This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          m1VGbPGhxmJteyKUjBa49C83zwXNb/ihumPJTiKFgHM=
Subject key identifier:   DF:B9:6C:A8:5E:A2:93:37:DF:93:AE:2B:30:DB:78:64:38:1B:E2:10
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          C6
Signing time:             Sat 17 Jan 2026 04:58:41 +0000
Manifest this update:     Sat 17 Jan 2026 04:58:40 +0000
Manifest next update:     Sat 24 Jan 2026 04:58:40 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: OBoMS74fkrASIxGf2xaR5m4/kc3WKenKWzTtcRZuKns=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: BU/k3CkSOStn2wvMOAuwWxlTBhg/Ir2QU63RTAPCDug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Jan 17 04:58:40 2026 GMT
            Not After : Jan 24 04:58:40 2026 GMT
        Subject: CN=696b1700-71c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:02:34:26:05:95:e8:3e:e2:7e:a5:e8:da:
                    67:05:f4:aa:c6:91:8f:19:e7:43:af:37:28:5e:49:
                    c9:50:63:d4:6d:02:13:ba:c6:77:30:95:a4:31:d1:
                    df:9e:04:99:0f:90:7d:8c:49:49:18:3b:02:e6:fe:
                    fb:29:88:8a:2a:9c:f9:73:d1:51:c9:90:36:45:9c:
                    b1:ce:75:69:d1:fb:88:2c:e8:b2:f7:04:63:64:28:
                    36:c5:72:2f:aa:02:a1:23:28:eb:b3:c2:33:32:0e:
                    c3:39:d0:6b:d5:fb:db:2c:7e:d4:ce:2a:ca:87:58:
                    42:38:93:96:bb:e7:46:64:49:ca:3b:a8:c9:54:5a:
                    0b:5e:50:d6:73:c6:00:42:d7:8b:db:8d:88:67:7e:
                    5a:b4:65:79:39:dc:fd:06:5e:18:dc:da:2f:bd:6b:
                    b2:14:b2:ae:88:34:01:bd:fd:bb:d9:dc:bf:02:4d:
                    1a:e7:1c:13:7c:18:5c:ce:c6:27:f1:36:97:d7:1d:
                    3b:b1:0c:d5:27:71:53:78:95:1a:e6:00:c6:e9:7d:
                    78:e2:b6:b8:2d:ca:20:06:37:aa:2f:e6:fb:84:ec:
                    f2:d8:5f:2c:1c:51:4b:54:b9:c5:61:33:4a:fb:6d:
                    da:9f:f7:23:48:22:6e:3c:8a:a9:c5:ff:fe:45:8c:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B9:6C:A8:5E:A2:93:37:DF:93:AE:2B:30:DB:78:64:38:1B:E2:10
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:09:66:15:b6:75:8c:ab:ce:a9:f8:7d:04:18:fe:26:04:
         e5:2f:1b:f8:56:ff:ed:9b:9e:32:a2:72:6c:70:c8:ea:e0:cd:
         9e:84:66:ae:62:05:8b:93:c6:35:28:ba:a6:3a:a6:ec:c3:ee:
         5f:ee:fa:1a:e6:d2:10:4f:1d:38:2d:d1:49:83:ea:b3:7b:fc:
         65:97:2f:39:73:2c:44:b2:23:8c:a0:f7:15:d9:26:16:c8:e2:
         2d:35:33:fc:d0:8b:03:48:1a:ca:ca:a2:f5:c0:4b:6a:e9:4f:
         75:72:5c:5b:f3:30:5a:b3:88:71:94:d9:9b:3c:1a:9a:e8:80:
         d5:c6:6d:1a:cc:07:71:e5:87:07:70:b5:9b:e4:c8:eb:50:bb:
         2f:24:2b:bc:51:a7:ca:22:a5:e0:99:69:d8:ec:c3:7b:e9:c5:
         8a:42:82:f1:7c:24:ad:a0:bb:01:bf:92:12:1d:3a:c5:64:34:
         8d:ef:09:3a:e7:d4:a8:6b:7f:61:90:b5:de:b3:2f:42:b7:2c:
         74:a7:69:7b:f5:94:a2:49:0f:e2:ea:f4:3d:18:6c:81:15:34:
         8c:c8:9c:fb:ca:c8:c2:a4:70:90:5f:51:06:f2:93:f9:49:25:
         6c:78:e2:b0:10:5f:ff:33:13:9d:49:f6:24:f5:26:53:b1:89:
         83:ac:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:24 2026 by rpki-client