This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
File:                     qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json)
Hash identifier:          Do2Dw6AYOZhfJSX90B+uUmIp+xSt0mhGSoYKRDH5wzs=
Subject key identifier:   BD:0B:8D:B3:1E:CE:40:CF:5D:90:CB:FF:E1:0E:22:F9:78:F3:24:28
Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B
Certificate issuer:       /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
Certificate serial:       06C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
Manifest number:          06BF
Signing time:             Sat 24 Jan 2026 21:31:52 +0000
Manifest this update:     Sat 24 Jan 2026 21:31:51 +0000
Manifest next update:     Sat 31 Jan 2026 21:31:51 +0000
Files and hashes:         1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: +rssafyAAVG/5sd5y8AsU/sDwvEI107p80/iWtkupuY=)
                          2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: Tp6yV6aNCHUMLxFxEsezUBZI5iOsrCF8OtHjSK1vpw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl
                          rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
        Validity
            Not Before: Jan 24 21:31:51 2026 GMT
            Not After : Jan 31 21:31:51 2026 GMT
        Subject: CN=69753a48-9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:b2:6b:4d:d2:2b:55:ae:aa:22:e2:b1:c1:
                    7b:71:bb:ee:26:db:a0:9b:09:54:b3:68:f8:7a:12:
                    f8:e1:04:ec:20:40:d7:68:ff:8b:02:16:9e:7e:17:
                    81:bd:86:ac:8c:05:2a:cf:88:1a:a4:20:0b:23:3b:
                    89:1f:92:0b:df:9a:c5:81:93:e6:5c:85:b3:65:d3:
                    8c:44:be:9b:e2:89:dc:5c:13:27:cc:9d:24:1c:f7:
                    b1:9d:b6:44:bf:36:35:d9:4c:17:7c:c8:0f:08:09:
                    8d:55:e1:21:dc:13:04:5c:0e:bf:eb:0e:c2:1d:60:
                    fb:65:66:a5:b4:ff:3e:1b:3d:32:9e:d4:03:b7:00:
                    78:9a:2b:88:a5:a5:aa:47:91:63:fc:99:b3:e5:5e:
                    01:3e:6a:73:0c:91:f7:b4:d3:42:71:ca:b8:91:39:
                    b2:8a:de:51:c2:77:00:77:74:22:de:2a:45:0e:e9:
                    17:24:2e:77:b9:eb:b8:04:e4:6a:51:33:07:6e:eb:
                    b4:c6:f4:2b:cb:b8:41:0f:89:66:aa:94:db:dd:a5:
                    7d:0f:ae:b4:98:ba:a6:21:a5:a6:12:06:ff:b6:6c:
                    24:74:49:af:59:03:59:d3:b3:dd:b5:19:5c:f1:9e:
                    c9:03:b4:67:fd:a3:2d:96:49:c1:41:cc:5d:30:f2:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0B:8D:B3:1E:CE:40:CF:5D:90:CB:FF:E1:0E:22:F9:78:F3:24:28
            X509v3 Authority Key Identifier:
                keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:26:a0:bf:07:66:ed:f8:53:7b:1f:78:e4:32:ef:0d:d3:
         c4:d4:d7:34:d7:16:dc:4c:2c:27:fa:49:f4:a2:0e:8a:a2:b6:
         95:fa:4a:f5:cd:b8:2e:eb:81:e9:66:43:43:51:86:b0:7b:a4:
         06:49:a2:4b:8d:07:2e:47:92:81:fd:c9:9c:d4:e8:ca:57:a4:
         0f:54:23:04:9c:21:a6:7f:e1:ac:99:85:20:65:9c:ad:40:5a:
         a7:21:9f:58:a2:f1:d5:6d:f5:69:01:6c:13:1e:0b:2d:14:7b:
         6d:29:5a:84:94:6e:43:a4:03:f4:15:26:e2:d2:3f:95:fd:b3:
         75:87:e0:0e:86:a4:6a:99:04:7f:ac:17:d4:6f:47:56:06:b3:
         e2:2c:08:0f:69:16:cf:29:08:91:af:db:3a:1e:10:c5:13:20:
         eb:ce:ee:c0:5e:f2:1c:16:fe:f2:6e:52:7a:d1:ea:81:e3:df:
         4f:09:1b:86:aa:a2:21:59:86:fd:a7:18:ce:34:f6:40:3d:2b:
         34:93:b0:67:7d:8c:92:7f:be:5a:15:01:b7:c3:68:1f:7c:e6:
         23:7f:2b:93:ee:86:53:ae:15:b9:40:12:6e:fc:0d:f2:5a:8c:
         2f:b4:a9:be:4b:f5:fd:7f:cd:9f:c0:f3:5c:2c:8b:e8:16:1c:
         9f:4c:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:12 2026 by rpki-client