This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File:                     QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier:          dlnCDVM+NJampzFqhPs+tdJgXtzH2+dFRRh3uiXQrJM=
Subject key identifier:   3D:4B:57:A2:E4:50:BB:A6:75:82:6C:4E:77:36:FD:15:46:6C:2C:24
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number:          FD
Signing time:             Sat 17 Jan 2026 04:21:18 +0000
Manifest this update:     Sat 17 Jan 2026 04:21:18 +0000
Manifest next update:     Sat 24 Jan 2026 04:21:18 +0000
Files and hashes:         1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: Ua0P/LuVddtGqVGE5fMfzUa4/m77D5I7HjQ6pzQdZYw=)
                          2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Jan 17 04:21:18 2026 GMT
            Not After : Jan 24 04:21:18 2026 GMT
        Subject: CN=696b0e3e-4262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:b7:4a:fd:8c:e9:65:37:1f:5b:74:cc:72:
                    ee:99:e7:64:df:54:b6:d4:bd:d3:ff:1b:ee:71:01:
                    1c:80:23:e5:d0:68:5e:d6:92:70:8d:f0:44:1d:bc:
                    1f:32:9d:a1:ea:08:5d:10:84:24:72:05:4d:2e:74:
                    a8:a8:75:ff:4d:53:c9:14:6c:75:e7:b2:89:7f:71:
                    ae:ce:f4:8a:11:94:40:83:33:4e:f6:6a:07:5d:42:
                    c4:6f:4d:e5:4e:78:de:b4:05:04:2c:db:ed:70:fa:
                    d2:db:3c:be:c7:6d:fc:8b:8d:31:bc:f4:cf:8c:76:
                    98:2a:d0:52:8d:e3:b9:94:c0:26:df:da:7b:bc:e0:
                    e9:b2:bc:7a:09:cd:27:98:78:54:75:93:98:ba:fc:
                    23:1f:3d:81:86:7a:28:5b:c9:ca:9d:a3:40:a7:08:
                    bd:46:5d:05:41:32:db:a6:51:fe:71:12:78:03:92:
                    51:e6:32:31:62:c1:ea:a5:f1:1c:c1:b2:82:00:bd:
                    3e:dd:0c:c8:d3:3d:ba:bd:76:f8:73:1b:bf:4e:37:
                    c5:97:e6:21:b3:ef:f0:60:53:e2:f9:18:f4:4f:f6:
                    5f:65:da:eb:da:53:20:d5:36:5f:69:7c:d3:e3:64:
                    87:c7:da:21:aa:83:1e:bd:e6:88:e4:11:78:bd:68:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4B:57:A2:E4:50:BB:A6:75:82:6C:4E:77:36:FD:15:46:6C:2C:24
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4b:8e:cc:16:1b:38:57:9c:14:19:04:c4:aa:d6:6f:c3:76:
         1c:da:dd:e5:b8:f4:98:e5:54:d9:a8:f0:22:df:c7:92:a4:5a:
         fd:e6:1d:b0:9a:49:53:83:62:90:07:51:83:a1:53:76:1e:e0:
         c6:3b:de:2e:79:f2:f2:d9:f7:c2:32:06:80:e0:96:d7:61:6b:
         29:39:a6:39:77:93:47:11:27:2c:da:05:05:30:81:96:e1:c2:
         3b:97:ee:1e:81:b9:29:92:ee:ce:cb:0a:78:a6:71:d4:f0:20:
         e7:de:5b:08:b7:d2:e4:f7:1d:70:6d:d5:f5:b4:9c:0c:29:96:
         9b:b3:af:22:de:85:3a:2c:ad:f9:96:4e:81:93:83:9c:8a:b3:
         2e:e7:45:40:0a:da:76:43:99:67:a9:0a:03:dc:d6:9d:ae:e5:
         1b:f8:78:e4:8e:f9:e9:b9:8a:0a:5c:06:d4:09:1d:b1:61:fd:
         46:1b:e1:a3:bb:d1:5f:33:31:2e:32:ae:38:4f:2b:35:10:08:
         b0:8b:69:18:54:ad:53:c4:5d:d4:a3:73:55:a0:80:76:21:4a:
         af:26:c1:aa:70:9e:b9:45:0d:9e:d6:91:0f:2b:b0:19:94:f7:
         0b:ae:7b:3f:c0:61:36:9f:3c:d6:37:1d:17:d1:e5:81:f8:66:
         f1:81:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:26 2026 by rpki-client