This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
File:                     qEiFS7_Ou01JgBuyrj2EQIscPSc.mft (raw, json)
Hash identifier:          0It4OTVwYw5b3bSVXeKbyHIYlSkXYguFaS1yvPFBt4g=
Subject key identifier:   54:ED:03:B6:D0:0B:3F:F2:31:CF:DB:3E:27:6E:FC:21:8B:CD:CE:88
Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
Certificate issuer:       /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
Manifest number:          3E
Signing time:             Fri 23 Jan 2026 06:28:28 +0000
Manifest this update:     Fri 23 Jan 2026 06:28:27 +0000
Manifest next update:     Fri 30 Jan 2026 06:28:27 +0000
Files and hashes:         1: qEiFS7_Ou01JgBuyrj2EQIscPSc.crl (hash: mEPnK9weiiC91lCoiVbKAj5qpkFwiBEAOpWQ22sWdE4=)
                          2: ABD937089D6511F0A6A3E74BC4F9AE02.roa (hash: Jkbb7HkAq8iDWnzG+rvThhFx1fDkJFLk00mNMZ+k2pU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
                          rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
        Validity
            Not Before: Jan 23 06:28:27 2026 GMT
            Not After : Jan 30 06:28:27 2026 GMT
        Subject: CN=6973150b-a120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:5c:3d:de:31:61:46:c4:c7:a1:3b:f4:be:
                    5e:e7:54:a8:67:0a:33:1f:78:61:f5:46:50:10:2c:
                    f1:ed:e5:c3:00:ff:33:63:4d:4c:43:52:d2:7b:d2:
                    15:55:09:40:ac:75:a6:89:71:79:0e:0f:c1:b1:e9:
                    ca:ae:21:ec:59:dc:4a:09:c1:7f:d4:38:71:2a:0e:
                    e9:8c:76:1a:2d:8c:8b:af:26:7e:f9:f9:97:e7:76:
                    b8:63:41:73:b1:8c:1e:24:e6:a3:a1:fd:f4:17:c9:
                    ca:66:ff:b1:34:63:96:cc:13:06:e7:b7:a8:ab:89:
                    b3:c0:a1:29:22:4c:cc:a1:58:76:cf:84:fb:47:6d:
                    97:8c:3a:e8:8b:d8:35:18:ca:e8:d6:62:01:bf:71:
                    c0:d8:64:27:44:4c:36:d5:3c:e5:3a:d7:c1:f6:89:
                    7d:03:f8:01:1e:37:fa:e7:b0:4a:72:66:d8:3f:5c:
                    0d:ca:77:41:b4:27:44:84:0a:8a:12:8d:c9:23:58:
                    e5:09:4f:10:02:97:67:bd:43:9d:7f:73:64:e2:58:
                    2a:8e:d6:88:29:44:dc:09:af:7d:48:fa:e5:b3:03:
                    32:3c:0c:87:0a:d2:02:37:c5:d0:aa:65:7c:6c:ce:
                    8a:6a:69:bb:2b:df:c3:56:4c:04:78:b7:48:6b:ce:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:03:B6:D0:0B:3F:F2:31:CF:DB:3E:27:6E:FC:21:8B:CD:CE:88
            X509v3 Authority Key Identifier:
                keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:27:22:e1:0e:33:64:ce:26:cd:46:46:b4:8e:09:7d:7a:fc:
         46:20:45:68:f3:f8:cd:7c:10:36:ff:69:07:38:0b:2a:8a:3e:
         a2:60:f2:47:7b:19:43:b0:e2:9f:a4:1e:c9:aa:61:3f:da:c1:
         0a:f4:64:60:8b:67:fd:e2:f6:14:b4:de:da:e5:80:42:4f:83:
         cd:78:60:ca:71:63:28:18:55:b2:f2:cc:22:5b:29:33:ab:58:
         f6:b3:38:14:fd:49:c7:88:55:d4:23:5f:2a:73:3e:b6:85:27:
         03:8b:97:36:45:6a:63:92:2f:5a:54:de:63:04:4a:a0:0a:6a:
         b6:ee:3e:41:6b:4f:14:d7:1e:91:36:b5:44:d0:84:e4:3d:28:
         c4:45:6d:71:65:f7:28:2c:ff:1c:cb:2f:c0:bc:46:e0:e4:8c:
         0e:01:6e:ca:3f:22:4f:cf:cc:58:e1:51:8c:74:c7:7f:da:0d:
         52:69:49:e0:46:64:8e:9f:7b:32:7b:5f:8e:7f:f6:ff:c0:ad:
         a1:c5:7d:0e:5f:8c:7c:40:a7:e4:07:e3:cb:87:07:6c:fc:35:
         b1:b7:8e:a2:dc:31:63:28:56:9e:df:86:23:31:89:26:f0:35:
         50:b2:ce:46:78:d5:9d:fd:0a:2b:2a:86:01:d4:e2:a8:dd:4a:
         e5:df:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:30 2026 by rpki-client