FDRueNXonHRbhrFW4VuX3/9J
gfjCZjOsPKkBmY746WdqrvGxpyYAkSjCq9Bk7+HgIkBA/kYK7madBkyI6I4etAS4
LQp1S1a8PUJu6fpTS8wkdGzwJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEDLo9v
ie9H0+p6w/KWOn5tvuouMB8GA1UdIwQYMBaAFEJ3OqhB1w5zxO99J8mPy51EIMRs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEJDMS8xNTJENUM4NjFC
NjkxMUYwQkZGQzNGMkZDNEY5QUUwMi9RbmM2cUVIWERuUEU3MzBueVlfTG5VUWd4
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEJDMS8xNTJENUM4NjFCNjkxMUYwQkZGQzNGMkZDNEY5QUUwMi9RbmM2cUVIWERu
UEU3MzBueVlfTG5VUWd4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGTwQZZuPrw7Wvzh1B1mHPB4K4kXuyoD25EB3BS41Xah1o/thlPxJl
0WEuVwy+KvwL6Mu6HLYfe2LW0cn+IDk3TnoiemsT60pcXb9bAB53v3tw/bS1WPlk
+iYA4VJZVn1GksIY1Gy5h3xNq+jNcJMQmDz66jTXpaaZlaSeZORubzsnTEIVx7ha
+UZIA+3VRr6+GZy85//RkdvlbatlAkUFTSHStZqB4n5tYbo90Vw2MvuCoDi7n3FO
lbKKp0D/oD0ALH5Rv83TbmyMJ8eQllgKFVRWA1hViV+QfT8GITNE3RrIbtbuxpXq
+pM5t6i29TRTcCkeMSR7znIalR4w8S6M
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:58 2026 by rpki-client