This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File:                     QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier:          caPrwttxO7M7w5QzmxLbneHZYTvKufcuSStKpmrzkwc=
Subject key identifier:   1D:3D:9C:A5:11:BC:EB:17:10:2B:F4:79:21:A2:D5:49:79:03:C8:4E
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer:       /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number:          7D
Signing time:             Sun 25 Jan 2026 05:53:14 +0000
Manifest this update:     Sun 25 Jan 2026 05:53:13 +0000
Manifest next update:     Sun 01 Feb 2026 05:53:13 +0000
Files and hashes:         1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: Xr7upy8/mVLmUs/1giBIchXwE7zwbxzEtJKK927Vd1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
        Validity
            Not Before: Jan 25 05:53:13 2026 GMT
            Not After : Feb  1 05:53:13 2026 GMT
        Subject: CN=6975afc9-c644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:1d:01:c3:ee:07:5f:cb:69:63:62:58:86:
                    62:8a:83:62:f1:e6:7a:b0:d6:6d:f5:7f:69:0b:1f:
                    c5:12:9b:07:cd:21:0e:62:32:4c:71:28:9d:e7:7a:
                    24:cf:c3:b6:df:7d:26:1b:b1:b8:b5:4e:0f:db:07:
                    27:09:27:91:3b:7a:81:ca:38:d5:cc:a2:c2:c3:25:
                    d4:b3:3a:6e:c6:e4:c9:a3:4f:0c:58:dd:29:fd:dc:
                    27:46:cc:8f:98:6b:66:99:74:50:bb:3b:b7:42:3e:
                    a9:42:78:8a:75:05:2d:22:f2:95:4e:29:cb:62:92:
                    36:73:46:88:f9:4b:89:2c:54:f7:4d:ad:fd:14:a3:
                    3d:e7:9f:47:56:83:07:d7:bd:5a:87:14:d5:19:63:
                    41:31:8e:df:09:57:37:5a:0d:74:91:e7:66:30:18:
                    e0:41:4d:12:7c:6c:00:d3:27:66:08:85:79:8f:3e:
                    35:04:46:e1:38:b1:5f:52:64:db:e1:42:a5:55:3b:
                    48:46:8d:be:76:f2:27:f9:27:10:f0:c1:ac:74:16:
                    1c:73:39:bb:80:0e:e1:0c:de:7d:dd:b4:88:18:01:
                    2d:b1:7e:a9:39:1f:f6:ed:3b:e2:ba:ba:87:1c:34:
                    bf:ad:b8:84:5c:b0:26:8d:b7:c3:fe:0c:65:ac:56:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3D:9C:A5:11:BC:EB:17:10:2B:F4:79:21:A2:D5:49:79:03:C8:4E
            X509v3 Authority Key Identifier:
                keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:d8:fd:7e:ad:e4:82:af:dc:b2:4d:c6:12:f9:72:0e:61:
         0c:09:c7:fb:10:bd:30:92:ac:7a:cd:8e:99:56:e0:43:ea:78:
         f3:b6:50:5f:fc:3e:03:27:f3:62:66:81:de:06:17:b3:58:ca:
         f0:a1:10:e9:fd:83:9a:60:61:ce:23:77:8c:d0:39:05:63:79:
         af:51:a3:40:99:5b:98:eb:05:0e:be:44:54:d6:07:a3:ad:b2:
         18:e2:6d:b9:4c:22:a8:9f:3f:1f:c2:4f:56:88:cb:9d:52:76:
         75:b9:d8:bd:1d:aa:ab:ff:84:37:be:ad:43:32:6e:30:f0:e3:
         a3:cd:02:0d:39:8d:1a:4d:b4:9f:24:c8:5d:33:89:8d:86:b8:
         04:af:19:17:ed:ee:35:3f:2b:8d:94:f0:62:10:e0:6c:a2:98:
         ae:9f:48:a0:16:f2:89:98:5b:0c:0b:2e:87:8c:39:82:d9:12:
         cf:6a:90:e3:61:18:b6:09:45:09:7f:f9:0e:0b:fe:5f:93:8f:
         43:f3:ff:37:ea:b2:e1:39:8b:ad:58:3b:85:35:85:f9:19:fd:
         3a:32:59:59:8a:40:a0:4a:68:71:01:77:51:c4:35:b7:e7:2c:
         cc:37:54:b7:c1:97:47:1a:e2:41:63:36:c3:23:74:9e:be:d5:
         ca:80:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:27 2026 by rpki-client