This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File:                     Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier:          7PPRI8ND6rBPKyIkrwg+hAQgFPNOYvoXL7L9szhy6vo=
Subject key identifier:   1B:7E:09:BF:84:E8:93:6E:28:B7:5C:95:E1:32:1F:6F:F6:99:6A:79
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer:       /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial:       17B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number:          17A7
Signing time:             Mon 26 Jan 2026 16:19:42 +0000
Manifest this update:     Mon 26 Jan 2026 16:19:41 +0000
Manifest next update:     Mon 02 Feb 2026 16:19:41 +0000
Files and hashes:         1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: 2LfHbHL92k4IQow9XfQaxb3pB6z5/VGOcVvDcOWS0+s=)
                          2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: lHKNLWfYNI9WQcRtKzmUJBeHs5miXzhGVpBtJH3ux+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 16:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6065 (0x17b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
        Validity
            Not Before: Jan 26 16:19:41 2026 GMT
            Not After : Feb  2 16:19:41 2026 GMT
        Subject: CN=6977941e-f940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:ce:ae:f5:3a:c7:9a:46:a1:25:0a:87:06:
                    a2:8b:d8:03:70:bd:51:ec:04:1b:6c:e7:4d:f0:54:
                    5c:96:fd:13:ae:1e:32:13:1f:33:ba:b1:56:d3:19:
                    2c:9f:93:c9:cd:c8:d8:e0:76:aa:fe:c7:4a:01:2c:
                    9b:14:43:3d:51:48:0e:3c:6d:d6:10:88:48:6e:03:
                    81:35:84:e5:35:f0:a5:b2:1e:99:ae:8d:97:12:10:
                    02:6a:cc:ef:72:57:0e:d6:31:f1:09:60:6e:6b:31:
                    14:46:7d:46:14:0a:40:54:8c:d3:88:02:14:00:b8:
                    cd:36:34:ad:cb:c5:d6:57:a2:45:2b:5d:9c:73:86:
                    66:46:9d:11:e9:99:b3:a5:ab:59:1b:62:07:89:ec:
                    65:36:9d:ba:0f:4c:7f:44:be:15:14:2e:85:38:a8:
                    0f:17:2e:8d:9b:9f:eb:1c:4f:27:59:74:9c:ee:f4:
                    7d:f6:9c:c4:23:86:0f:3c:f1:d1:12:9b:f1:77:8b:
                    9a:04:27:f7:9b:a2:54:f6:40:26:6b:13:31:9e:aa:
                    1a:ee:b6:c8:dd:79:bd:03:76:ed:f4:6b:c5:fa:30:
                    11:14:b2:c0:d7:e3:62:75:fd:42:b3:a4:d7:f3:6c:
                    10:1b:3c:a8:80:bf:b8:2f:52:5b:84:3e:82:40:4d:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:09:BF:84:E8:93:6E:28:B7:5C:95:E1:32:1F:6F:F6:99:6A:79
            X509v3 Authority Key Identifier:
                keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:05:5c:2b:01:d0:39:9b:12:2d:17:a0:33:f2:eb:74:ce:
         10:13:38:58:78:97:bd:f7:bc:d0:0e:3f:5a:c6:7b:bd:9e:11:
         ed:78:9e:8c:9c:93:f5:42:fa:34:50:de:ec:5d:4e:53:7b:9a:
         4e:bc:ee:49:f3:b9:1e:60:2f:99:c5:ff:55:53:10:64:0a:51:
         77:c9:da:87:bb:58:f7:34:0d:dc:50:7b:23:2a:f2:47:b9:2e:
         df:b3:14:a8:be:ab:0c:0f:56:24:6f:af:0e:04:fc:f2:9b:e4:
         3a:4b:74:0f:44:35:bd:f6:15:c4:0d:b7:df:d1:70:a9:89:29:
         5b:ea:ea:e8:e9:1f:7c:e7:68:28:04:89:1e:b2:2b:6e:5b:54:
         9f:b0:a6:48:20:cc:b8:71:56:3e:d3:60:6e:b0:5c:46:c1:e3:
         1d:6a:69:f6:cd:57:a0:06:ac:57:33:8a:02:8c:80:54:5d:06:
         d2:16:bf:38:1a:3a:e6:8f:0c:fc:86:a2:ae:55:79:c7:a5:9c:
         93:36:56:b4:e3:a7:c0:2e:00:4b:e0:12:16:e1:61:87:7f:cb:
         0c:e3:b4:34:89:f5:92:94:db:2e:0f:4e:4e:ad:a2:25:ee:26:
         0d:33:04:9c:15:af:ce:be:71:93:70:98:02:bb:8b:b1:7b:55:
         65:8c:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:50:58 2026 by rpki-client