This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File:                     q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier:          rSNFzHsDx2Fo88WsJc9YOuTncDrD5HGiQCom40v7V64=
Subject key identifier:   FB:D7:25:F4:44:7A:0D:4E:48:58:E5:1B:9E:02:03:B0:9B:24:2E:40
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer:       /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial:       0B36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number:          0B26
Signing time:             Sat 24 Jan 2026 18:50:15 +0000
Manifest this update:     Sat 24 Jan 2026 18:50:14 +0000
Manifest next update:     Sat 31 Jan 2026 18:50:14 +0000
Files and hashes:         1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: kvYUf1n3vzztNioxjQU6eaL+6T++/7iH3z4c4/pdSCs=)
                          2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: f+APvyzDOvcySR015hu7kLgvmSYPKiTNkC9AROsRa74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
                          rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
        Validity
            Not Before: Jan 24 18:50:14 2026 GMT
            Not After : Jan 31 18:50:14 2026 GMT
        Subject: CN=69751467-6b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:b3:5f:18:e0:a0:2c:ec:4e:36:cb:b0:8f:
                    f1:9a:d8:52:09:d3:70:58:92:69:03:75:fa:c7:27:
                    a3:9f:18:e0:f9:d9:fc:dd:84:b0:3f:91:5f:d1:9b:
                    d8:3a:06:14:76:a2:3c:b6:81:40:90:19:fc:a5:15:
                    0c:1d:76:bd:a2:d8:66:b7:a5:91:57:3b:79:09:f6:
                    eb:1d:0e:9c:b1:e6:93:8b:68:2a:dc:a7:7f:26:92:
                    ac:3a:1f:b3:07:3f:74:70:a0:8e:c0:3d:a7:41:01:
                    02:ba:f7:78:6b:3b:7a:7e:2a:c4:9a:66:07:be:77:
                    bc:69:4a:20:13:48:20:13:6f:32:48:41:e3:0b:ae:
                    a6:e7:a2:fa:97:16:1b:a9:53:7d:1d:e5:fa:4d:d9:
                    c0:60:70:f2:8f:e0:49:2f:b0:4f:83:9e:02:ef:1f:
                    a0:3b:1a:ab:ab:39:00:2b:dc:c5:4f:40:ed:53:83:
                    4f:23:df:b1:1f:4a:27:81:2f:c7:46:da:6b:1c:79:
                    3e:1f:0a:32:02:c9:dc:62:75:b2:9a:70:20:e9:8f:
                    3f:3b:45:85:3d:b8:fd:91:9b:72:d8:d6:6a:11:d4:
                    08:c7:ea:0d:8c:f6:7e:47:23:e7:7f:8b:e8:d1:2e:
                    1a:05:c3:33:d1:62:f0:eb:0f:57:2d:13:7a:a5:45:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:25:F4:44:7A:0D:4E:48:58:E5:1B:9E:02:03:B0:9B:24:2E:40
            X509v3 Authority Key Identifier:
                keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ee:5a:4d:3c:cf:09:61:2b:f0:fe:2e:6f:18:47:b2:7f:f4:
         ef:09:f9:c1:eb:4f:ec:d9:18:14:48:f0:98:c2:49:aa:23:6d:
         b7:77:5c:3a:97:c2:4e:72:2b:c2:86:b9:f5:d2:fe:1f:5e:0f:
         a7:e4:28:1d:cd:2b:fe:b1:c6:95:d4:b0:82:4d:01:97:cc:da:
         3e:fd:08:ce:bc:d1:e6:be:67:6a:62:e7:9b:64:67:3e:8c:51:
         f2:57:20:35:c3:67:1f:8f:d1:8e:17:0e:76:9c:8d:c2:b6:8a:
         b9:7f:7a:68:4d:42:94:fb:34:43:0a:4c:c5:aa:6d:59:e8:e6:
         8e:a9:e9:18:ac:a2:07:db:8d:2a:6d:91:08:2e:f3:70:dc:29:
         79:ff:f6:8d:d0:1c:fe:01:57:d1:12:10:44:18:8c:c3:51:48:
         6a:f4:09:dc:75:8e:90:fa:dc:e8:3b:2a:f9:72:a5:1c:58:c1:
         4b:ea:c5:04:88:77:fa:33:11:6d:51:7b:8d:c2:e4:49:cf:89:
         24:60:e7:08:0f:5e:d7:8d:be:33:e5:14:9e:46:1f:12:c0:87:
         d1:d0:71:8a:26:a1:4d:b1:b8:a1:a3:ae:6f:86:41:63:15:3f:
         b6:f3:c9:2b:4d:b9:58:05:fd:ff:69:80:b8:0e:9c:bb:ce:ec:
         67:3f:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:47 2026 by rpki-client