This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          z/RNgP6fHW+a6tsAedQY4oqtC5zZ+g8hNpA1xcT4F5Y=
Subject key identifier:   B6:AA:6D:C2:A8:46:80:FA:F2:1C:AA:9C:2A:A8:AD:AA:E3:2F:67:50
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1B23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1B0E
Signing time:             Fri 30 Jan 2026 15:34:31 +0000
Manifest this update:     Fri 30 Jan 2026 15:34:30 +0000
Manifest next update:     Fri 06 Feb 2026 15:34:30 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: xJRB2sZvGvDvh41YtvhOVI3V6qVjFqTSMut1uNMa870=)
                          2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=)
                          3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Feb 2026 15:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6947 (0x1b23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: Jan 30 15:34:30 2026 GMT
            Not After : Feb  6 15:34:30 2026 GMT
        Subject: CN=697ccf86-7762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:a7:10:73:60:0c:4f:0f:9d:9d:a4:ed:c7:
                    0c:97:4e:7a:78:c0:33:52:3f:9a:25:0b:a5:81:ae:
                    9d:c0:af:31:28:b3:a7:e2:b3:42:b7:ac:c6:48:60:
                    85:c8:f5:c0:02:12:a1:d1:ef:55:e3:39:c7:7a:6b:
                    a5:bd:f3:1f:b4:17:2a:6e:d4:61:5a:61:29:6b:5a:
                    db:1a:be:20:7e:11:0a:4e:c6:a7:f1:1f:63:e6:2d:
                    70:4e:15:5e:b3:bd:67:d6:4e:e4:9e:b1:f5:e2:75:
                    9f:d3:15:43:c1:2d:04:bd:7b:9b:25:b0:5c:e2:74:
                    50:62:fe:64:03:2f:fa:62:2b:d7:72:d3:65:cf:1c:
                    61:a0:4a:0d:1f:cf:a9:0b:50:c4:f9:b8:30:a3:45:
                    fa:a9:f9:7b:24:a9:ae:b2:ea:ce:1c:ee:84:40:a4:
                    12:c4:a7:6b:c3:3d:8d:94:ed:2e:42:df:79:ef:21:
                    84:65:62:ee:de:0d:95:6d:06:f5:85:f1:d4:d1:f3:
                    50:5c:53:1b:75:3d:23:fe:36:fe:08:1e:86:d5:7d:
                    e6:aa:c3:50:ea:4c:f8:f9:33:4b:52:fd:08:35:bd:
                    37:c1:27:19:6a:7b:d6:8f:52:0c:5e:66:ba:cd:31:
                    c3:d5:6a:ce:d1:8c:eb:aa:d8:a2:54:7a:1f:32:ad:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AA:6D:C2:A8:46:80:FA:F2:1C:AA:9C:2A:A8:AD:AA:E3:2F:67:50
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:a1:9d:26:33:bd:60:9a:0f:87:e8:dc:b8:48:6d:3e:b5:
         51:f7:ea:f3:a5:28:7f:e0:36:d9:e2:51:b4:90:1c:68:a6:3a:
         d8:5b:f3:16:d9:15:c8:9a:9b:ed:5d:53:87:f3:47:c7:66:44:
         e6:ad:7c:06:63:86:4f:36:d4:d7:73:59:a4:17:36:46:4e:e4:
         23:03:a2:e6:a7:d1:59:f1:14:6c:a0:5a:89:a4:d7:a0:16:e1:
         8e:94:f8:af:a4:0e:9c:35:93:cd:c4:aa:46:c5:97:95:8e:d2:
         79:e0:f6:06:7f:a4:54:d0:2d:5e:e8:f6:94:ac:bd:27:81:21:
         50:70:a3:5c:db:31:20:fd:7b:25:44:bf:0b:bf:f4:fa:16:40:
         d3:c1:ac:35:c4:c7:80:2e:85:1d:09:2a:29:b7:3c:92:07:39:
         aa:9f:ad:97:63:ae:65:df:3d:84:26:27:e2:4e:ea:f9:1e:cc:
         14:94:62:66:f9:ad:06:6d:3b:5f:0c:20:a4:26:28:8d:58:b6:
         ea:5b:39:a5:ae:f5:80:e0:a4:62:65:62:b7:ac:ae:a2:5e:cb:
         97:da:ca:2e:c5:8e:42:eb:eb:32:00:be:ba:b8:07:f7:0d:4c:
         35:31:94:47:8c:0b:c4:a1:cc:41:a5:9c:ec:d1:dd:00:b3:5a:
         1c:31:b7:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz
MzlCRUJBOTcwHhcNMjYwMTMwMTUzNDMwWhcNMjYwMjA2MTUzNDMwWjAYMRYwFAYD
VQQDDA02OTdjY2Y4Ni03NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAklCnEHNgDE8PnZ2k7ccMl056eMAzUj+aJQulga6dwK8xKLOn4rNCt6zGSGCF
yPXAAhKh0e9V4znHemulvfMftBcqbtRhWmEpa1rbGr4gfhEKTsan8R9j5i1wThVe
s71n1k7knrH14nWf0xVDwS0EvXubJbBc4nRQYv5kAy/6YivXctNlzxxhoEoNH8+p
C1DE+bgwo0X6qfl7JKmusurOHO6EQKQSxKdrwz2NlO0uQt957yGEZWLu3g2VbQb1
hfHU0fNQXFMbdT0j/jb+CB6G1X3mqsNQ6kz4+TNLUv0INb03wScZanvWj1IMXma6
zTHD1WrO0YzrqtiiVHofMq0owQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaqbcKo
RoD68hyqnCqorarjL2dQMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB
MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz
Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCawKGdJjO9YJoPh+jcuEhtPrVR9+rzpSh/4DbZ4lG0kBxopjrYW/MW
2RXImpvtXVOH80fHZkTmrXwGY4ZPNtTXc1mkFzZGTuQjA6Lmp9FZ8RRsoFqJpNeg
FuGOlPivpA6cNZPNxKpGxZeVjtJ54PYGf6RU0C1e6PaUrL0ngSFQcKNc2zEg/Xsl
RL8Lv/T6FkDTwaw1xMeALoUdCSoptzySBzmqn62XY65l3z2EJifiTur5HswUlGJm
+a0GbTtfDCCkJiiNWLbqWzmlrvWA4KRiZWK3rK6iXsuX2souxY5C6+syAL66uAf3
DUw1MZRHjAvEocxBpZzs0d0As1ocMbfP
-----END CERTIFICATE-----
Generated at Sat Jan 31 11:54:11 2026 by rpki-client