This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File:                     qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier:          zLNG/lmTl7Cnoi7REntD1HK1bxJVD4QVR39O0KJatbA=
Subject key identifier:   38:DE:58:0F:4A:DF:65:7D:92:4C:EF:5A:3C:F1:94:27:77:B9:89:2D
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer:       /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number:          61
Signing time:             Sat 17 Jan 2026 06:08:18 +0000
Manifest this update:     Sat 17 Jan 2026 06:08:17 +0000
Manifest next update:     Sat 24 Jan 2026 06:08:17 +0000
Files and hashes:         1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: hWY+yO6susEbaEnqjH7KnSuuhwZBqZu6XCPuSUb35p8=)
                          2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
                          rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
        Validity
            Not Before: Jan 17 06:08:17 2026 GMT
            Not After : Jan 24 06:08:17 2026 GMT
        Subject: CN=696b2752-5dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:6c:f9:2e:35:96:d4:03:3f:37:ed:2b:d7:
                    47:a9:03:18:59:eb:42:f9:d3:27:bd:2a:e1:60:b2:
                    e2:58:88:5c:07:fb:6b:59:35:c7:30:82:14:26:81:
                    6d:24:c0:99:57:03:de:c6:62:3a:fd:8f:36:25:19:
                    d5:c0:5f:6e:8e:48:69:87:b6:ff:b5:c2:c4:2d:d0:
                    71:fa:d5:d8:dc:c6:71:03:b1:61:bc:57:3c:fe:fd:
                    8e:bc:db:1f:38:23:7c:11:d8:a7:ba:e2:a0:b6:af:
                    5e:43:6c:22:41:6b:09:02:4a:00:07:96:31:00:75:
                    8b:a9:7c:c7:3a:9e:1d:03:b8:5d:f8:ee:33:e0:03:
                    b8:fb:f1:c4:43:96:d0:9c:5f:00:e7:b4:98:4d:fa:
                    8a:40:29:7f:8a:74:12:ec:bc:80:91:80:f0:6b:a5:
                    97:82:e1:ed:fa:1d:92:11:d2:7e:95:54:b7:04:0a:
                    2e:09:c1:1d:bf:12:bd:c7:3d:50:b2:28:2e:7a:f9:
                    63:a8:c2:e7:5b:1e:9b:ee:b3:47:bd:b9:76:d2:4a:
                    b2:9f:22:09:bc:d3:69:49:59:55:28:31:4e:6a:e6:
                    5a:ce:95:0f:70:fd:6b:eb:46:8c:1a:40:ef:35:6a:
                    aa:43:a6:9f:55:23:6d:88:a9:38:6a:6d:14:0a:bd:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:58:0F:4A:DF:65:7D:92:4C:EF:5A:3C:F1:94:27:77:B9:89:2D
            X509v3 Authority Key Identifier:
                keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:34:54:31:84:72:8f:62:b1:59:64:ab:78:fe:8f:82:69:73:
         17:49:fd:f6:49:a9:8a:f2:9b:f9:7b:f0:c4:75:fd:52:15:8f:
         92:18:57:ae:76:12:57:dd:b1:d6:cc:7a:7f:4f:f1:dd:a9:1f:
         c8:49:cd:4c:25:0d:37:6e:ec:20:1a:22:68:97:60:20:9a:54:
         83:ae:1a:32:50:c7:be:db:48:54:37:5c:33:99:7d:71:fe:96:
         71:25:ce:10:39:7f:34:10:d3:06:ef:36:b8:40:0a:0e:09:b9:
         d6:9e:36:2b:42:4d:0d:c6:54:f0:a5:ec:f3:bc:c9:ad:cc:ba:
         fb:d9:3e:92:10:52:a5:8a:9f:c2:e9:09:db:01:1b:ce:35:1b:
         a3:30:5b:7d:16:87:3a:c7:e4:05:5a:73:d6:59:69:7a:22:c6:
         d7:dc:d7:33:da:38:20:a2:53:09:19:a4:53:74:26:fb:02:74:
         6d:ef:69:a9:04:4e:13:ac:26:de:1c:6f:92:3b:e1:3f:97:5e:
         60:9a:89:7a:f7:bc:10:3a:4b:5f:92:5c:8f:c9:e8:bb:f3:d1:
         68:4c:2b:13:d8:bb:aa:92:43:7b:de:29:cc:63:4f:d3:71:13:
         35:5d:c3:6b:bb:6c:4e:2d:31:49:40:4f:26:ec:78:af:9a:5d:
         bc:55:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:56 2026 by rpki-client