This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          sfNdN1dKHgAcifWE9AM5Xx8l/fhyIuAqt8ox0zbzSxA=
Subject key identifier:   E6:B7:4E:6E:DB:AD:57:A5:15:73:8E:1E:43:ED:D1:19:9A:D6:40:B3
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       1194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          118B
Signing time:             Sat 24 Jan 2026 16:55:47 +0000
Manifest this update:     Sat 24 Jan 2026 16:55:46 +0000
Manifest next update:     Sat 31 Jan 2026 16:55:46 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: I6heCoZIxMc7ALe5WFKE6eLnHD4Yo64DPQ5EHcA59+w=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4500 (0x1194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Jan 24 16:55:46 2026 GMT
            Not After : Jan 31 16:55:46 2026 GMT
        Subject: CN=6974f993-815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:67:11:18:7d:6c:58:2d:60:b8:16:98:ae:
                    38:e8:9e:fd:07:55:d6:17:38:97:df:ce:ed:28:11:
                    56:c4:fa:8e:86:2a:01:ca:5c:41:c0:bb:05:4c:43:
                    c7:48:5f:b3:52:e6:c8:a7:d0:43:16:98:81:50:2f:
                    60:3a:67:9b:fb:40:4b:87:29:ff:6c:e9:06:0d:d8:
                    2a:35:34:a6:ee:72:0b:b9:7e:42:53:db:8b:5e:2b:
                    e8:38:90:43:71:43:a7:66:82:13:f7:15:5a:c8:70:
                    74:7a:02:d1:2a:6f:6f:b2:6f:6d:59:c9:97:a1:44:
                    a2:7c:e0:2f:c4:c6:fd:0d:cf:c1:a5:a3:96:62:04:
                    25:e1:04:e7:5d:d8:28:3e:b2:41:ca:28:6d:0f:26:
                    6e:f4:d1:4a:62:e8:84:41:a3:4f:c1:0a:46:ba:2e:
                    9d:ac:bd:41:6b:97:95:8a:18:36:11:1c:1a:b6:26:
                    6e:52:53:ad:a7:6c:b2:ff:af:e8:4f:f9:68:08:ec:
                    c7:a1:e9:3f:d0:7a:16:1b:5a:80:95:de:58:19:be:
                    1d:6f:be:69:cf:49:b4:ba:3d:91:c8:40:f4:20:6f:
                    aa:8d:bb:30:32:88:24:b1:43:3b:e4:5f:48:16:41:
                    26:9d:39:34:b5:3b:4b:a2:74:54:7d:3f:81:4e:bb:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:4E:6E:DB:AD:57:A5:15:73:8E:1E:43:ED:D1:19:9A:D6:40:B3
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:f5:c6:ac:19:ed:73:87:a5:73:63:36:62:de:f9:ee:02:
         16:50:7b:34:7f:6c:98:49:0e:ea:bc:32:66:da:8a:a5:49:67:
         8b:5e:43:1c:44:b8:08:51:a7:d4:67:36:b6:5e:3b:3d:3e:ec:
         80:72:46:6d:59:2a:2c:4e:62:07:92:f0:de:ac:bb:60:82:3a:
         bc:9a:85:ba:91:53:55:69:9c:a9:7f:d2:06:77:e3:37:80:f7:
         ee:b9:cd:5f:77:0f:78:89:bf:1b:21:75:98:b2:10:74:ae:6a:
         3a:e0:1d:49:21:01:ba:85:6b:e9:e2:2e:f1:c2:7b:41:c2:e7:
         cb:1b:20:bf:7e:23:fe:52:4d:2a:70:a8:60:bc:64:d9:94:a6:
         a5:63:fb:a2:99:0b:84:ff:b2:19:27:3b:3e:9d:a9:57:0f:8b:
         a3:bb:21:fe:0f:e6:49:77:4d:16:57:ee:f5:4a:44:28:7c:d2:
         21:26:a3:c4:74:fb:91:6b:cf:67:ad:f0:7e:51:70:65:75:b1:
         6a:09:32:2a:cb:c1:1d:c2:b6:66:a7:d7:97:56:95:4b:10:a5:
         5c:7c:86:fc:f0:ed:1f:4d:c9:57:42:4f:89:de:c8:3d:0d:3c:
         15:00:49:58:62:86:fa:29:5b:30:86:cd:31:f2:fc:c9:9d:87:
         24:d3:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:27:54 2026 by rpki-client