This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          uLFoxK/LcoLelC47vNbbZjBifbey/UJvYm/Eephm+fY=
Subject key identifier:   74:D1:55:10:B7:5F:00:05:24:CF:5A:1A:95:BF:92:7C:32:C1:E3:6D
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          0259
Signing time:             Sun 25 Jan 2026 00:54:26 +0000
Manifest this update:     Sun 25 Jan 2026 00:54:26 +0000
Manifest next update:     Sun 01 Feb 2026 00:54:26 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: /kl0ODz/+apWq/8jz3wQPn8j6/T8tJzDs7o2rblroe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
                          rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
        Validity
            Not Before: Jan 25 00:54:26 2026 GMT
            Not After : Feb  1 00:54:26 2026 GMT
        Subject: CN=697569c2-10d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:bf:23:9c:7d:eb:22:c1:2b:21:7e:df:01:
                    c6:66:65:6d:3f:bc:b9:06:88:2d:c9:a1:00:dc:d0:
                    af:4b:a5:d9:ba:21:e4:04:22:21:32:63:0e:04:35:
                    49:19:33:7d:05:da:de:dd:fe:46:62:81:8d:8d:64:
                    11:75:5c:10:84:d5:cd:96:8a:c4:88:db:8b:e3:db:
                    0e:c5:a1:26:74:b0:03:fe:aa:39:b0:d5:9a:35:aa:
                    c0:02:0d:39:3f:c0:18:a2:b4:8c:f1:82:fe:a9:8a:
                    47:e0:f5:d4:2a:55:fd:79:78:7a:71:a3:42:8f:86:
                    0d:31:00:4d:10:ab:98:f8:4c:09:ee:c4:97:d6:c1:
                    51:a4:07:16:d7:9d:74:04:e6:74:34:ff:38:9e:3a:
                    31:71:e7:2b:21:0a:1a:70:a2:6a:7b:b4:4b:04:4a:
                    b0:b9:03:cc:51:90:e9:10:fd:29:e7:45:20:a8:97:
                    06:3a:0e:70:cc:79:10:4c:25:b3:91:4e:89:9d:ab:
                    f8:84:df:95:7d:0e:d5:61:2c:a1:9b:7a:6e:eb:52:
                    f0:48:64:c5:14:9b:40:98:4c:cd:e3:4e:de:67:9c:
                    a2:46:68:24:ed:d7:4a:2e:12:82:a1:66:ac:1e:b7:
                    41:3d:15:83:71:f4:12:97:3c:e5:91:4c:aa:4f:be:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:55:10:B7:5F:00:05:24:CF:5A:1A:95:BF:92:7C:32:C1:E3:6D
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:a5:54:56:9f:04:3e:8d:89:3f:65:40:ee:d7:85:f4:21:
         74:41:b4:e7:c2:cf:4d:de:51:90:9f:7e:e3:ee:64:2e:ff:e4:
         07:15:5b:17:59:dd:da:51:ce:ca:78:ae:84:d4:77:1e:cd:a5:
         5b:ad:3f:ef:73:20:09:17:c4:59:23:bb:e2:45:d6:a2:b9:09:
         d1:56:15:67:68:bc:56:ce:12:14:a5:c4:92:96:7f:56:d1:bf:
         a0:3d:fa:45:ee:31:2e:51:3f:5b:02:d0:ec:1b:21:1f:b3:af:
         2e:ba:df:17:0d:b5:4c:49:67:54:ac:fc:39:07:2b:52:04:09:
         e4:01:3d:2c:13:c0:c4:0d:64:78:be:66:93:ce:c0:b9:7d:3b:
         4b:85:f6:5a:46:96:d7:d6:d2:63:07:65:39:68:c7:87:7d:cf:
         fa:19:32:34:2c:a2:f6:2e:2d:19:86:ce:5d:85:b8:4e:f5:3c:
         f6:19:b1:07:dd:01:a7:3b:53:44:22:7f:f5:56:08:32:4e:e0:
         92:99:69:75:45:2a:17:ab:68:de:d9:b4:9d:de:ab:2b:64:56:
         4a:e4:86:55:bf:66:83:4f:fa:54:4c:e6:bc:57:46:a5:aa:8b:
         63:9f:f3:e2:e1:3a:36:a8:45:98:a2:6c:47:24:1c:37:fb:5d:
         a9:eb:3a:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC
Nzg4MTMzREYwHhcNMjYwMTI1MDA1NDI2WhcNMjYwMjAxMDA1NDI2WjAYMRYwFAYD
VQQDDA02OTc1NjljMi0xMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjR+/I5x96yLBKyF+3wHGZmVtP7y5BogtyaEA3NCvS6XZuiHkBCIhMmMOBDVJ
GTN9Bdre3f5GYoGNjWQRdVwQhNXNlorEiNuL49sOxaEmdLAD/qo5sNWaNarAAg05
P8AYorSM8YL+qYpH4PXUKlX9eXh6caNCj4YNMQBNEKuY+EwJ7sSX1sFRpAcW1510
BOZ0NP84njoxcecrIQoacKJqe7RLBEqwuQPMUZDpEP0p50UgqJcGOg5wzHkQTCWz
kU6Jnav4hN+VfQ7VYSyhm3pu61LwSGTFFJtAmEzN407eZ5yiRmgk7ddKLhKCoWas
HrdBPRWDcfQSlzzlkUyqT77PBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTRVRC3
XwAFJM9aGpW/knwyweNtMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE
N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw
dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQACy6VUVp8EPo2JP2VA7teF9CF0QbTnws9N3lGQn37j7mQu/+QHFVsX
Wd3aUc7KeK6E1HcezaVbrT/vcyAJF8RZI7viRdaiuQnRVhVnaLxWzhIUpcSSln9W
0b+gPfpF7jEuUT9bAtDsGyEfs68uut8XDbVMSWdUrPw5BytSBAnkAT0sE8DEDWR4
vmaTzsC5fTtLhfZaRpbX1tJjB2U5aMeHfc/6GTI0LKL2Li0Zhs5dhbhO9Tz2GbEH
3QGnO1NEIn/1VggyTuCSmWl1RSoXq2je2bSd3qsrZFZK5IZVv2aDT/pUTOa8V0al
qotjn/Pi4To2qEWYomxHJBw3+12p6zr1
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:59:21 2026 by rpki-client