This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
File:                     QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json)
Hash identifier:          UuZ8SHYFeWOZGk90D4xbIcvHpwSf6YRYOD2CYslcKvY=
Subject key identifier:   DE:07:77:7A:AA:1D:E0:7A:2E:55:1B:0B:EB:5C:7E:22:D1:31:34:02
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Certificate issuer:       /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial:       068B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
Manifest number:          0686
Signing time:             Sat 10 Jan 2026 21:46:36 +0000
Manifest this update:     Sat 10 Jan 2026 21:46:36 +0000
Manifest next update:     Sat 17 Jan 2026 21:46:36 +0000
Files and hashes:         1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: N5vxT0/6A/pu+ann/z1JFuV4IIeIutlKZC16b0jGI84=)
                          2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
                          rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 21:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
        Validity
            Not Before: Jan 10 21:46:36 2026 GMT
            Not After : Jan 17 21:46:36 2026 GMT
        Subject: CN=6962c8bc-28ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:75:bb:44:6c:dd:c1:3b:f7:5e:98:0d:80:
                    77:70:da:aa:4b:0b:e5:82:b3:15:80:be:6d:8d:43:
                    1d:a6:d0:bb:be:ca:7f:e8:97:d9:1e:64:11:e9:cc:
                    ee:18:5f:03:52:72:17:9b:ef:02:45:74:64:27:38:
                    bb:79:28:c1:9c:f4:d1:0e:c0:e5:98:c8:84:f5:bf:
                    21:45:e2:af:83:f0:8d:d0:c5:2d:14:a3:f5:74:52:
                    59:86:e0:a9:29:75:2a:64:11:75:df:5e:12:68:ee:
                    8f:88:7b:f1:2c:5b:0e:2b:e9:37:e1:30:a6:c8:47:
                    7f:96:0d:31:5e:f4:de:c9:fa:30:f0:cf:d5:d4:a5:
                    8b:2a:bb:09:f3:29:4f:27:c4:80:90:26:6c:11:7c:
                    81:14:34:03:15:da:71:22:2f:62:8e:e1:89:d7:66:
                    f0:94:e1:12:76:a5:e6:06:49:6e:e7:8a:af:1d:4c:
                    10:7d:fb:eb:c3:fd:8b:15:5d:a4:6c:a4:60:00:21:
                    4b:84:52:d2:82:40:03:e6:5f:29:b9:d1:59:6e:69:
                    8c:b0:6f:2e:3e:ce:e2:bd:38:26:c2:9e:07:e4:d3:
                    c3:83:5d:ab:e1:13:5f:a5:7a:14:b4:ac:0d:fd:4d:
                    9b:de:96:91:a7:ac:26:94:7b:aa:a5:eb:06:50:3a:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:77:7A:AA:1D:E0:7A:2E:55:1B:0B:EB:5C:7E:22:D1:31:34:02
            X509v3 Authority Key Identifier:
                keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:02:a6:f3:61:02:c0:fa:ff:e2:61:fc:8c:85:5d:24:15:
         ad:eb:e7:7d:81:24:1f:4b:59:da:01:11:f4:06:f3:3b:ed:2d:
         ca:76:8c:e7:b8:7d:46:2b:d0:f4:53:05:01:33:f2:13:1f:19:
         a7:3d:12:6e:7b:d7:03:da:84:14:50:43:ce:d1:13:39:8b:5c:
         65:0c:62:36:7c:47:f6:28:ad:1c:6a:ec:f0:f5:67:d5:c0:ea:
         c1:ef:09:1d:41:21:97:f0:7e:80:4d:ef:dc:b6:0c:62:5b:54:
         2d:73:29:2a:6b:88:37:e9:e4:f3:c7:d1:16:bf:a6:59:a0:df:
         52:0d:93:63:68:77:a5:be:b7:0b:85:a8:44:d5:e2:51:75:f3:
         df:a4:f8:21:53:75:e0:d9:4c:56:07:36:a7:e4:c1:15:23:07:
         25:9e:0a:93:81:64:10:1f:5d:35:06:26:e7:61:86:69:b9:0e:
         b6:e9:9a:a6:da:19:70:6d:d9:75:82:41:0f:0d:c9:8e:4e:72:
         45:e5:96:40:42:cf:e9:d2:36:eb:0b:dd:e5:c3:19:96:d8:73:
         83:29:41:50:cc:bc:01:d7:0b:66:d2:24:03:2f:d9:79:3d:3b:
         23:ca:51:e9:93:a3:93:34:04:66:54:1d:0e:ee:43:6a:32:bc:
         8d:06:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:35:49 2026 by rpki-client