This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
File:                     cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json)
Hash identifier:          lAEGsJYA3oiIq5CN2NdJTH/l6qrZG10vn0eGAzlAgnQ=
Subject key identifier:   4F:3B:FB:B9:C5:06:78:4F:34:31:49:4C:9A:58:B9:46:4D:ED:00:DA
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Certificate issuer:       /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial:       2228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
Manifest number:          21ED
Signing time:             Sat 24 Jan 2026 15:44:09 +0000
Manifest this update:     Sat 24 Jan 2026 15:44:08 +0000
Manifest next update:     Sat 31 Jan 2026 15:44:08 +0000
Files and hashes:         1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: 91On7efQjKcERKbd5+GluEpw6/nQaA8s+6t//cO2Kmk=)
                          2: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: cgIrr8o9jTXMbYMAZf1J8wAI/DfnpUQHzKHIr7ZgI6c=)
                          3: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: dz1GvojNAIHZyqW3h8Y6bP+YBH4Rk6bXASQ1x7rYr58=)
                          4: 1C628A90671411EEA0040661C4F9AE02.roa (hash: CTvIhXrCtBos/LVoBMmH2P68ViNfFaDxoAYBDmOA96g=)
                          5: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: PC1UpxkrsO/0WXvqCVPit0ma41SpwfY7b5bjQTzVpWQ=)
                          6: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: FmtBKEomkwEsg09oOugyzChandkcrHCKNwzoO1agNsg=)
                          7: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: V6pTdi9Go4VZBEN3XXIn2lnRjqLUf2zngAhmgO8tgA0=)
                          8: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: lgOGf6vXQs55zxCogd+pRQs87jNu5Yd5pLF5QPR8QMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8744 (0x2228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
        Validity
            Not Before: Jan 24 15:44:08 2026 GMT
            Not After : Jan 31 15:44:08 2026 GMT
        Subject: CN=6974e8c9-7783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:c5:f1:10:c8:62:d2:ae:de:1d:0f:ba:01:
                    0c:49:33:9e:2c:c8:6c:e9:15:fa:18:19:63:20:1e:
                    91:7b:31:fc:af:b3:28:9a:69:56:bd:d3:cf:90:fc:
                    16:ce:9b:fd:fc:87:77:b7:0e:ea:48:8a:f9:4f:95:
                    8d:68:8d:22:35:b1:2d:5d:41:2f:d0:e1:ff:1b:62:
                    97:31:6f:0e:f0:04:23:a7:5a:2f:ec:5f:b1:9c:73:
                    a5:cf:46:c0:eb:61:50:21:d1:09:8b:7f:a7:d0:25:
                    28:e8:7d:f7:14:d2:1b:d8:65:d8:7b:ef:78:64:75:
                    e4:62:35:11:a5:07:c7:19:31:0c:1e:af:7e:db:8f:
                    f4:09:00:98:54:1d:7c:a1:43:d4:12:4d:9f:df:48:
                    6b:ba:57:05:3d:d6:68:29:58:9f:5a:98:36:47:b8:
                    b9:63:ee:88:11:ec:07:d6:ac:75:ea:6d:37:9f:d3:
                    90:95:9a:9b:cc:23:75:ef:98:3e:b8:2f:31:f0:59:
                    44:e4:2e:75:cb:5a:3f:5b:d1:65:a9:fe:cc:13:7b:
                    92:fb:20:58:0e:b8:11:12:ed:ab:36:89:d5:e8:da:
                    d7:94:1a:9d:2e:04:e0:db:5b:fe:b9:e2:a0:47:dc:
                    75:17:4b:44:86:c6:58:ce:fc:75:2b:a8:eb:76:0b:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3B:FB:B9:C5:06:78:4F:34:31:49:4C:9A:58:B9:46:4D:ED:00:DA
            X509v3 Authority Key Identifier:
                keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:38:c0:07:e1:2c:40:2d:d7:12:89:c2:90:4d:7f:e8:fa:
         14:2b:08:fb:e0:df:fc:04:ab:28:f5:a6:7d:bd:64:cb:19:6e:
         f7:1d:62:55:29:d0:f1:a9:57:64:a3:d6:e5:ad:7f:a1:f5:17:
         6a:7c:82:14:7f:df:b7:00:5f:6e:98:fb:c1:b2:25:68:27:3e:
         84:00:2b:e5:5c:f2:73:05:79:79:30:c0:5f:c6:e5:ec:81:c8:
         f2:dd:c4:01:0f:50:79:6e:99:bc:b6:ea:b3:20:d9:5a:22:c2:
         cb:ad:69:46:98:41:e7:e2:7b:23:41:f5:f0:cd:dc:4b:91:6c:
         a2:4c:2c:f3:1f:3a:92:29:88:d5:8a:7d:4a:c1:df:30:49:96:
         ff:60:37:0f:08:20:e8:6d:30:cd:40:75:65:d5:55:6c:01:12:
         95:7a:2e:cb:14:72:e6:3a:66:2c:58:43:b4:59:6f:36:33:90:
         4f:ba:d6:b1:7e:c3:1a:9f:34:41:4d:c5:c4:78:1f:0f:f1:d9:
         89:99:8b:26:cb:98:70:a0:91:94:65:97:90:01:98:a6:ea:8c:
         c0:cf:c3:9c:3b:34:3b:93:f7:8c:8e:a0:82:dd:10:48:e3:81:
         b6:92:13:c0:ed:91:84:c4:33:9b:bb:08:3b:93:d6:24:93:e3:
         b8:e8:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:20 2026 by rpki-client