This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          M4MbBmY2FVi5X4RfeWwJiLpIpeF8JGBvegOEZaB9qfs=
Subject key identifier:   6F:E5:8C:B7:82:FE:29:D9:07:83:E2:1F:87:46:C9:C8:51:CD:42:57
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1B20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1B0B
Signing time:             Sat 24 Jan 2026 15:29:56 +0000
Manifest this update:     Sat 24 Jan 2026 15:29:56 +0000
Manifest next update:     Sat 31 Jan 2026 15:29:56 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: fQmE86oSPOVnNzpZSGn5wGsBVmZ5pAJ6o7pGusAXd5M=)
                          2: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=)
                          3: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6944 (0x1b20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: Jan 24 15:29:56 2026 GMT
            Not After : Jan 31 15:29:56 2026 GMT
        Subject: CN=6974e574-8299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:05:ab:8b:e6:0d:8a:84:44:23:03:de:21:
                    a5:e9:99:0a:6b:a5:54:a9:b6:aa:e3:19:dc:4c:a5:
                    fd:91:d6:60:5f:a4:9f:52:e3:05:5b:e9:22:48:9d:
                    eb:84:75:fe:03:a1:4e:63:ab:68:38:ef:cd:33:79:
                    14:bc:08:ce:af:df:f2:17:e9:49:b7:02:e9:f6:87:
                    68:b8:3d:0d:11:f0:d6:63:3b:93:ce:5b:a1:ab:31:
                    b9:e5:f6:6b:03:ce:22:0e:e1:45:d2:ad:40:29:82:
                    f6:fe:e1:36:f1:b1:46:33:81:5b:55:1c:53:dc:85:
                    8b:d9:a6:70:6a:4a:7b:f1:6d:b7:8b:1d:4b:21:3f:
                    e0:7b:2e:ed:d6:1b:c7:fb:88:e9:d0:e3:a0:23:a7:
                    b5:f5:e6:15:9f:84:64:0f:f2:18:66:75:3a:cb:75:
                    ee:de:4d:85:d1:05:c6:12:8f:34:f8:a7:2d:0a:21:
                    13:b3:f6:47:d0:2e:c4:7f:2f:b5:2b:0f:21:cc:18:
                    86:82:9d:a1:f3:3b:94:21:b9:07:8b:8b:c3:06:1f:
                    c2:30:bf:63:0a:f0:90:56:c6:0e:75:ca:cb:f7:35:
                    f6:3a:9f:2c:1c:b9:db:6e:a1:5e:4d:3e:28:0b:2e:
                    80:e5:08:87:56:09:87:27:1f:cf:55:79:85:c2:43:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:8C:B7:82:FE:29:D9:07:83:E2:1F:87:46:C9:C8:51:CD:42:57
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:e9:ed:8e:b9:98:fe:12:2d:06:ac:26:47:d0:1a:29:7b:
         ef:6f:e6:cb:93:5c:55:df:95:dd:00:53:f7:ce:c4:29:b4:ed:
         1e:16:41:f2:1a:b9:5e:46:79:4b:56:44:7c:c6:50:a5:31:b1:
         b3:50:f1:dd:41:2a:bc:4f:f6:f8:2a:9d:db:df:4e:25:ca:e8:
         aa:ed:ac:ab:a2:dc:bc:f3:22:a0:91:e9:5f:09:ac:57:ee:db:
         0d:4b:35:74:90:99:23:13:46:c6:d9:36:ac:a8:23:ab:d7:b0:
         1a:20:68:0c:17:1c:0a:c6:89:5d:36:85:a2:d9:97:85:92:7b:
         a7:79:dc:9a:10:d0:64:fe:f4:63:33:a6:c4:6d:f2:d8:74:48:
         a4:0a:80:bd:60:7b:57:46:65:99:9a:22:75:2f:d7:12:93:1f:
         56:1e:78:2b:dc:9b:ec:ff:59:b8:ca:51:90:03:27:4e:44:3c:
         8a:1c:68:9a:e3:da:f0:93:72:4d:a4:ac:85:33:90:f9:70:4c:
         69:05:65:4b:df:9b:c3:65:fb:c3:9c:54:0e:9f:e6:43:98:8f:
         8b:ec:19:83:5a:89:e3:67:69:13:3c:a2:04:20:55:f0:38:f0:
         9f:4d:45:8a:29:31:52:fd:9e:ba:eb:e0:06:9f:dd:4e:7d:41:
         13:9b:69:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz
MzlCRUJBOTcwHhcNMjYwMTI0MTUyOTU2WhcNMjYwMTMxMTUyOTU2WjAYMRYwFAYD
VQQDDA02OTc0ZTU3NC04Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj8IFq4vmDYqERCMD3iGl6ZkKa6VUqbaq4xncTKX9kdZgX6SfUuMFW+kiSJ3r
hHX+A6FOY6toOO/NM3kUvAjOr9/yF+lJtwLp9odouD0NEfDWYzuTzluhqzG55fZr
A84iDuFF0q1AKYL2/uE28bFGM4FbVRxT3IWL2aZwakp78W23ix1LIT/gey7t1hvH
+4jp0OOgI6e19eYVn4RkD/IYZnU6y3Xu3k2F0QXGEo80+KctCiETs/ZH0C7Efy+1
Kw8hzBiGgp2h8zuUIbkHi4vDBh/CML9jCvCQVsYOdcrL9zX2Op8sHLnbbqFeTT4o
Cy6A5QiHVgmHJx/PVXmFwkNpowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/ljLeC
/inZB4PiH4dGychRzUJXMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB
MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz
Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwSentjrmY/hItBqwmR9AaKXvvb+bLk1xV35XdAFP3zsQptO0eFkHy
GrleRnlLVkR8xlClMbGzUPHdQSq8T/b4Kp3b304lyuiq7ayroty88yKgkelfCaxX
7tsNSzV0kJkjE0bG2TasqCOr17AaIGgMFxwKxoldNoWi2ZeFknunedyaENBk/vRj
M6bEbfLYdEikCoC9YHtXRmWZmiJ1L9cSkx9WHngr3Jvs/1m4ylGQAydORDyKHGia
49rwk3JNpKyFM5D5cExpBWVL35vDZfvDnFQOn+ZDmI+L7BmDWonjZ2kTPKIEIFXw
OPCfTUWKKTFS/Z666+AGn91OfUETm2ku
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:31 2026 by rpki-client