This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
File:                     qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json)
Hash identifier:          AMOfpvrHCB7BneVoSWwB0xZVA0fjMevm7lgutJlQXBg=
Subject key identifier:   C2:52:7D:B8:B8:E9:55:0E:C4:FE:DD:0B:96:1D:AD:1F:0B:2A:85:93
Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
Certificate issuer:       /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
Manifest number:          0632
Signing time:             Sat 24 Jan 2026 22:02:29 +0000
Manifest this update:     Sat 24 Jan 2026 22:02:29 +0000
Manifest next update:     Sat 31 Jan 2026 22:02:29 +0000
Files and hashes:         1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: qEq40ZGFNR84zCZ0NqTuFXD+ryemORHdjYvByrr/VKI=)
                          2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: +2Hbaxr801NyDnPE1ldFyqXo4OeCNMmMLf3UKaT2zEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
                          rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
        Validity
            Not Before: Jan 24 22:02:29 2026 GMT
            Not After : Jan 31 22:02:29 2026 GMT
        Subject: CN=69754175-1209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:7d:e5:51:12:9b:54:bb:f2:19:30:6f:50:
                    0b:6e:40:38:c9:3c:f6:d4:58:60:11:e3:74:ed:de:
                    9c:2a:f5:52:9f:b0:df:f1:70:7e:2c:70:cf:97:a1:
                    0f:7a:ef:84:be:c1:0a:8a:fa:84:e5:91:fe:af:9d:
                    85:06:ae:8d:b1:62:10:6f:d3:d5:4d:6b:9a:31:d7:
                    9a:f7:bf:45:a9:38:80:85:87:8c:eb:b9:96:9e:c1:
                    30:a5:ee:1e:51:95:18:aa:88:4a:c0:a9:74:d9:be:
                    5c:eb:ac:5e:82:46:a3:8a:fd:e0:40:33:03:d3:10:
                    57:b5:f2:71:6c:f6:30:54:dd:f3:a3:90:d1:8c:54:
                    f0:e6:97:e7:85:cb:3d:ff:d2:38:2e:71:bf:7e:98:
                    a6:2e:3c:61:2b:71:bb:19:e1:5b:bc:69:03:b0:e4:
                    c6:db:e0:ed:28:b6:48:92:ca:9f:00:3e:ce:87:32:
                    92:35:2b:6c:1d:8b:a9:fb:20:2e:6b:6a:1e:ca:58:
                    dd:e0:a4:f6:e7:ce:cd:55:8e:64:c3:1e:36:74:0f:
                    36:2e:ba:98:c8:40:2b:aa:20:f5:21:48:a6:52:8c:
                    44:60:ac:d0:2b:23:61:3c:08:c8:cc:d4:68:37:c2:
                    04:01:77:9e:c3:1f:02:51:40:14:37:2d:ad:00:9d:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:7D:B8:B8:E9:55:0E:C4:FE:DD:0B:96:1D:AD:1F:0B:2A:85:93
            X509v3 Authority Key Identifier:
                keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:75:a7:2b:88:58:cb:2b:52:93:21:ff:e9:48:40:33:2d:74:
         4f:38:77:62:be:eb:06:3b:21:d0:6d:1a:68:b6:04:d5:e4:e9:
         78:7f:8b:05:47:c0:f5:0a:f7:5c:d6:66:23:1d:8e:40:a4:07:
         69:d0:ce:87:13:a2:57:af:cf:b2:50:75:e5:95:ab:c4:81:6e:
         30:ab:0b:70:02:6e:2f:46:15:23:7b:0f:3f:d8:e3:41:16:c2:
         3e:49:ea:c8:4c:6f:5f:5f:af:5d:18:33:b9:d2:a1:51:1d:4e:
         72:38:08:89:ff:a3:e5:a4:8c:94:50:9a:a2:4c:20:3d:85:db:
         08:79:56:16:56:47:d9:f7:c5:44:23:36:c3:30:61:7a:dd:b5:
         73:58:4e:56:ff:59:d2:91:5c:9c:19:0f:19:8a:e6:53:90:78:
         28:9f:a3:13:e7:3a:c2:30:67:d8:cd:b9:31:95:98:d9:b7:e8:
         d2:96:5f:af:1c:76:4c:fa:8b:2e:04:8b:79:97:2f:78:03:09:
         61:04:d8:6a:a1:8e:60:8f:84:a2:05:14:47:82:e3:cb:51:7e:
         f8:bb:57:39:ce:d2:b9:75:b5:87:bb:53:a4:1f:50:10:cd:5f:
         84:b4:b7:ba:a9:c1:12:60:23:eb:07:21:b9:65:55:fa:83:ce:
         66:1b:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:52 2026 by rpki-client