This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File:                     QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier:          X5o8HlVEMGE+QgJ+zI8K7qt8auhkUoWcR639PhVv21U=
Subject key identifier:   25:58:1D:E3:16:F3:AE:B1:23:1F:CF:B6:71:3B:4F:5F:A6:B2:29:7B
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number:          0101
Signing time:             Sun 25 Jan 2026 04:23:38 +0000
Manifest this update:     Sun 25 Jan 2026 04:23:38 +0000
Manifest next update:     Sun 01 Feb 2026 04:23:38 +0000
Files and hashes:         1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: Mrbra60K1oJI6FfADDru9byXAh/X0KrGt2oMoR2E1+Y=)
                          2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Jan 25 04:23:38 2026 GMT
            Not After : Feb  1 04:23:38 2026 GMT
        Subject: CN=69759aca-d31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:76:17:73:7a:4b:45:9c:74:85:e8:cf:e9:
                    9f:68:b6:34:c2:89:35:14:45:82:71:3c:68:c8:4a:
                    d3:92:c9:5b:fd:cd:b8:00:00:f5:73:b0:73:99:72:
                    0f:96:8c:38:a0:a9:76:36:97:6a:37:de:83:1d:92:
                    ff:05:ba:81:42:33:d4:c2:91:ff:5a:d5:8d:db:96:
                    0b:43:72:35:35:a6:9f:78:a1:5f:0d:fc:a4:90:f9:
                    80:a3:77:75:48:60:fb:2e:00:d9:4b:63:5c:34:3c:
                    73:99:c6:d6:17:7c:88:0b:9b:75:58:d1:13:ed:dd:
                    06:bc:56:46:8c:3b:ee:0a:16:bd:d8:c6:9e:03:ba:
                    5d:8f:4f:71:39:36:4f:62:4e:8c:c0:2e:91:89:b7:
                    c1:72:c4:1e:78:2d:ad:00:16:cf:36:d0:d4:ed:6a:
                    3a:d4:86:b8:97:7d:8f:d1:c9:ae:e4:9b:17:08:9d:
                    0b:95:ee:e0:27:53:ee:22:12:3c:aa:04:72:31:a4:
                    da:02:1b:99:71:a9:f3:e5:73:11:2e:06:21:34:e5:
                    ab:03:92:74:15:56:f6:86:a5:25:8d:0b:e7:41:ad:
                    95:7d:80:ac:fb:7f:6b:31:fc:32:2f:b8:b5:dd:08:
                    66:aa:ff:2d:8e:ab:18:13:9d:e0:ff:46:3d:cd:20:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:1D:E3:16:F3:AE:B1:23:1F:CF:B6:71:3B:4F:5F:A6:B2:29:7B
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7e:f0:52:59:b1:05:48:19:c9:91:79:2d:ce:5b:3b:cb:57:
         1d:21:61:af:e6:62:2d:9a:18:ef:83:f7:94:84:1e:07:5c:cd:
         cd:4b:23:48:36:ae:6a:65:df:0d:f6:6d:7a:97:48:35:0c:3b:
         30:cd:0f:ea:6e:fd:c3:75:3d:df:b3:88:d8:d7:6d:a1:c5:c0:
         52:70:83:4a:63:52:14:c4:b9:6c:4c:8c:29:85:da:05:7e:62:
         87:c4:85:7e:ac:92:0e:db:e1:6c:d4:db:2d:0e:53:f1:27:d3:
         a9:51:e6:da:54:85:b4:67:10:50:45:8b:af:7f:3f:d9:ff:76:
         78:51:b9:d2:fc:48:04:19:3a:04:59:3a:34:97:7e:3f:0a:44:
         30:83:3a:34:24:ca:77:90:eb:9f:c1:9a:ae:6e:28:09:4f:87:
         31:1e:61:1d:c9:c2:9a:bd:84:b0:86:5c:23:04:a6:55:97:1c:
         ea:fb:15:25:e4:a4:15:84:db:a1:33:1c:39:a1:be:ce:e3:94:
         a1:26:9a:10:50:3d:d5:b3:65:4d:aa:92:e0:b9:83:20:55:b6:
         4b:a7:a9:5a:51:3f:46:61:4d:60:30:9e:44:c5:b5:cb:a1:ff:
         98:2e:e8:d0:de:8c:63:cc:5f:4a:38:34:02:e4:46:21:4b:3b:
         4c:8f:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:17:13 2026 by rpki-client