This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
File:                     qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json)
Hash identifier:          humbQYcxWwPVgqKVHt0FWGwTLXVHIRcjwXqHZvxoC30=
Subject key identifier:   B1:B2:4D:C4:C2:89:48:E1:77:21:82:A4:68:6A:1A:20:F1:D9:6F:3F
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Certificate issuer:       /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
Manifest number:          0213
Signing time:             Sun 25 Jan 2026 01:32:33 +0000
Manifest this update:     Sun 25 Jan 2026 01:32:33 +0000
Manifest next update:     Sun 01 Feb 2026 01:32:33 +0000
Files and hashes:         1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: 0phDM1g3U4KOszZabI9u+xoBmvyYB8LjY4uOahAUlzE=)
                          2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: RRFkv0+MhucpLar3G+6nK3AMY5KxybMxRqr09USf+uU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
                          rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
        Validity
            Not Before: Jan 25 01:32:33 2026 GMT
            Not After : Feb  1 01:32:33 2026 GMT
        Subject: CN=697572b1-a7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5a:bd:4c:eb:f9:40:63:53:af:17:3e:a7:b1:
                    71:89:d3:f4:6e:a5:ec:60:af:db:63:be:37:3d:fc:
                    34:c3:2a:9c:71:8f:e0:46:bb:d2:92:43:20:3c:9e:
                    ff:db:c5:78:e5:2f:a1:67:d4:ba:b5:30:0e:9e:82:
                    4d:c3:e4:0d:fd:dd:fc:4a:3c:74:66:53:c9:9e:5f:
                    c9:2e:a5:63:3e:5b:06:72:84:8b:3f:84:15:31:54:
                    d5:48:43:ba:a0:ac:a0:69:47:65:5c:c0:a6:72:af:
                    a2:04:17:ce:86:7e:20:69:27:28:10:84:f6:6b:4b:
                    8d:bf:d2:48:64:7a:e6:c4:87:d1:db:0d:21:13:9a:
                    47:7c:1a:b8:70:c8:dc:d2:de:89:30:db:39:04:e9:
                    f0:3c:a3:2a:88:59:1e:72:04:a4:64:7c:cb:c1:0a:
                    06:0b:da:9f:ef:81:0c:a5:05:b6:8d:23:d0:8c:41:
                    d4:eb:32:df:c7:cb:91:51:a8:bb:00:7a:87:2d:ab:
                    78:3a:f6:18:0a:2f:b5:1e:75:76:2a:8d:29:34:ac:
                    a4:d0:c0:c2:37:27:74:e6:e7:7a:80:84:e0:cf:e1:
                    4d:0d:e6:93:03:f4:ca:81:5c:f2:54:3c:3b:2f:76:
                    7b:ad:0e:01:b5:8b:b5:7d:9c:00:ff:59:21:58:d1:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B2:4D:C4:C2:89:48:E1:77:21:82:A4:68:6A:1A:20:F1:D9:6F:3F
            X509v3 Authority Key Identifier:
                keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:44:f3:e7:16:04:39:dc:71:17:90:0d:2c:38:5b:0c:0e:
         3d:98:65:39:0a:6a:0a:93:ab:02:14:94:ea:3d:bc:7c:2d:29:
         00:15:f1:c2:25:31:3d:3c:a6:fc:30:db:0f:31:c2:56:84:82:
         b4:53:cb:db:a8:3a:22:55:95:31:b9:9a:d2:c5:37:e1:30:c5:
         da:47:e2:f7:25:e1:11:1b:51:96:37:b8:2c:b9:db:67:6e:be:
         f4:e0:ba:31:62:7a:9e:a9:e9:9f:ba:48:b5:9f:16:73:db:28:
         42:43:30:89:ab:07:19:45:e0:01:5d:d1:71:80:58:f0:fc:8d:
         2a:b5:7b:62:cb:a4:41:26:1f:2d:6a:96:05:bf:1a:a9:39:aa:
         f3:73:95:ea:52:b4:e6:81:5e:77:40:42:5e:d1:d8:d8:aa:76:
         23:31:64:f1:b3:18:e4:83:40:53:ba:10:07:cb:12:e3:7c:26:
         b0:30:4e:e4:37:58:c1:df:ec:cc:15:ca:f8:c7:f3:66:d2:40:
         fb:72:59:e8:a3:85:5b:02:8e:2d:f0:ac:48:43:92:fe:21:b3:
         3b:62:c4:01:17:76:88:e0:85:88:09:29:f0:be:b0:62:c5:5c:
         30:d2:d3:94:3e:92:81:12:d9:f3:19:3f:d3:d4:74:2a:98:f9:
         4e:da:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:35:04 2026 by rpki-client