This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
File:                     qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json)
Hash identifier:          hY+VtbOVYwk3WPqnSmh5HTySGqfFp0BFAY7f7l08WB8=
Subject key identifier:   38:64:62:DC:D7:E1:BC:73:8B:FE:22:6B:E0:46:3E:58:A7:28:DC:C9
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Certificate issuer:       /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial:       0BF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
Manifest number:          0BD4
Signing time:             Sat 24 Jan 2026 18:30:16 +0000
Manifest this update:     Sat 24 Jan 2026 18:30:16 +0000
Manifest next update:     Sat 31 Jan 2026 18:30:16 +0000
Files and hashes:         1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: 00sqzqVk7GDoZ1DgWBoRPEGhd5/Ctwgw6lSeAbmzg3Y=)
                          2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3059 (0xbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586
        Validity
            Not Before: Jan 24 18:30:16 2026 GMT
            Not After : Jan 31 18:30:16 2026 GMT
        Subject: CN=69750fb8-cd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:e5:5f:a2:2b:46:fe:b3:ee:52:8b:40:26:
                    70:3f:1c:77:65:5f:b1:68:41:97:19:da:b6:f7:88:
                    a4:f7:f3:73:6d:4c:fc:57:ca:00:fb:f5:21:7d:20:
                    e0:ef:ab:3c:cb:1a:d0:66:2e:57:ed:a8:43:e1:4a:
                    04:30:e9:7e:69:e2:d5:26:89:b4:d8:09:90:d0:13:
                    d9:79:17:79:e3:c2:98:9f:71:4a:bf:c9:d5:31:9b:
                    02:6b:54:ab:66:d5:a1:6b:8e:3c:44:55:5a:40:2d:
                    28:95:fa:e3:eb:0b:c1:3d:77:c6:43:0d:25:f5:9b:
                    e4:10:45:0f:a1:f8:25:66:5d:76:35:b7:48:52:db:
                    59:49:dc:73:df:e9:33:39:47:35:93:76:70:8e:eb:
                    05:d0:ae:cf:7a:65:c7:75:e9:80:61:d5:0a:27:8a:
                    66:26:29:e0:17:52:d2:94:c9:d4:07:65:69:15:33:
                    74:d6:29:9a:69:d9:91:d1:d1:d9:9e:6f:28:38:cf:
                    4b:20:20:be:5b:80:54:bd:6b:91:b0:c7:6c:2e:fe:
                    7e:63:07:84:19:b7:6f:5f:9d:f4:1f:d4:99:a6:6d:
                    a3:88:a4:a2:f1:74:c6:a1:0b:27:93:77:cb:42:7c:
                    10:c2:ef:c8:8c:83:18:af:d7:c8:30:49:dd:92:3d:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:62:DC:D7:E1:BC:73:8B:FE:22:6B:E0:46:3E:58:A7:28:DC:C9
            X509v3 Authority Key Identifier:
                keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:30:50:8f:28:55:c8:91:e2:74:c0:f5:29:05:e2:53:b5:
         d2:ff:46:91:54:b7:f9:7f:28:54:30:f3:a7:b7:3a:d4:9e:c7:
         ce:fe:ba:e6:05:5a:cf:36:75:38:83:13:ef:b7:a4:9d:48:76:
         f3:76:e5:67:93:37:e0:5b:33:cd:69:9e:97:ac:54:ce:c0:4e:
         6b:33:20:a1:4e:cd:bb:01:23:79:60:85:ba:9e:dd:f3:7b:b4:
         dd:ab:2d:b3:d8:0c:c0:02:89:af:bf:1c:64:d5:6d:0f:77:1f:
         9f:33:60:a9:29:da:3d:82:6e:c9:d9:ae:d6:73:0a:e8:c1:21:
         84:e4:58:ab:9a:31:85:49:4b:69:ea:6a:f5:05:b3:e9:f8:85:
         3f:8c:7c:4f:1f:3b:45:a7:db:17:2e:1c:ca:23:39:eb:24:fa:
         f1:3d:2b:d7:a2:6e:e5:88:d9:ac:31:47:d7:8f:7e:6c:52:e5:
         87:b9:2e:93:1a:86:fd:98:46:33:2a:46:80:15:26:36:b1:13:
         df:64:e7:54:2b:61:37:df:9f:9c:c1:21:c5:8a:4e:5e:5f:4e:
         42:3c:79:90:28:09:cf:5e:aa:57:d2:c2:75:ad:d9:3e:78:d1:
         a5:fa:09:bf:80:89:7f:37:03:93:48:b5:98:cd:b4:d0:88:fa:
         6e:ff:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:13 2026 by rpki-client