This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File:                     qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier:          oPU6J30C6nH53MIiZyZrYa78C5oqM75uZJpmWMbjLdE=
Subject key identifier:   02:F1:F2:54:B0:21:75:B6:30:6E:24:5C:D5:11:55:89:02:14:18:01
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer:       /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial:       0808
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number:          0801
Signing time:             Sat 24 Jan 2026 20:26:50 +0000
Manifest this update:     Sat 24 Jan 2026 20:26:50 +0000
Manifest next update:     Sat 31 Jan 2026 20:26:50 +0000
Files and hashes:         1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: RETa5upVEzLTsDChIWy9cxX4NU22Hk9KbZ3Q5ALoeQY=)
                          2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: BTersuR9nT3lEPvuv48IvMBlCU5YGyqezwR+drdWXyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
                          rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
        Validity
            Not Before: Jan 24 20:26:50 2026 GMT
            Not After : Jan 31 20:26:50 2026 GMT
        Subject: CN=69752b0a-0a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:b9:0f:8b:30:6f:3d:77:43:6e:b4:22:d0:
                    44:7a:38:ab:55:3b:7a:b3:78:8b:af:51:d0:cb:34:
                    fb:9a:47:b8:db:df:01:3d:27:ed:e3:27:0e:77:ae:
                    bb:e8:a8:17:5c:a5:51:f6:ea:1c:20:90:51:d4:b3:
                    90:00:54:57:9a:fd:c5:1e:54:b3:3f:fd:6d:19:97:
                    bc:1a:b3:1d:3d:53:5b:be:82:d3:17:65:ab:2a:37:
                    c5:0e:44:5e:fe:8d:0c:c7:1e:4f:5b:1e:84:3a:98:
                    77:81:9b:72:ef:5f:fe:45:86:f0:e0:61:74:46:4f:
                    06:ae:71:08:39:dc:25:be:11:8b:5f:48:5e:a5:ea:
                    ff:c0:03:8e:f8:4d:fc:f2:6e:df:8b:9c:b8:26:6d:
                    b6:5b:18:d7:ca:55:c1:4a:96:9d:89:86:e2:b5:9e:
                    ff:34:98:be:d1:e2:76:22:77:d4:e4:4c:14:89:4b:
                    4b:cb:ea:1a:d5:e9:11:b8:a8:10:fc:3b:73:dd:99:
                    04:b3:2a:1e:ae:01:b2:83:f2:bf:7f:d7:b9:7e:12:
                    5b:13:4d:08:46:19:2e:59:0b:68:d2:8b:36:0f:42:
                    27:ea:c8:73:0f:43:9a:0c:90:db:e8:f1:6f:44:26:
                    83:ce:c6:75:64:35:0d:47:2b:88:57:64:9d:8f:67:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:F2:54:B0:21:75:B6:30:6E:24:5C:D5:11:55:89:02:14:18:01
            X509v3 Authority Key Identifier:
                keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:75:eb:92:25:83:d9:53:03:1a:78:3c:40:0a:ec:31:56:
         8e:87:a5:7b:1b:9d:46:4e:9e:d7:cb:29:30:d5:1a:65:ab:09:
         83:48:f2:57:19:72:f9:bb:06:09:90:b7:1d:65:e6:cd:34:d8:
         78:3e:b2:f6:5d:68:29:e1:be:08:3f:89:c3:db:46:d3:e0:24:
         d1:1f:8e:ed:19:13:c0:d2:e1:a0:0c:30:f8:44:e6:90:06:40:
         41:1e:e7:41:44:92:c0:8b:ca:ef:ac:fd:05:7c:af:ca:a6:dc:
         bb:6c:4d:3a:b1:97:2d:43:13:43:f5:49:03:72:cb:f0:b6:d0:
         d1:37:81:ef:6e:ba:a5:db:cb:c9:be:92:40:df:6e:2e:44:f2:
         b9:3c:c3:8f:cb:dd:d7:a1:d8:0c:76:20:dc:33:16:6e:ac:31:
         d5:c9:ab:32:d5:16:d7:99:3a:4c:1b:55:51:51:32:02:5f:dc:
         21:80:6f:ef:14:22:e0:09:08:cd:ff:2f:85:e2:7c:5d:0b:97:
         40:42:e3:fd:80:e0:fc:3e:a7:cf:28:e1:cd:1c:e0:1a:99:dd:
         e4:8f:c8:61:8f:4f:54:81:33:51:e0:45:b7:bc:b7:8a:0b:37:
         9e:e9:5c:74:4c:72:b5:be:ba:37:67:81:29:77:09:66:cb:f6:
         bf:8e:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:03 2026 by rpki-client