This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File:                     QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier:          lVpe42yR0bus4fZ1aq0p79o25Sr6AUyCzXMXzaRXsyk=
Subject key identifier:   1B:E5:D3:13:8E:7E:C1:AB:79:0B:33:7E:B2:36:0D:B8:FD:2C:91:EA
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer:       /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial:       046B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number:          0464
Signing time:             Sat 24 Jan 2026 23:21:08 +0000
Manifest this update:     Sat 24 Jan 2026 23:21:07 +0000
Manifest next update:     Sat 31 Jan 2026 23:21:07 +0000
Files and hashes:         1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: MxhWcrU+m2UR9fLB0pCaVku/ICpLEIUbCfI1nB8TGxc=)
                          2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: nH/LwYYai4yyYtR5+FsgF3NxGTHmzQuh60VcXhlakk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
        Validity
            Not Before: Jan 24 23:21:07 2026 GMT
            Not After : Jan 31 23:21:07 2026 GMT
        Subject: CN=697553e3-e6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:61:f0:d8:88:9e:f4:4f:d9:d6:04:64:1f:
                    50:03:71:87:76:18:34:01:f7:d6:2f:41:19:80:f0:
                    24:94:13:fb:63:5b:95:73:a1:f5:7c:8f:e7:f6:80:
                    9b:84:77:2b:27:36:6b:3f:d1:53:aa:b1:a5:7f:53:
                    d6:0a:b3:fd:96:21:3c:3d:02:1d:a6:06:c2:32:51:
                    fd:da:1c:18:32:1b:07:d8:aa:9c:00:08:f3:1d:d6:
                    49:39:b5:37:47:93:73:ee:b7:cf:bf:a4:96:be:16:
                    87:0e:71:0f:7d:c3:e0:bf:74:de:ff:4d:bd:a9:3b:
                    02:04:f6:64:95:49:3b:9f:b1:25:0b:0a:81:b1:1c:
                    a1:16:04:c8:b5:b8:13:6c:82:1a:1f:52:35:99:40:
                    c8:41:72:44:8c:07:ae:58:a7:10:07:fd:a8:d5:93:
                    bf:b2:92:a0:b3:97:14:4b:c6:4e:bc:35:15:04:75:
                    ad:61:f4:f7:6d:02:f8:a5:4d:83:96:94:8d:98:3c:
                    58:8c:33:3b:00:94:9c:1e:6e:6b:10:3c:5c:d4:54:
                    f9:59:f7:a9:6e:49:e2:8b:bd:78:56:49:86:9a:53:
                    8e:99:cf:98:95:d5:43:54:5e:bf:a2:98:93:75:37:
                    4f:3c:16:b4:28:cc:c5:4c:6a:17:f9:3d:de:b9:1c:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:D3:13:8E:7E:C1:AB:79:0B:33:7E:B2:36:0D:B8:FD:2C:91:EA
            X509v3 Authority Key Identifier:
                keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:02:c2:92:4f:09:29:88:69:53:12:f7:85:56:c1:41:02:
         36:2d:16:d2:ba:60:6a:bf:16:ec:f6:0c:52:56:a0:ef:83:c4:
         9c:0b:6e:a7:57:ac:25:f1:a2:f4:1c:15:12:ee:e4:33:dc:4d:
         74:8e:4c:ea:36:b9:70:9c:9a:07:0a:46:49:72:ee:bd:54:1b:
         ac:f1:3f:ab:ba:41:0e:e3:16:1d:b7:69:c2:f8:44:ef:91:e9:
         b4:34:50:ce:d7:85:8b:13:73:ca:89:b5:f5:2e:3b:c0:69:c0:
         3c:51:3e:7b:3d:65:47:18:d5:c2:de:33:d0:9a:c7:59:5e:38:
         b2:16:f1:cf:94:65:1c:30:ec:38:9a:17:9a:dc:09:dd:9d:59:
         40:48:09:1b:2e:2a:c9:00:cc:99:ed:a1:2d:c4:ca:f8:5b:82:
         92:ab:57:d3:ae:38:aa:f6:a6:2d:b6:40:05:b2:37:b3:a7:a0:
         fd:75:07:44:64:f1:75:d8:59:1f:d5:76:0d:d3:89:0f:af:91:
         f8:5f:d9:8d:98:80:ed:4f:99:c0:29:fb:7b:fd:a8:47:e1:4c:
         ed:fa:fc:c4:d9:06:95:9a:4d:e6:ee:6b:36:9d:40:fd:5b:df:
         c2:65:54:03:5e:6b:a7:46:73:b0:0f:1f:b5:80:7d:2c:23:e7:
         c7:ab:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:34 2026 by rpki-client