This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          k80vIkQEC4Ged1gJ1rVWYWMk9lrRRWEynFM/fpYoV5g=
Subject key identifier:   99:A3:93:95:D1:38:5D:A3:5D:BA:08:58:DF:47:10:76:71:DF:84:71
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0D4C
Signing time:             Sat 24 Jan 2026 20:35:46 +0000
Manifest this update:     Sat 24 Jan 2026 20:35:45 +0000
Manifest next update:     Sat 31 Jan 2026 20:35:45 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: eg+YPr9hv0+4IQVfjRjS59QAEd5i+AJ9cKut0zqxNqk=)
                          2: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: DQKnkPiyi5yFhInT8cazQ0WWqMZZ/NRSyMH4kCN4yVg=)
                          3: A291634816B711ECBD752D47C4F9AE02.roa (hash: V08dtQEG7kMtP+yJo1aJfEkwIclQOyk17r+rjbxf9Vo=)
                          4: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: OzR5m76bC5p8Qn4iW9ZQqG9vOQByfBzOqdZe3AXXfw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jan 24 20:35:45 2026 GMT
            Not After : Jan 31 20:35:45 2026 GMT
        Subject: CN=69752d22-33b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:2d:53:3e:01:37:0e:2d:ef:00:c3:7e:f8:
                    39:7e:bc:57:6a:b1:24:4d:0c:75:67:d3:28:b5:cf:
                    58:c1:cb:60:41:3f:aa:b0:e5:b4:cb:4a:17:a0:a5:
                    9c:84:62:fa:b6:52:da:8a:e4:96:ec:f0:b5:63:bd:
                    37:98:ef:75:75:6f:d0:75:60:6b:fa:d4:2e:f8:8c:
                    37:89:d0:5f:8d:04:48:13:60:45:9c:24:67:39:19:
                    b0:fb:81:f2:dc:b7:42:4d:88:aa:77:de:72:e1:17:
                    24:be:b0:79:e2:67:15:f0:3a:24:bd:f3:3c:7a:35:
                    d0:3c:47:0a:19:84:4e:ed:b2:fb:1f:f4:01:79:58:
                    66:40:9f:7c:66:42:7c:24:1b:37:ee:5a:4e:9f:ab:
                    8b:03:09:f1:31:08:ad:90:3c:ab:b9:c0:70:91:a7:
                    a1:63:6f:30:6d:aa:87:b6:94:8c:57:79:cb:ab:f4:
                    db:8d:29:11:14:b8:c3:9d:49:94:f0:c8:21:c8:c9:
                    7f:ad:16:73:05:c9:7f:97:a4:2d:7f:ae:a3:5f:be:
                    5a:97:c3:36:70:b4:a5:86:f0:15:07:f7:26:ad:44:
                    fa:92:5c:3f:7d:5e:ac:89:e0:3f:e2:72:62:b7:55:
                    6d:41:d2:ed:e3:18:3f:3e:5d:80:68:cf:1c:10:e6:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A3:93:95:D1:38:5D:A3:5D:BA:08:58:DF:47:10:76:71:DF:84:71
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:25:dc:15:0f:d9:3b:c6:eb:d7:2c:eb:92:75:0a:a2:77:9b:
         c0:7d:1c:84:9e:45:87:ac:47:5e:23:94:34:56:75:ac:cc:f5:
         af:57:48:03:69:e4:3b:09:65:51:aa:26:86:78:9e:60:7f:76:
         86:c6:7d:4f:8a:1f:98:67:1c:f7:ef:b2:f6:54:60:4c:c0:a1:
         ed:ae:03:4c:22:0b:dd:3a:fc:9a:21:3c:da:cb:d4:76:e0:a5:
         4d:df:f1:6e:a9:d8:f9:e4:6c:3a:71:fa:ff:6d:a2:12:7a:df:
         96:aa:f7:91:d9:31:e3:04:ea:4c:78:73:31:4c:7f:3a:3b:2b:
         b1:31:72:7a:b9:02:9f:87:5e:91:54:eb:b4:8e:d4:7b:d2:b5:
         90:85:4d:02:8f:62:e2:65:7d:44:8a:73:3d:ac:54:1c:ec:77:
         3e:f1:34:cc:8d:69:36:f4:ef:25:68:ae:4a:7b:c9:8e:e1:dd:
         97:00:50:20:fd:4b:90:6d:a3:64:6f:16:77:fc:bd:67:86:33:
         67:05:37:ba:17:33:44:c4:e3:3b:18:b3:9f:b1:d6:e1:11:d0:
         81:54:28:b7:c6:e1:90:06:1d:6b:85:7d:ad:e2:77:b7:bf:2f:
         f7:95:3a:09:95:46:18:35:33:bd:e9:98:6e:ee:26:cb:bf:0d:
         1f:26:6c:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz
RkU4NTU1RjcwHhcNMjYwMTI0MjAzNTQ1WhcNMjYwMTMxMjAzNTQ1WjAYMRYwFAYD
VQQDDA02OTc1MmQyMi0zM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3U4tUz4BNw4t7wDDfvg5frxXarEkTQx1Z9Motc9YwctgQT+qsOW0y0oXoKWc
hGL6tlLaiuSW7PC1Y703mO91dW/QdWBr+tQu+Iw3idBfjQRIE2BFnCRnORmw+4Hy
3LdCTYiqd95y4RckvrB54mcV8DokvfM8ejXQPEcKGYRO7bL7H/QBeVhmQJ98ZkJ8
JBs37lpOn6uLAwnxMQitkDyrucBwkaehY28wbaqHtpSMV3nLq/TbjSkRFLjDnUmU
8MghyMl/rRZzBcl/l6Qtf66jX75al8M2cLSlhvAVB/cmrUT6klw/fV6sieA/4nJi
t1VtQdLt4xg/Pl2AaM8cEOYLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmjk5XR
OF2jXboIWN9HEHZx34RxMB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD
QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgt
MTdGenQ0RGdGLTBfNkZWZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9JdwVD9k7xuvXLOuSdQqid5vAfRyEnkWHrEdeI5Q0VnWszPWvV0gD
aeQ7CWVRqiaGeJ5gf3aGxn1Pih+YZxz377L2VGBMwKHtrgNMIgvdOvyaITzay9R2
4KVN3/Fuqdj55Gw6cfr/baISet+WqveR2THjBOpMeHMxTH86OyuxMXJ6uQKfh16R
VOu0jtR70rWQhU0Cj2LiZX1EinM9rFQc7Hc+8TTMjWk29O8laK5Ke8mO4d2XAFAg
/UuQbaNkbxZ3/L1nhjNnBTe6FzNExOM7GLOfsdbhEdCBVCi3xuGQBh1rhX2t4ne3
vy/3lToJlUYYNTO96Zhu7ibLvw0fJmws
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:45 2026 by rpki-client