This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          teA09EMGR1Hge2Xh4rygJga9v2X7733X9iUmrudUVX4=
Subject key identifier:   17:EF:A1:33:80:89:BB:EE:C7:08:47:D7:49:FD:46:6D:92:54:2C:5F
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       043D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          0435
Signing time:             Sat 24 Jan 2026 23:29:05 +0000
Manifest this update:     Sat 24 Jan 2026 23:29:05 +0000
Manifest next update:     Sat 31 Jan 2026 23:29:05 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: SBaqPf0NxfYO2zcf3l3ts9rX1ly8xQ2IAi4CqzM0B/s=)
                          2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=)
                          3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Jan 24 23:29:05 2026 GMT
            Not After : Jan 31 23:29:05 2026 GMT
        Subject: CN=697555c1-2953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:0a:ab:b9:0b:b7:a9:1d:90:cc:6d:7d:5d:
                    d1:9c:d0:60:ea:ec:d5:32:b1:e0:fd:72:69:76:b1:
                    a1:47:41:16:0a:4c:41:46:60:8e:17:5e:5b:85:e9:
                    85:7a:fd:32:67:f5:06:66:55:1f:06:98:4e:b9:2c:
                    9f:57:0d:56:a4:d5:ce:f3:ee:c5:18:6c:a4:c9:fc:
                    ad:34:8a:d9:02:c2:f1:d8:12:72:ac:80:d9:91:5c:
                    be:48:79:37:62:16:bf:26:f6:34:dd:16:7f:c9:95:
                    9f:17:bc:39:41:f6:99:25:6d:71:c6:bc:b0:d4:42:
                    fd:f8:96:df:df:12:7c:b2:8a:c5:0d:99:aa:e3:f6:
                    a7:80:4d:ff:37:2a:c7:28:63:ba:9e:80:9c:0d:d5:
                    76:ac:be:d4:c0:2b:97:ed:e6:6b:6b:a6:c3:32:ea:
                    65:00:a6:f3:bd:11:0f:fa:e6:fb:60:a9:a3:ce:95:
                    61:78:7c:1b:a3:02:76:20:33:11:f4:38:77:d0:a8:
                    f4:f4:11:da:21:96:1f:46:05:72:1f:32:b6:8d:a4:
                    70:61:15:fc:b3:c8:b5:74:80:47:a2:d9:1b:b5:8e:
                    9e:74:a4:e1:92:79:54:98:0b:54:f0:52:eb:88:77:
                    67:63:e4:ff:d7:de:db:c6:03:76:4f:73:f0:ab:d5:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EF:A1:33:80:89:BB:EE:C7:08:47:D7:49:FD:46:6D:92:54:2C:5F
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:54:20:02:da:bb:cc:96:b4:93:34:4e:7d:cf:2b:e7:15:8d:
         41:31:e7:cf:51:7a:b9:72:80:cf:c4:ed:0f:7d:25:98:2b:b1:
         ff:ed:96:d7:11:4c:39:ec:c0:1b:44:5e:78:61:8c:85:ef:ea:
         1c:d8:ee:7a:da:02:81:9f:39:91:1c:b0:35:15:13:23:aa:3d:
         22:01:37:53:bf:5f:57:c3:33:b0:46:e1:f6:15:d0:d4:a4:59:
         da:69:ef:b0:15:f3:71:cd:d1:ed:2e:3d:fc:81:a4:19:12:e1:
         b6:e7:ff:2d:0e:fa:8c:1f:c6:8d:a2:04:91:34:70:ee:10:17:
         8d:3c:21:b1:22:71:61:6b:89:93:66:03:9b:ad:08:90:6c:a3:
         97:a9:af:43:26:0c:b5:ca:59:06:43:ab:f3:49:ab:7e:57:2f:
         ea:b5:b9:30:ce:51:c6:24:d6:0d:eb:3d:f6:68:93:db:dc:86:
         1b:f6:c1:f8:fe:d9:61:7e:bc:87:97:a2:fc:8e:d1:3e:f3:8b:
         ed:46:5c:9c:1a:e7:27:87:5f:67:47:82:9b:5b:98:20:4e:c4:
         3a:b1:d3:53:d4:40:92:45:71:71:26:26:df:07:3b:f4:d3:37:
         cf:73:3c:d5:42:14:85:19:dc:ec:35:ac:9c:88:4d:08:f2:e8:
         0b:9e:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:06 2026 by rpki-client