This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
File:                     q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft (raw, json)
Hash identifier:          v/7BEaTketz+quWncgM/n5dMTMEaGpPOimvFEsnIj4s=
Subject key identifier:   A2:33:A5:59:F6:0A:43:2A:DD:B0:4A:E7:E6:BF:C0:F5:A7:41:1E:35
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Certificate issuer:       /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial:       0908
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
Manifest number:          0902
Signing time:             Sat 24 Jan 2026 19:44:04 +0000
Manifest this update:     Sat 24 Jan 2026 19:44:04 +0000
Manifest next update:     Sat 31 Jan 2026 19:44:04 +0000
Files and hashes:         1: q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl (hash: VdTj8/vfs3Exl2naoU2NvrDMDJag+XtgxbTfmY1R4eI=)
                          2: AAA8232C123411ED90E8CA59C4F9AE02.roa (hash: Qvjv2xSzp0S/r6i5DYb7//RNl54uOnwi+XbNLz5OL3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
                          rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182A08, serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
        Validity
            Not Before: Jan 24 19:44:04 2026 GMT
            Not After : Jan 31 19:44:04 2026 GMT
        Subject: CN=69752104-bd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:b7:c4:41:da:cd:ce:cf:84:8e:dc:9d:db:
                    c2:de:bc:8d:58:a0:6e:6d:9b:5c:f0:b8:9a:49:e2:
                    7c:40:05:20:8d:57:9c:75:42:15:00:8a:87:e5:3d:
                    f8:15:17:16:2d:38:5a:76:04:f2:7d:d7:19:33:31:
                    3e:27:73:aa:13:46:c3:a1:91:09:0f:c4:2a:26:83:
                    e6:5a:aa:5a:4f:f6:be:bf:ce:b8:f3:c5:ed:45:56:
                    c0:2b:15:9a:77:c8:f0:2d:8e:19:88:97:d2:03:fa:
                    7f:99:9e:6e:5b:50:5f:af:1d:51:a3:35:c1:16:ce:
                    85:f8:fa:58:d5:7e:dc:c1:9f:dc:11:24:a9:ff:c5:
                    49:5e:9b:06:0c:e5:b3:35:6e:05:aa:1a:73:24:97:
                    cb:b3:6f:d2:e5:44:e1:de:c3:0b:97:88:e8:1c:b3:
                    d7:72:d1:ac:37:ca:30:7a:04:93:fc:69:4a:69:18:
                    c1:80:17:f2:de:f5:53:cb:b0:c8:f2:e9:05:d9:d9:
                    d3:85:97:d7:cf:1c:0c:2b:e5:07:43:37:ec:ee:67:
                    c3:be:53:3f:fa:21:8a:3f:3a:fb:63:7e:a3:c3:69:
                    8f:67:5b:ae:ee:7d:ef:f0:4d:8f:1d:79:ad:10:32:
                    d5:38:84:6c:fa:0a:e4:a5:07:f5:1c:5d:bc:ee:15:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:33:A5:59:F6:0A:43:2A:DD:B0:4A:E7:E6:BF:C0:F5:A7:41:1E:35
            X509v3 Authority Key Identifier:
                keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:f2:bc:75:2c:9d:26:bb:0f:02:2c:6f:ac:1b:97:46:48:
         ee:dc:ee:08:fd:ee:40:6d:d9:b1:c7:49:0c:b4:82:f4:e0:f3:
         00:11:ae:40:e3:6e:e6:03:35:02:01:3c:63:c8:90:d7:3c:cc:
         e9:29:ca:dd:bb:33:dd:07:eb:7d:bd:ee:ef:68:5f:0f:b4:6b:
         5a:76:24:fa:2c:b7:a3:1f:3b:12:2e:16:06:1a:30:8b:f3:93:
         d4:de:ac:88:50:ce:77:4d:35:eb:53:b1:15:21:42:4f:8d:04:
         5c:b2:b3:8d:33:5f:56:6d:f3:65:89:b0:77:4f:18:03:7b:c2:
         b9:32:a6:a0:ac:7f:a7:73:a4:3f:fa:3f:47:32:38:9d:8c:24:
         5e:72:74:55:f6:74:83:b8:9c:8e:64:af:d9:1d:e1:c4:9f:41:
         da:0a:b5:63:21:b1:1a:1a:b5:67:58:bb:11:b3:15:af:43:9f:
         13:2b:5f:df:39:95:3b:dc:89:75:e8:ec:16:03:24:e4:91:32:
         80:70:e1:06:f6:e5:23:cb:59:57:aa:b9:3b:68:2e:15:98:44:
         51:fb:fd:09:ca:b9:13:d1:67:26:36:6c:39:f1:6b:95:b2:3c:
         39:58:e8:ff:9e:1b:65:bd:55:4c:34:c1:3d:97:d3:88:0b:e1:
         39:f2:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:28 2026 by rpki-client