This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File:                     1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier:          qeOgf0ZLYW5UPTNt5pO6xyZ5bEqJgc/XmdaZZXKJyos=
Subject key identifier:   32:2F:E6:28:FD:14:C5:1B:9B:D3:FB:85:27:B0:66:C8:62:6A:39:8A
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       08E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number:          08DA
Signing time:             Sat 24 Jan 2026 19:49:21 +0000
Manifest this update:     Sat 24 Jan 2026 19:49:21 +0000
Manifest next update:     Sat 31 Jan 2026 19:49:21 +0000
Files and hashes:         1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: o9R/J1vaIGb6kpCy1WU0z0dxKiAgD3rAbaR4AYjrtj8=)
                          2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: Fp3IoCNith1vGTf69ryDz+R4pr7DX4NONp6q1LMxCoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
                          rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Jan 24 19:49:21 2026 GMT
            Not After : Jan 31 19:49:21 2026 GMT
        Subject: CN=69752241-eaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:23:d7:cc:f1:f7:2d:5e:a7:8d:a6:a1:a4:
                    5c:ab:ff:35:7f:06:cd:6a:db:6e:ed:21:bb:1a:59:
                    dc:24:f0:8b:22:b9:3e:75:44:30:03:3e:5d:80:01:
                    8f:e8:97:e4:46:01:e3:f9:92:4c:4c:1c:4c:1a:72:
                    a9:1c:4d:4d:81:35:6d:1c:f8:39:27:65:98:10:ef:
                    e0:bb:e4:40:77:f4:24:0d:f0:34:d1:b0:9a:aa:6c:
                    db:4f:6d:ca:57:db:10:94:16:8b:12:ee:1d:e5:e2:
                    ad:f6:06:79:5d:4f:df:72:ec:68:18:3c:d3:37:b5:
                    73:ab:b1:e0:1b:43:b3:38:b6:f1:58:2a:38:9d:61:
                    d8:06:e3:99:59:39:86:74:b1:d2:5a:de:a1:e2:6f:
                    45:35:b3:27:91:35:39:5e:08:c7:8b:34:02:1c:b3:
                    79:f6:cf:14:27:d8:44:84:bc:a2:0b:a6:dd:c2:20:
                    25:c3:ac:d9:db:30:e3:04:ba:0d:bc:89:ef:77:58:
                    37:14:8a:15:8e:43:31:e9:fa:18:dd:dc:38:b6:d2:
                    fa:ef:d7:91:8b:8d:ce:7f:42:9c:57:32:21:9a:57:
                    85:e1:19:04:72:3c:11:2b:3e:88:44:c8:80:45:d5:
                    63:19:07:cc:9e:65:3c:53:a7:f2:6d:86:cf:22:bd:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:E6:28:FD:14:C5:1B:9B:D3:FB:85:27:B0:66:C8:62:6A:39:8A
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:d7:d1:2d:46:fe:81:13:b1:85:38:8e:04:22:cc:79:c8:
         df:9e:2d:29:69:31:97:ff:ed:37:a8:f1:7f:07:f4:6a:c2:7f:
         ac:33:bf:da:cb:8d:ca:fe:f2:f5:24:53:90:ea:75:e1:09:4c:
         19:5c:ce:5c:bf:c3:6c:6b:0f:63:61:38:76:bb:c1:e9:18:b8:
         b7:8d:b0:5b:89:66:d6:66:e2:56:3b:c9:78:46:f5:6b:ad:00:
         f7:3b:db:ea:99:c4:13:9e:d4:2d:a3:8f:05:c2:02:82:77:7a:
         30:c7:74:91:c9:52:fb:72:a0:28:56:b9:ff:7d:c5:7f:c9:2e:
         ed:fe:d7:2b:98:0e:cf:e1:9d:2e:73:75:6d:70:e1:de:8c:0c:
         c5:11:4e:da:ae:49:04:cd:69:92:57:9e:88:e0:2e:54:23:8b:
         e9:76:d0:13:79:a6:a1:40:db:e3:79:24:44:3c:da:b9:64:02:
         90:84:55:06:e5:83:6f:6b:9c:d8:bb:13:cd:e9:29:0a:23:60:
         1a:9e:dd:f2:56:79:43:21:ea:d8:34:b3:37:76:3f:d9:43:38:
         19:69:c1:4e:c7:d5:fe:9f:93:dc:52:02:2d:63:ad:41:3d:6c:
         f0:1f:31:10:7d:68:88:17:e8:3c:34:8c:b9:97:d5:e6:7a:67:
         23:07:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:21:02 2026 by rpki-client