This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File:                     QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier:          hkhCGtEGjWhNZYT+ukOQ9ZBLuIGyN3tdkVFbdjOQOGE=
Subject key identifier:   B5:06:E7:E3:26:CD:5C:3D:16:5E:D2:E2:07:FD:A8:62:05:EB:69:80
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer:       /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number:          022E
Signing time:             Sun 25 Jan 2026 01:17:54 +0000
Manifest this update:     Sun 25 Jan 2026 01:17:53 +0000
Manifest next update:     Sun 01 Feb 2026 01:17:53 +0000
Files and hashes:         1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: KxkSiEIHFxsfCn+mtiFPRiHM6D6P7ben2trH9EPHitY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
                          rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
        Validity
            Not Before: Jan 25 01:17:53 2026 GMT
            Not After : Feb  1 01:17:53 2026 GMT
        Subject: CN=69756f42-8019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:3c:3b:22:ea:42:2e:bb:6f:34:89:b0:bc:
                    e2:ee:5a:56:59:3d:79:64:b4:94:63:bc:9e:e9:2f:
                    f3:dc:26:ff:30:ab:d4:35:77:ba:dc:21:1c:3a:8c:
                    7b:91:6c:a7:e6:bf:fd:92:e8:8d:66:d0:63:1a:ed:
                    e5:2c:89:fd:3d:14:2b:dc:e8:90:88:01:b6:61:17:
                    69:2b:cd:a9:f7:ea:96:cd:98:f8:3f:ca:fe:e7:28:
                    cc:4a:83:d5:18:94:80:c9:d0:69:34:ee:66:58:89:
                    6f:88:63:e3:5a:c0:55:79:92:f4:ee:5c:04:1b:90:
                    a7:d7:33:4a:bb:44:ce:39:81:9c:19:d6:f3:20:f1:
                    74:ec:91:46:92:86:20:b7:bc:c7:47:bc:c8:09:4b:
                    a7:af:c9:e1:ec:e9:ef:54:12:5f:a3:a3:91:22:c4:
                    41:94:21:2f:fc:2f:85:a4:09:1f:db:4a:bd:7b:30:
                    fe:49:ef:18:77:41:f8:66:30:c8:c4:9d:95:fd:4a:
                    fe:97:28:76:9a:fd:df:96:e2:1c:45:33:c9:48:c7:
                    b9:bd:b7:d9:9e:f7:50:47:65:42:3f:4a:65:b5:67:
                    78:fc:f6:78:94:90:67:9f:09:25:39:34:9b:2d:73:
                    04:bc:78:5d:3c:92:1f:eb:b5:3a:b8:d9:27:73:bf:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:06:E7:E3:26:CD:5C:3D:16:5E:D2:E2:07:FD:A8:62:05:EB:69:80
            X509v3 Authority Key Identifier:
                keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:10:62:48:03:81:73:c5:84:b5:f3:fd:2a:1b:27:c8:80:
         f2:6e:dd:56:ed:07:29:bf:be:24:74:4a:bb:f1:90:b1:41:7b:
         82:67:d6:c2:4b:02:3f:6d:20:3b:dc:e9:52:cf:c2:58:51:9d:
         47:71:cc:33:63:59:f6:21:b1:bd:96:4a:e3:b3:d8:00:c5:f5:
         dc:8c:70:30:c4:42:3b:30:df:48:32:92:00:5c:f1:d9:d7:53:
         39:6c:ec:0e:55:d5:24:09:14:29:e2:99:e7:9f:0b:6b:04:05:
         40:a2:d7:f8:7c:a5:35:d7:66:99:c0:85:70:4a:56:37:c7:df:
         88:b0:7f:80:67:bb:f1:7d:17:32:1e:19:b8:6a:3e:6c:1c:07:
         f0:e2:bf:10:0a:aa:45:bf:ae:9b:d7:87:e6:3d:9b:e3:12:b8:
         b8:78:32:3a:b1:b2:8e:8f:e3:ff:b2:0f:e9:59:f8:03:50:bd:
         38:21:a4:ea:85:a7:c0:c9:1f:c6:24:0d:26:e0:75:f3:27:25:
         6d:89:43:7f:0b:4d:a1:06:ca:48:82:f3:a2:2b:1e:54:1f:2d:
         dd:2f:d6:ae:9b:5b:99:d7:09:02:ed:1a:ae:08:35:9a:ae:a1:
         1b:8e:19:dc:ca:fc:5f:47:cb:22:a3:4a:c5:5f:12:73:ba:db:
         1a:06:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:15 2026 by rpki-client