This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
File:                     qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json)
Hash identifier:          QrY80a+yPMfuIwv7puiIwH8R4AZUihWVoTI5mQo3944=
Subject key identifier:   F6:CB:14:AA:13:FC:33:01:66:DF:C5:5C:90:6B:84:56:6E:89:E0:40
Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
Certificate issuer:       /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Certificate serial:       0AB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
Manifest number:          0AA9
Signing time:             Sat 24 Jan 2026 19:00:10 +0000
Manifest this update:     Sat 24 Jan 2026 19:00:09 +0000
Manifest next update:     Sat 31 Jan 2026 19:00:09 +0000
Files and hashes:         1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: AXW+23Uce2RiNYljTyFbtjPc0YGn2Zq9DMfp5P2WRE8=)
                          2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: 6Cva/MAM9NxBoaAYG/HBqjbHLWksXNLd6d8hzeYffrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736 (0xab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
        Validity
            Not Before: Jan 24 19:00:09 2026 GMT
            Not After : Jan 31 19:00:09 2026 GMT
        Subject: CN=697516ba-5693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:a7:a7:43:ba:11:77:fa:18:d5:ee:d6:12:
                    91:50:63:66:d1:60:44:c3:9a:14:88:7a:68:e7:fd:
                    55:41:b6:18:6e:94:e7:7b:2b:e1:65:43:20:bf:b2:
                    d4:c3:95:2f:94:58:11:1b:3f:37:d3:10:3a:bf:cc:
                    7c:55:e6:c1:19:5b:bb:f4:68:4f:c8:d4:ee:4d:c0:
                    de:50:a6:71:3e:fc:5e:ef:2a:ad:20:7e:2d:61:29:
                    c9:4b:5a:2e:1d:15:de:ee:bc:df:db:47:8d:6e:1a:
                    5d:ff:2b:44:b0:27:4e:45:ed:f8:c4:b8:49:e5:f4:
                    b7:6f:ee:10:bd:2f:1c:5a:5a:21:e6:c9:31:d1:1d:
                    7f:7b:44:6d:82:50:77:0c:39:0b:31:55:67:10:80:
                    ea:58:79:44:f2:27:3b:3d:36:12:0b:9e:d9:ed:e2:
                    63:6f:3c:cf:05:07:75:85:19:19:3e:21:b0:c9:5c:
                    dd:83:20:1c:26:d5:46:82:44:07:30:cf:c7:56:9f:
                    e3:79:db:5c:b4:78:07:e5:ca:5f:0c:c3:76:80:da:
                    7e:90:9d:23:78:06:2a:ce:ea:91:0f:e5:1c:3b:b1:
                    2c:ba:b5:70:52:4f:5a:b2:71:f2:ed:60:86:e4:54:
                    44:b9:0f:d6:61:d1:b7:1e:37:a8:36:a2:b2:3e:11:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:14:AA:13:FC:33:01:66:DF:C5:5C:90:6B:84:56:6E:89:E0:40
            X509v3 Authority Key Identifier:
                keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a6:ee:b5:bc:99:a1:4d:a3:fc:e3:43:be:40:55:94:02:6e:
         ff:c1:ef:05:db:33:80:f0:b6:46:67:49:b9:74:68:de:60:36:
         70:0f:7f:14:14:55:e5:38:f1:57:8f:a5:1a:8f:4a:f1:16:b0:
         38:d6:d7:52:1c:23:f7:7d:87:5d:ca:2d:d7:de:ae:b1:20:a1:
         41:7d:c9:fb:90:70:e8:9a:ef:45:b6:bb:08:1d:8a:d4:a7:84:
         b3:a9:84:99:6c:72:0b:0d:dd:bc:6d:f6:5e:4b:d1:39:cc:78:
         2d:aa:0b:b9:c5:98:63:79:fc:a1:e9:db:e6:2c:b5:45:33:bd:
         73:0c:96:88:6b:e0:fa:f8:e9:e5:2f:90:71:3d:6f:c4:e6:f8:
         96:aa:44:5b:f4:52:4f:68:19:6d:c3:19:88:26:16:86:0b:97:
         09:ad:16:e1:9f:1a:b4:ea:82:fa:56:fc:10:d1:62:bc:ba:c3:
         af:ee:85:05:68:b6:d0:15:7d:99:de:2a:ca:2e:31:74:ce:76:
         d0:8f:9d:63:dc:83:8c:ed:be:15:3d:9e:9d:6b:66:e1:f5:1f:
         50:de:a8:b9:7e:3d:2d:6d:5b:f7:1d:16:99:19:60:49:c6:e5:
         bf:28:ca:a5:0c:0f:f7:cb:95:09:00:f9:11:43:64:73:43:67:
         4c:25:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:35:03 2026 by rpki-client