This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File:                     qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier:          QXXvRpBhTuuaEVmc/yYBnc5WYEdmvBfz4Yw63rSVVxM=
Subject key identifier:   4B:BC:BC:B4:5C:44:75:00:B2:C9:42:AC:CC:23:6B:64:BA:70:2F:43
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer:       /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial:       0B78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number:          0B78
Signing time:             Sat 24 Jan 2026 18:39:31 +0000
Manifest this update:     Sat 24 Jan 2026 18:39:30 +0000
Manifest next update:     Sat 31 Jan 2026 18:39:30 +0000
Files and hashes:         1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: 8yv3JlXiJ/Q8BkcxZAaaIjwZ9RU2XOIOnN+5MudflTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2936 (0xb78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
        Validity
            Not Before: Jan 24 18:39:30 2026 GMT
            Not After : Jan 31 18:39:30 2026 GMT
        Subject: CN=697511e3-1a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:7d:5f:91:8c:28:ab:37:4a:ed:95:ff:12:
                    0d:be:08:db:35:e4:3c:a3:0e:d3:73:08:a0:df:63:
                    a8:31:d6:f8:7f:36:c8:7a:02:b7:95:83:00:58:c9:
                    2d:1c:11:8e:b3:34:13:d6:38:1a:4b:85:c7:42:aa:
                    e5:71:13:9c:63:d1:e0:37:3f:fc:c1:d2:28:95:58:
                    e7:68:b9:58:30:be:25:01:5e:25:1a:35:75:1f:5d:
                    3c:82:f7:d9:bb:7a:71:ec:37:d9:c3:b8:31:1a:e1:
                    c4:05:54:6f:08:57:58:03:8b:95:77:d9:25:df:72:
                    8b:73:e7:cc:b9:16:5d:9d:be:fc:8b:5c:0f:86:b4:
                    10:a2:de:12:ea:87:5d:a5:19:6b:cc:64:65:e2:6e:
                    fd:b4:24:cd:fb:ca:a9:77:aa:29:ce:c3:28:70:ca:
                    75:14:7c:cf:b7:3e:7d:60:7b:09:2c:d1:41:17:bd:
                    0f:f4:29:ed:5e:22:fd:e7:94:af:2b:4b:48:ed:ce:
                    df:8f:b7:ed:53:4a:51:9c:ca:80:23:63:8d:fc:57:
                    c6:64:47:bf:07:39:4a:d2:4f:d9:7b:a6:90:e1:c6:
                    39:24:d8:cf:fc:b6:e4:06:1c:e7:89:e2:13:c4:ab:
                    79:87:6e:c6:08:f0:ef:5a:0c:eb:df:34:99:ed:eb:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BC:BC:B4:5C:44:75:00:B2:C9:42:AC:CC:23:6B:64:BA:70:2F:43
            X509v3 Authority Key Identifier:
                keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:bf:4d:89:99:3f:6c:82:ca:9c:eb:61:9d:03:85:06:18:
         07:b9:b9:fa:ff:4e:26:2d:54:da:a7:f3:67:f7:a0:f1:27:53:
         8d:ca:fe:67:b9:f7:e6:2e:58:f6:01:c9:8f:85:c1:26:b4:ce:
         56:fd:4a:50:ec:db:c2:05:7b:7c:14:0b:43:52:fc:c8:cc:a7:
         de:38:55:02:26:a2:f1:f0:5e:8a:97:ce:99:39:d0:61:e2:2f:
         92:0d:ab:fd:7a:0a:05:cc:5e:f7:2e:ca:66:07:cb:16:20:3e:
         c5:e9:39:3b:20:45:d5:4d:fc:e9:98:21:79:6e:e4:f7:c8:8f:
         26:1d:fa:be:c9:4e:ff:6c:dc:50:b4:16:23:72:85:e1:90:cc:
         c0:1a:ac:8b:2b:3f:e4:b5:22:b6:4c:f5:82:e3:57:98:ac:8c:
         4a:cc:bf:eb:72:47:92:f0:e9:d3:24:7d:68:65:66:5a:b4:55:
         a5:b6:4e:41:05:b6:4d:f9:79:19:60:5b:e4:9d:ea:db:9c:68:
         8f:61:71:67:7e:7c:eb:f2:52:c7:0c:ab:a9:d8:ad:de:4f:83:
         22:a3:38:86:17:e3:c0:17:8f:15:29:bb:20:40:25:b0:51:e1:
         c0:86:f3:89:ad:34:5d:d5:6c:f8:ff:2f:ee:83:39:1b:f4:b8:
         95:97:05:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxOEYxMTAvBgNVBAUTKEE5QTZBNjgxQUIwMUJBNTE1RjIxOUEyQ0FERUEwOTQ1
QjRBRDU5OUQwHhcNMjYwMTI0MTgzOTMwWhcNMjYwMTMxMTgzOTMwWjAYMRYwFAYD
VQQDDA02OTc1MTFlMy0xYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWJ9X5GMKKs3Su2V/xINvgjbNeQ8ow7Tcwig32OoMdb4fzbIegK3lYMAWMkt
HBGOszQT1jgaS4XHQqrlcROcY9HgNz/8wdIolVjnaLlYML4lAV4lGjV1H108gvfZ
u3px7DfZw7gxGuHEBVRvCFdYA4uVd9kl33KLc+fMuRZdnb78i1wPhrQQot4S6odd
pRlrzGRl4m79tCTN+8qpd6opzsMocMp1FHzPtz59YHsJLNFBF70P9CntXiL955Sv
K0tI7c7fj7ftU0pRnMqAI2ON/FfGZEe/BzlK0k/Ze6aQ4cY5JNjP/LbkBhznieIT
xKt5h27GCPDvWgzr3zSZ7euVwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu8vLRc
RHUAsslCrMwja2S6cC9DMB8GA1UdIwQYMBaAFKmmpoGrAbpRXyGaLK3qCUW0rVmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE4Ri8xNjgzOTI0ODQz
RTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVsRmZJWm9zcmVvSlJiU3RX
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FhYW1nYXNCdWxGZklab3NyZW9KUmJTdFdaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjE4Ri8xNjgzOTI0ODQzRTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVs
RmZJWm9zcmVvSlJiU3RXWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwrb9NiZk/bILKnOthnQOFBhgHubn6/04mLVTap/Nn96DxJ1ONyv5n
uffmLlj2AcmPhcEmtM5W/UpQ7NvCBXt8FAtDUvzIzKfeOFUCJqLx8F6Kl86ZOdBh
4i+SDav9egoFzF73LspmB8sWID7F6Tk7IEXVTfzpmCF5buT3yI8mHfq+yU7/bNxQ
tBYjcoXhkMzAGqyLKz/ktSK2TPWC41eYrIxKzL/rckeS8OnTJH1oZWZatFWltk5B
BbZN+XkZYFvknerbnGiPYXFnfnzr8lLHDKup2K3eT4MioziGF+PAF48VKbsgQCWw
UeHAhvOJrTRd1Wz4/y/ugzkb9LiVlwV/
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:55 2026 by rpki-client