This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
File:                     qtrfI2_7nO0qpky3zl2Z1R066RM.mft (raw, json)
Hash identifier:          w0ZgfnqvbnT4XEw0rq+0UXmTdFF4RoJp4dqeDShxHcs=
Subject key identifier:   4A:E6:40:E9:33:3D:DA:BD:C3:76:03:68:B8:24:75:3C:A4:68:2E:D1
Authority key identifier: AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13
Certificate issuer:       /CN=A9167671/serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
Manifest number:          36
Signing time:             Fri 23 Jan 2026 06:34:32 +0000
Manifest this update:     Fri 23 Jan 2026 06:34:31 +0000
Manifest next update:     Fri 30 Jan 2026 06:34:31 +0000
Files and hashes:         1: qtrfI2_7nO0qpky3zl2Z1R066RM.crl (hash: r1+ZV6xbPDjvj6wYvgqJWiHwhFj97UhnuKsMr7BmIcI=)
                          2: E1CBE78EADFA11F08ED60C0DC4F9AE02.roa (hash: vIYtmstFR8g2+vQnV7MsR8fjsNj0Vs2+JEeA9zk+p4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl
                          rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167671, serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913
        Validity
            Not Before: Jan 23 06:34:31 2026 GMT
            Not After : Jan 30 06:34:31 2026 GMT
        Subject: CN=69731678-aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:e0:44:e9:ed:db:af:49:bf:bc:c5:55:6c:
                    08:53:e9:00:f4:53:28:22:84:a7:66:be:52:b6:ee:
                    08:01:8a:c9:51:fa:6d:46:5f:0e:44:ba:a5:0a:eb:
                    f5:31:8b:b3:34:de:f9:1f:f6:c3:ad:11:79:ac:c1:
                    77:08:30:7f:ed:6a:d9:ee:66:ca:6e:ad:74:8e:ad:
                    bd:b4:dc:20:8c:ae:12:b7:fb:d5:92:7e:c2:ac:93:
                    2b:6b:a4:a7:68:57:73:fa:a5:0b:f3:9b:b8:eb:37:
                    25:01:85:21:82:8a:7b:de:19:a8:3b:77:db:56:f3:
                    17:1c:2a:14:90:34:cd:21:cc:26:58:43:2c:60:e5:
                    3e:4d:ac:90:53:26:d3:e4:4f:ab:d0:31:19:95:5a:
                    f0:d0:a7:ee:b8:a3:f8:07:34:86:15:58:45:6b:7a:
                    d8:4c:83:68:ef:b8:fe:96:87:17:1e:64:86:64:d4:
                    41:e2:3c:13:f0:1d:4d:26:46:7e:b3:a6:85:0c:a8:
                    e6:cb:15:eb:8f:6c:f0:78:8e:7c:71:75:d7:77:16:
                    8b:5a:5d:d8:2f:92:fb:38:30:73:d9:f9:c1:f1:3d:
                    fc:b0:e6:78:51:f2:41:38:45:93:af:cf:6f:bb:e7:
                    a8:89:43:a4:c3:d3:ba:4c:2f:22:90:00:7e:05:20:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E6:40:E9:33:3D:DA:BD:C3:76:03:68:B8:24:75:3C:A4:68:2E:D1
            X509v3 Authority Key Identifier:
                keyid:AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:d3:7a:2f:f5:dd:f3:ea:e7:b2:e5:40:cd:a1:89:40:8c:
         61:c8:fd:d1:7f:13:e4:8a:5c:63:64:5e:7a:56:6d:21:0d:29:
         51:b3:40:b4:e5:c2:d7:ac:61:4d:9d:aa:78:8b:94:ad:0b:fc:
         5e:0b:b3:d2:fe:02:22:35:9c:75:a5:a7:33:19:a0:a1:44:8d:
         a8:23:20:a1:6d:fb:fa:51:81:a8:81:09:37:38:17:79:6a:f9:
         af:17:f6:f8:8d:ca:9f:cb:ef:80:e3:80:3b:0a:37:3e:95:6b:
         af:94:f6:55:d8:46:e0:86:7f:05:d4:6a:b2:4d:ee:ec:48:b9:
         9d:e2:b8:4b:d9:a1:54:c7:3d:dd:e2:d9:a0:c0:c3:5b:8b:51:
         a3:8b:5d:be:02:ec:9c:85:f8:06:95:19:e3:f8:08:ae:54:44:
         84:84:99:9f:01:18:a2:6d:bc:53:5e:7c:c8:3e:f5:44:1f:06:
         96:62:8c:15:c3:27:fc:31:42:e3:de:33:ab:87:b7:32:c3:33:
         ea:51:65:a8:5d:9e:3b:df:42:07:36:85:2f:23:34:ce:c4:ef:
         70:e5:dc:a3:69:63:1c:2f:7f:33:da:fd:c6:f5:8d:81:0d:96:
         ce:eb:b8:66:2c:73:d9:aa:9a:be:9f:64:b4:99:56:9c:81:74:
         42:b5:b7:fc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NzY3MTExMC8GA1UEBRMoQUFEQURGMjM2RkZCOUNFRDJBQTY0Q0I3Q0U1RDk5RDUx
RDNBRTkxMzAeFw0yNjAxMjMwNjM0MzFaFw0yNjAxMzAwNjM0MzFaMBgxFjAUBgNV
BAMMDTY5NzMxNjc4LWFlZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCk2OBE6e3br0m/vMVVbAhT6QD0UygihKdmvlK27ggBislR+m1GXw5EuqUK6/Ux
i7M03vkf9sOtEXmswXcIMH/tatnuZspurXSOrb203CCMrhK3+9WSfsKskytrpKdo
V3P6pQvzm7jrNyUBhSGCinveGag7d9tW8xccKhSQNM0hzCZYQyxg5T5NrJBTJtPk
T6vQMRmVWvDQp+64o/gHNIYVWEVrethMg2jvuP6WhxceZIZk1EHiPBPwHU0mRn6z
poUMqObLFeuPbPB4jnxxddd3FotaXdgvkvs4MHPZ+cHxPfyw5nhR8kE4RZOvz2+7
56iJQ6TD07pMLyKQAH4FILTDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSuZA6TM9
2r3DdgNouCR1PKRoLtEwHwYDVR0jBBgwFoAUqtrfI2/7nO0qpky3zl2Z1R066RMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjcxLzZGMjg2QjEyQURG
QTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8wcXBreTN6bDJaMVIwNjZS
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcXRyZkkyXzduTzBxcGt5M3psMloxUjA2NlJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3
NjcxLzZGMjg2QjEyQURGQTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8w
cXBreTN6bDJaMVIwNjZSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEqc03ov9d3z6uey5UDNoYlAjGHI/dF/E+SKXGNkXnpWbSENKVGzQLTl
wtesYU2dqniLlK0L/F4Ls9L+AiI1nHWlpzMZoKFEjagjIKFt+/pRgaiBCTc4F3lq
+a8X9viNyp/L74DjgDsKNz6Va6+U9lXYRuCGfwXUarJN7uxIuZ3iuEvZoVTHPd3i
2aDAw1uLUaOLXb4C7JyF+AaVGeP4CK5URISEmZ8BGKJtvFNefMg+9UQfBpZijBXD
J/wxQuPeM6uHtzLDM+pRZahdnjvfQgc2hS8jNM7E73Dl3KNpYxwvfzPa/cb1jYEN
ls7ruGYsc9mqmr6fZLSZVpyBdEK1t/w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:14 2026 by rpki-client