This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File:                     QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier:          BI60IuLhJz4xHB+KcskBqU3fgc1lFu3CwI776MxChA8=
Subject key identifier:   4C:38:6F:47:9F:BE:2C:5F:5C:E0:2E:46:C8:B4:EB:4B:46:9F:BA:71
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer:       /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number:          DD
Signing time:             Sun 25 Jan 2026 02:07:37 +0000
Manifest this update:     Sun 25 Jan 2026 02:07:36 +0000
Manifest next update:     Sun 01 Feb 2026 02:07:36 +0000
Files and hashes:         1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: jgLev9U+VHTtTd7w1bNZbcUlhogQ6kRHZDVAGSYb+Mo=)
                          2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mZ/ViBjIVIPe+nE/GVSLUGS2VukLj6yBRBsTJ8+0mQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
        Validity
            Not Before: Jan 25 02:07:36 2026 GMT
            Not After : Feb  1 02:07:36 2026 GMT
        Subject: CN=69757ae9-e277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:f7:b6:14:e0:a3:fb:15:81:5b:1d:75:ed:
                    02:61:75:2d:f5:87:fd:d7:e2:86:be:2c:26:6d:b9:
                    3f:82:64:e8:86:96:b5:03:28:03:aa:67:bd:b3:ad:
                    18:f9:1d:16:e1:85:ed:cd:a0:a4:04:73:2f:cd:ff:
                    13:c8:7b:b0:b1:2c:37:e6:11:d9:bc:e0:3f:b4:49:
                    04:89:23:2b:17:d6:ab:1b:75:3d:2a:1a:1d:9e:07:
                    2a:d4:75:16:92:30:da:62:fb:e0:30:54:61:92:59:
                    3d:3e:50:3b:4a:16:dc:64:a9:5e:00:a9:4f:99:c9:
                    15:e3:2f:7c:b7:96:c5:b5:ad:d4:a3:ce:4b:cd:e4:
                    13:7f:7b:28:4c:d6:05:be:9a:b4:59:0c:d9:e0:79:
                    91:8a:07:31:cb:71:00:39:72:dc:eb:b9:77:27:78:
                    74:93:a5:89:b2:79:3d:62:e7:e3:fa:c8:ff:c1:df:
                    15:36:c5:b8:3f:9f:ec:6e:22:b6:3c:c2:08:00:10:
                    fc:f5:67:f3:f7:3b:38:a5:c1:19:0b:59:30:81:08:
                    3d:82:e8:f6:a4:cc:93:bd:a9:2f:4d:6f:61:9e:a5:
                    7a:07:51:2b:98:32:e8:e7:56:ad:7a:88:bc:8b:3e:
                    f8:d6:31:bd:c1:4b:1a:63:2c:e6:07:ce:97:3a:69:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:6F:47:9F:BE:2C:5F:5C:E0:2E:46:C8:B4:EB:4B:46:9F:BA:71
            X509v3 Authority Key Identifier:
                keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e0:3b:6d:fa:04:5c:0e:e8:07:8a:4c:50:da:9c:8e:67:50:
         a6:d1:34:fd:9c:95:40:94:51:b4:d1:a6:ac:f4:5e:73:9f:d5:
         ef:e0:40:c4:f9:a5:63:3a:25:8f:2a:07:21:01:37:a4:35:4a:
         73:d0:5e:63:5b:02:f5:11:50:ca:5e:42:1b:fa:99:65:dd:57:
         19:aa:89:f5:5f:70:f1:61:a0:71:a7:61:c8:2c:d8:eb:b3:eb:
         12:2c:ef:78:2f:62:d0:4b:db:1e:a9:b4:dd:0b:83:f2:0a:8e:
         3a:ce:f1:0a:0b:cd:83:70:da:a7:9a:80:2e:0c:a9:88:fd:8f:
         75:57:f4:d0:a1:3d:7c:d9:f7:8c:b7:45:da:4a:91:44:6b:55:
         b9:20:59:e4:69:4d:6e:67:6b:42:5f:8a:3f:2d:53:1d:58:d0:
         7c:25:84:ed:9c:6b:34:9e:e3:f4:ba:5a:c0:c8:95:61:ba:dd:
         45:47:0d:f4:8b:c8:90:6e:15:60:47:e5:b1:24:74:4a:5f:94:
         72:fb:e2:c7:8f:7a:1f:a5:a2:ce:26:5d:59:18:61:88:2b:b9:
         5b:0e:00:71:80:a5:e4:5d:01:39:ae:50:1e:d9:b3:f7:19:8b:
         57:a0:8d:a0:e3:8f:ea:42:f1:28:8e:ed:57:92:b0:3c:0e:0a:
         70:2d:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:17 2026 by rpki-client