This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File:                     Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier:          7qbHbJ3C/QsCVay4wh/FM4hs0DesQ8WJkQMAVpUR9AI=
Subject key identifier:   8A:89:9E:7A:97:D5:5F:12:3F:B6:D0:AB:E2:FE:96:84:C3:21:41:12
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer:       /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial:       1B8E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number:          1B89
Signing time:             Sat 24 Jan 2026 16:03:49 +0000
Manifest this update:     Sat 24 Jan 2026 16:03:48 +0000
Manifest next update:     Sat 31 Jan 2026 16:03:48 +0000
Files and hashes:         1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: wV571RyYH56EE7vLRKuVzHvdrB5HaAw+zBykwnk3THM=)
                          2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: f7v965g9bOSdEznd3YTHpzh8If/rvk4WHQj9sYnabU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7054 (0x1b8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Validity
            Not Before: Jan 24 16:03:48 2026 GMT
            Not After : Jan 31 16:03:48 2026 GMT
        Subject: CN=6974ed65-94f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:11:4b:d5:19:b7:68:76:5b:56:c9:fa:27:
                    bc:e5:cf:94:6e:6b:d3:5e:f0:63:52:2e:a2:06:a7:
                    2e:5e:bd:88:82:e6:a5:e2:04:6c:40:10:15:32:a1:
                    99:08:e6:6e:5c:bc:b7:5b:1d:5d:c7:8a:d6:e4:05:
                    7c:e5:51:38:2a:56:03:8a:bf:45:21:67:78:34:91:
                    a3:ca:fa:e2:19:91:3c:40:fd:6f:d5:00:3d:01:05:
                    f5:1f:e3:0d:93:3a:56:27:3a:de:a9:5e:43:48:e2:
                    97:ce:80:fa:01:a0:ae:d0:9d:bf:40:71:bb:b8:62:
                    63:47:f7:b7:5a:ab:e0:2b:4f:0d:e4:8b:60:37:45:
                    81:7d:5d:ba:85:bd:d0:69:f3:47:6f:5e:c3:53:d3:
                    dd:51:e0:f8:be:a7:81:bf:02:67:db:ce:9d:ac:93:
                    b6:63:0f:04:8f:1a:73:a7:24:5a:fa:71:9a:b5:62:
                    bb:01:4b:3b:ad:45:10:d1:47:ad:b6:2c:f2:8e:26:
                    81:c6:b3:65:9d:32:82:91:91:ed:72:4f:95:df:72:
                    b9:a2:67:78:28:30:90:2b:3f:60:b0:cb:c3:32:fb:
                    9b:59:8f:4c:3a:1f:bc:2f:fb:02:30:77:05:d1:73:
                    d2:97:d2:7c:18:cf:96:af:b4:ae:bb:50:13:8e:d1:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:89:9E:7A:97:D5:5F:12:3F:B6:D0:AB:E2:FE:96:84:C3:21:41:12
            X509v3 Authority Key Identifier:
                keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:32:75:ba:03:3f:02:ef:24:dd:b8:7c:b8:79:b4:67:6c:07:
         51:78:cb:06:69:04:c5:da:7e:e1:eb:83:84:32:c2:53:d3:d9:
         f1:c0:1c:3f:e3:ac:3c:71:a0:30:a7:ca:5f:54:f3:19:28:f8:
         42:e2:5b:7c:37:8f:eb:5c:0f:fb:7d:cc:88:96:a4:d2:08:c8:
         6e:df:f6:08:67:7e:de:f9:ab:ca:72:cc:ec:7e:eb:f2:13:e1:
         85:8a:fe:66:2f:30:63:3a:8e:f4:35:34:eb:f9:df:e5:f3:4a:
         9f:02:8d:25:82:2c:70:1f:1c:c9:79:59:a1:97:29:92:0a:97:
         5d:6a:56:94:95:d1:bb:27:61:8e:87:01:c1:c3:83:79:f2:5a:
         d6:da:e2:e1:26:9c:7e:75:8b:60:f1:fa:5e:86:3a:ed:7b:5c:
         00:fa:cd:ee:1e:b3:77:a2:cf:33:17:4c:22:05:13:a6:ee:a6:
         23:51:24:a0:05:c5:43:9d:db:ad:78:f2:19:4f:e2:b5:ac:fa:
         0e:7f:02:45:4d:6d:5c:d3:4a:99:12:59:11:d0:bd:06:c0:c6:
         f1:32:54:0b:25:5d:e9:4c:b7:ba:43:de:d8:f2:f8:dd:fc:bb:
         ec:25:d1:d9:e3:06:d1:f5:38:3e:55:5b:79:64:ef:35:f1:c9:
         13:d8:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:04 2026 by rpki-client