This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
File:                     QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json)
Hash identifier:          PAQh5kV2yzkIvWraMIMheYrCKKH6fQ+OYGr8R/VgAiw=
Subject key identifier:   A7:B3:F6:B1:85:23:56:74:6E:5D:17:6C:8D:D4:28:0C:22:D2:37:B0
Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90
Certificate issuer:       /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
Manifest number:          BB
Signing time:             Thu 01 Jan 2026 05:29:13 +0000
Manifest this update:     Thu 01 Jan 2026 05:29:12 +0000
Manifest next update:     Thu 08 Jan 2026 05:29:12 +0000
Files and hashes:         1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: iUAWmTGLOAp59BSk5I6AePrNgubFV6bZdRc3syJRRgk=)
                          2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
        Validity
            Not Before: Jan  1 05:29:12 2026 GMT
            Not After : Jan  8 05:29:12 2026 GMT
        Subject: CN=69560628-d17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:a3:68:2c:5d:38:c4:00:5f:5b:8b:60:f9:
                    c4:c7:aa:a5:fe:80:17:58:fb:9f:e3:5f:29:1a:64:
                    62:0b:d9:4b:a3:f6:c8:6f:fb:9c:c4:2c:3f:6e:bc:
                    36:fc:77:2e:63:a4:3a:7f:1f:44:39:fe:c5:3d:fe:
                    1a:e3:96:75:70:39:fe:c5:b8:2d:a8:f4:43:5f:ae:
                    6b:51:62:3d:8c:81:b2:15:64:76:ba:33:f1:50:6a:
                    f5:63:98:de:a5:1a:6f:ab:e5:27:b4:4a:89:e1:6c:
                    66:65:1c:d7:cd:3e:b5:be:b1:4f:e2:fd:2e:7e:cc:
                    13:92:e2:13:8b:0a:9f:ca:90:83:37:eb:f2:c2:54:
                    cb:74:29:6e:be:b7:bf:db:c5:27:f8:62:54:cd:36:
                    4b:c6:e8:1f:7f:59:a0:93:e6:fc:f7:b9:70:3a:de:
                    d8:53:81:71:6f:55:2b:d7:3e:19:1e:c9:39:8e:9c:
                    56:ef:5b:90:f2:af:74:5c:92:21:70:db:dc:ee:84:
                    13:3f:11:02:a4:66:60:89:c6:9a:4e:0b:8e:04:ed:
                    f5:cb:1e:82:4b:a5:cd:6d:46:f8:a7:3f:67:30:2f:
                    1d:2e:5b:18:82:07:7d:e7:97:f7:68:3f:b7:45:3a:
                    dc:f2:74:9d:d3:c4:09:70:1a:20:56:60:b5:50:bf:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B3:F6:B1:85:23:56:74:6E:5D:17:6C:8D:D4:28:0C:22:D2:37:B0
            X509v3 Authority Key Identifier:
                keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:5f:2d:08:fc:1a:08:0f:e1:45:7e:fc:08:e1:7c:07:1b:f5:
         83:5e:3a:07:59:ee:a6:0d:3a:3e:dc:49:1c:19:38:86:8e:fa:
         22:c9:52:44:e2:7f:17:9e:b8:7a:8d:ed:ef:24:61:a6:6d:0c:
         b9:0e:97:cf:77:e3:e8:bd:0f:2b:18:1a:f0:69:81:6d:80:59:
         08:bb:ba:c8:d2:e5:c8:db:4d:3b:41:bf:88:fb:c8:fc:15:a7:
         00:3a:18:11:d5:47:49:80:2f:32:a9:cf:92:ad:99:75:da:a4:
         65:2c:c9:70:e3:32:16:3d:c1:b2:b9:70:37:08:b8:8a:90:7e:
         21:33:0b:48:16:2a:13:60:b9:6e:2b:c6:17:0b:7d:05:b4:15:
         61:12:6a:52:ed:3a:2b:2f:e8:e7:ee:91:85:e9:a9:49:0e:14:
         4f:4b:d9:74:b5:dc:98:23:5c:1a:3b:79:d0:2a:31:2b:34:8e:
         8f:08:76:e1:83:f2:58:2b:13:e8:c1:55:d2:d6:bf:f4:9d:af:
         04:99:a1:12:33:3a:2b:82:93:10:8f:cb:53:43:a0:fd:4f:b4:
         8e:be:80:af:16:8a:f2:04:88:2e:ef:69:7f:82:a4:96:41:b0:
         3d:62:80:a2:42:1f:93:03:0e:f7:68:61:e4:37:6d:f4:42:ef:
         31:56:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:25:15 2026 by rpki-client