This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File:                     QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier:          scvcL+Gho9QkLIpR6pJUlNQiVKY//cVxiL+ysidUdZM=
Subject key identifier:   4A:ED:4C:F5:ED:0A:66:3E:85:1E:4B:18:E3:4B:65:96:1F:41:08:52
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer:       /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial:       1330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number:          1326
Signing time:             Sat 24 Jan 2026 16:44:47 +0000
Manifest this update:     Sat 24 Jan 2026 16:44:47 +0000
Manifest next update:     Sat 31 Jan 2026 16:44:47 +0000
Files and hashes:         1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: /Z41ew3/gMDrKi2yTbcRs0GHUVqjqVgNENLwjkOvHec=)
                          2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: AtIY01QzRR0A54d2DL/Ntfs13u3zmiVedAjhi5vQD2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
                          rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4912 (0x1330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
        Validity
            Not Before: Jan 24 16:44:47 2026 GMT
            Not After : Jan 31 16:44:47 2026 GMT
        Subject: CN=6974f6ff-0914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:17:72:f3:c0:fc:81:ab:6a:93:c3:5d:3a:
                    4b:03:5d:a7:8d:ba:b3:4a:e0:c7:9f:59:29:12:98:
                    1c:02:3a:cd:53:38:0a:a6:1b:bf:0f:96:d3:ff:e2:
                    3b:a0:a2:2e:cc:9f:0d:fb:c0:45:6e:96:85:eb:33:
                    be:ea:51:a2:40:4d:8c:00:3a:26:74:77:a9:c0:34:
                    18:1d:f6:6d:9d:65:b8:e7:1f:23:31:0a:fe:59:05:
                    b9:04:04:f1:78:02:37:af:57:44:d5:ba:e0:0d:ee:
                    f6:4d:ba:8d:83:e4:80:92:1e:d1:1f:e4:4a:16:be:
                    ed:d9:12:06:31:7e:51:47:a2:87:8f:85:a1:f4:a8:
                    ca:39:b5:9e:2f:9d:ca:80:33:f6:18:65:b5:00:39:
                    01:e0:50:6f:4e:3b:7d:7c:f1:55:f2:ed:9d:d2:f2:
                    f1:60:da:bd:e6:88:94:ef:e4:a7:d7:f9:3e:04:ef:
                    73:09:9b:dd:1f:00:30:2e:85:6c:4f:1b:ae:4f:8f:
                    4a:70:73:1e:5e:61:f3:71:e3:56:c4:9c:44:03:28:
                    11:5e:dd:b2:41:5d:ff:e9:86:01:a5:ef:f2:f1:ca:
                    9a:7d:50:7b:82:98:9e:a4:93:e7:b3:fd:ca:45:5f:
                    c5:88:8e:dc:99:64:60:b2:c0:8f:2b:91:b1:75:fb:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:ED:4C:F5:ED:0A:66:3E:85:1E:4B:18:E3:4B:65:96:1F:41:08:52
            X509v3 Authority Key Identifier:
                keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:1b:ae:31:e0:f9:cc:dc:8c:58:02:d2:5d:62:42:e8:60:
         6f:d9:ee:04:1f:dd:e2:ae:44:02:99:eb:71:0a:d1:f8:f7:5f:
         c9:67:ce:30:c1:8e:af:1e:f3:a3:d3:2a:41:85:f9:68:05:fc:
         65:fa:1f:14:b8:75:e9:da:e0:88:b6:f6:9c:6d:9b:78:b8:ac:
         d7:3f:58:c5:a9:f0:45:80:a3:16:bd:da:65:db:2f:6b:77:d6:
         73:ba:c4:df:a1:3b:04:39:da:49:4d:ef:88:40:03:0f:9c:b5:
         93:f1:3a:40:af:bd:b4:29:23:e8:8c:da:4d:e1:9d:d9:d3:39:
         46:40:b7:4c:23:d2:1d:2f:b9:75:cb:9e:f9:0f:45:36:ba:24:
         37:17:ed:e6:e5:0d:22:cc:00:a5:79:5c:1b:98:5c:95:9c:9c:
         50:30:d4:4c:28:c2:ff:58:6b:cf:e5:b4:1d:d5:e8:c9:f2:bd:
         68:74:83:38:78:f2:c7:1f:3f:78:4d:cb:60:c4:d8:b5:59:fa:
         cb:58:ea:55:37:7a:c0:59:05:13:3f:41:a6:57:ce:45:83:d0:
         6f:33:9a:84:02:58:81:ba:53:4d:b9:90:ab:0e:83:46:ce:97:
         2d:38:89:af:7f:5a:74:c8:2d:bd:fe:02:d3:b2:7a:e3:1b:7f:
         a4:ab:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:13 2026 by rpki-client