This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          4YVe0eoqWC3wUe7SNPuMLXEtjC23Zjf6G619/zJSPIA=
Subject key identifier:   B5:00:38:25:9A:8F:60:5C:DF:CB:B3:6F:F2:53:D6:1D:C7:B7:60:38
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       328B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          3282
Signing time:             Sat 24 Jan 2026 15:17:40 +0000
Manifest this update:     Sat 24 Jan 2026 15:17:39 +0000
Manifest next update:     Sat 31 Jan 2026 15:17:39 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: NwK52B8eTP6L5fSIsFeQsexFlDKiPYLCQmc+UCOSElU=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12939 (0x328b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: Jan 24 15:17:39 2026 GMT
            Not After : Jan 31 15:17:39 2026 GMT
        Subject: CN=6974e294-d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:8f:02:7d:98:81:9f:4c:35:02:5f:5a:6a:
                    f1:8f:33:7b:7e:23:c7:9b:2b:67:f5:1e:9c:9c:db:
                    d9:3c:46:a6:42:a6:36:53:2f:99:26:52:97:d4:60:
                    e9:13:e4:fb:ee:8b:a6:e6:c5:58:6f:bd:77:87:ca:
                    01:52:48:44:71:1c:51:ba:9b:c8:22:5c:4d:91:36:
                    6a:e3:a9:d4:39:23:e9:b2:68:a7:1e:17:01:dc:83:
                    a1:d1:d1:f3:e3:fa:6a:9e:c9:71:e1:32:d8:5d:4a:
                    08:bf:b2:ee:76:18:76:23:21:4a:4c:91:09:3a:0d:
                    f4:97:5e:57:06:4f:d2:ce:ed:c0:c4:2a:62:35:8d:
                    11:ce:35:25:77:62:de:7a:9f:8d:1b:df:4f:e1:13:
                    44:13:0f:41:4e:c8:2d:ea:21:24:90:ea:97:47:33:
                    1b:2d:24:90:0e:5c:4d:9f:d3:f6:52:91:a9:ba:b9:
                    cb:37:72:1e:ea:63:80:c2:a6:ae:28:85:de:06:8a:
                    d8:17:51:72:61:af:d8:dd:57:fb:89:b2:4c:21:b5:
                    1e:fc:fb:b2:55:1c:cd:24:77:e2:12:fa:5f:bc:9f:
                    50:f6:b3:fb:3c:6a:cb:a5:b4:c1:2c:f2:68:b1:76:
                    ac:be:70:d6:28:23:86:20:c8:bc:bc:41:4b:7e:2f:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:00:38:25:9A:8F:60:5C:DF:CB:B3:6F:F2:53:D6:1D:C7:B7:60:38
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:ee:e5:98:0a:b0:05:f9:b4:89:1b:28:3d:73:f6:76:76:
         61:1d:f8:ed:47:78:7f:c5:40:87:22:d1:96:ac:a5:8a:3b:6b:
         00:0c:69:61:fa:6f:42:ff:eb:64:c7:00:1f:16:dd:4d:39:42:
         cf:99:3a:86:7a:27:57:d2:45:45:46:09:a7:a0:ad:3f:24:6f:
         f1:a3:0e:8a:22:31:da:29:58:42:45:6c:d9:d1:83:9e:35:ed:
         53:20:d9:d5:e2:ea:c9:e0:e5:51:16:8c:45:a0:62:74:99:27:
         95:88:d4:74:f1:aa:b1:df:c6:2b:e6:58:96:31:01:3f:6b:bf:
         8a:38:a6:fa:be:c1:8d:c4:bb:42:5e:81:9d:3b:82:5b:5e:67:
         21:ca:56:7f:bd:63:0b:07:95:21:fc:b9:4c:6b:58:5e:72:8b:
         c7:78:f3:90:47:cf:de:a8:02:00:ba:7c:67:da:0c:de:ba:67:
         d6:4f:d0:81:0b:4f:c6:61:45:16:a2:d4:60:6f:9b:fa:50:42:
         c7:3f:28:6f:4b:b3:a9:8d:b3:7a:9c:fe:d7:03:59:8a:e8:66:
         0a:b5:55:59:20:c6:a2:50:13:ca:05:73:88:11:b2:ac:d1:a3:
         25:d4:3c:c8:72:38:d7:18:66:da:38:4d:12:f3:78:1c:93:85:
         de:de:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:31 2026 by rpki-client