This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
File:                     qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json)
Hash identifier:          TAf4/YeKGRUqbO/+hpJKyd2aH8wh6OrxXm8//vIeQcU=
Subject key identifier:   4E:CD:25:1A:88:33:22:87:91:9F:42:7B:0B:E1:B8:17:06:DF:77:7C
Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03
Certificate issuer:       /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003
Certificate serial:       0CC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
Manifest number:          0CBA
Signing time:             Sat 24 Jan 2026 17:54:43 +0000
Manifest this update:     Sat 24 Jan 2026 17:54:42 +0000
Manifest next update:     Sat 31 Jan 2026 17:54:42 +0000
Files and hashes:         1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: +8vgBM6kKLZEvWdtfdBGOeYn1C+S/xo9eQRci2vybH4=)
                          2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: V97lq+hSZ9oNH4AZKBUD+qWwTgR66PrTcw3FG8A1KF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003
        Validity
            Not Before: Jan 24 17:54:42 2026 GMT
            Not After : Jan 31 17:54:42 2026 GMT
        Subject: CN=69750763-f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:7c:f0:c6:17:fe:77:f2:99:bf:28:50:28:
                    b6:b2:2f:f6:99:1a:5a:93:78:7b:61:5d:68:70:17:
                    36:c8:8e:78:a2:8f:50:89:a1:ec:ac:57:57:fb:67:
                    35:94:59:4c:08:08:56:44:f4:a9:fe:b3:3a:c9:22:
                    e4:f1:57:93:ff:3d:58:29:e5:13:3d:67:f8:61:cb:
                    18:78:d8:80:ef:a0:20:90:2f:90:c1:e1:b8:96:3b:
                    fd:24:d2:84:c4:47:10:07:32:30:f6:b7:95:27:e6:
                    76:99:ac:ad:86:2f:85:dd:a8:7e:f6:36:6d:50:0d:
                    16:40:eb:f6:a8:ff:bb:45:4d:82:10:31:dd:2e:3f:
                    77:bc:fa:96:7f:f0:f4:a8:18:3c:16:94:55:53:87:
                    32:9a:68:81:32:e1:9b:0a:30:bd:ad:d1:ff:d9:29:
                    4a:74:e6:c7:1f:f3:37:9d:a3:00:d4:8b:f4:14:a1:
                    4a:f7:a8:5d:05:23:d0:8b:2e:9d:92:6a:d0:13:af:
                    1f:fd:04:d9:61:47:dc:49:f8:d3:3d:7e:02:30:4b:
                    6e:30:24:d8:31:e1:81:6b:7c:d9:3e:6a:77:28:4c:
                    38:fc:7f:43:0f:8f:c6:a8:b7:80:80:20:d7:5c:e4:
                    09:4f:80:18:7e:2b:54:b3:db:6d:6a:39:30:1d:24:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:25:1A:88:33:22:87:91:9F:42:7B:0B:E1:B8:17:06:DF:77:7C
            X509v3 Authority Key Identifier:
                keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9b:36:06:8d:71:c3:ac:ed:8a:10:6f:1e:21:b5:d2:68:0b:
         87:d0:05:cc:10:24:a4:8e:7f:8c:55:1b:0a:a4:11:e8:3a:a0:
         e0:ee:9e:4a:00:a1:67:7b:7b:2a:1a:86:79:2e:a0:8a:36:18:
         8e:04:82:31:f5:1f:30:eb:1e:d1:33:3f:09:f1:72:13:f5:d9:
         41:42:9f:2f:29:97:d4:80:18:d3:e3:f8:fc:aa:3a:9b:60:2d:
         85:ed:a1:7a:4b:a7:6f:22:e3:d1:3b:3b:07:4e:63:a1:06:03:
         19:84:9a:0d:c4:10:ed:9d:99:22:53:ae:b1:82:8f:96:cc:ee:
         cb:f8:fa:4c:07:4b:ee:4e:aa:33:42:08:1d:1d:61:17:0c:2b:
         d9:aa:e7:00:df:56:22:b4:d7:a1:62:dd:a9:31:5f:29:f5:2b:
         d0:61:6b:ab:a6:64:cc:a6:41:39:04:f8:3b:62:37:52:90:bc:
         af:ae:ef:11:be:11:4c:d0:5e:c8:c2:f3:02:34:62:ac:2c:74:
         bf:d7:7a:e9:3c:a9:70:b7:4c:d2:6a:ed:40:2e:a4:06:07:f0:
         6b:f0:b5:38:36:71:bb:4a:46:cd:40:6a:8b:c7:04:a9:dc:ab:
         31:4f:97:e4:62:35:61:c2:9c:f9:79:1c:f6:38:da:51:33:f5:
         93:2f:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:28:58 2026 by rpki-client