This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File:                     QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier:          EDgQeggzMsOZ3MYEC0vDGzoho5lMQ4ddH5urCGVPykI=
Subject key identifier:   EC:86:7E:7C:D5:E5:15:A0:FF:9B:86:F7:87:01:8A:1D:B7:42:CC:74
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer:       /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial:       0446
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number:          043B
Signing time:             Sat 24 Jan 2026 23:30:14 +0000
Manifest this update:     Sat 24 Jan 2026 23:30:13 +0000
Manifest next update:     Sat 31 Jan 2026 23:30:13 +0000
Files and hashes:         1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: jXwxOXj/ER6ss8DQTYH2xI7WiXVGn+CQZlVVDKA2bF4=)
                          2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
                          rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
        Validity
            Not Before: Jan 24 23:30:13 2026 GMT
            Not After : Jan 31 23:30:13 2026 GMT
        Subject: CN=69755606-9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:ab:54:6c:1e:e5:41:92:9c:c0:3a:24:36:
                    06:b8:08:85:ca:ab:53:94:e8:4f:75:2b:64:e6:42:
                    d9:c3:c1:47:5d:75:b3:1f:f9:59:21:26:df:c3:8b:
                    68:17:ab:81:8e:9b:c1:76:0c:32:a0:24:77:f0:67:
                    13:65:cc:a4:17:3d:5f:9e:b3:9d:ee:04:79:49:03:
                    07:ad:fb:aa:2c:54:f0:81:b1:f8:ee:45:33:6d:81:
                    f4:33:93:55:69:c6:9c:60:f1:aa:c0:26:b8:37:6f:
                    41:bf:fd:ab:75:72:8e:43:e5:7d:f1:08:18:8a:ce:
                    cf:de:c5:96:aa:fa:ad:af:68:bb:27:cd:a0:d7:5d:
                    95:a0:59:dd:d4:88:fb:cc:e7:b5:cc:2e:7d:e3:f8:
                    2f:58:f2:e9:19:6c:a4:36:12:bd:ab:61:50:80:ae:
                    34:1f:d2:24:2e:00:24:38:d9:84:35:fc:50:92:29:
                    41:2d:9b:81:10:29:29:88:69:d5:16:b4:dc:4e:ce:
                    b9:c5:06:ce:cb:80:14:2f:63:2f:88:70:63:cd:72:
                    05:ff:aa:70:3b:6a:0b:85:b9:47:d2:2a:d4:4a:48:
                    42:9b:06:cb:fd:06:98:93:1c:fb:89:c7:59:2c:fd:
                    b5:59:14:59:d9:e8:07:69:ff:15:20:30:e1:60:29:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:7E:7C:D5:E5:15:A0:FF:9B:86:F7:87:01:8A:1D:B7:42:CC:74
            X509v3 Authority Key Identifier:
                keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:66:7b:02:1f:fb:d9:8b:14:6d:4d:b3:8b:8d:30:8b:f8:
         f6:a5:a2:bb:f1:68:58:7f:ec:96:a3:ad:71:08:7a:bb:e1:6b:
         4e:84:76:3d:9f:96:5d:94:8d:27:1d:7f:bd:66:2a:0e:52:8f:
         30:cc:5f:d9:be:20:f1:e3:78:88:35:35:78:93:cc:f3:2d:97:
         21:4d:b2:8a:ff:55:18:38:ae:62:a2:ef:a9:c2:20:13:dd:89:
         f9:6b:05:60:8a:79:7b:87:b6:bb:24:8e:0f:95:40:1e:c9:eb:
         7d:55:c9:96:ab:0a:ab:99:91:d1:98:3b:ee:1f:30:ee:4a:14:
         69:33:d6:b2:fb:5d:e2:f7:ef:89:3f:d0:fd:ab:97:82:5e:92:
         20:2e:b3:17:97:b5:63:02:76:5e:c2:20:c4:f5:59:02:bb:78:
         78:84:3b:14:51:9d:b6:85:a0:65:0d:31:04:df:32:85:e7:98:
         33:09:a0:7a:70:59:95:72:fc:e5:35:09:69:fd:f3:e8:b8:73:
         5e:a9:7c:7b:de:bc:67:c4:26:df:8b:39:6a:d6:e2:ae:e9:ef:
         22:32:7d:02:3f:42:32:a6:35:cb:14:01:30:8b:4c:7f:3a:15:
         f0:10:64:ad:98:84:e0:b1:f4:2e:30:ea:c9:30:3f:ae:a1:2f:
         8e:bb:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:09:21 2026 by rpki-client