This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File:                     Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier:          qybhsk3g4yF22diG2Bqw162f7azogELZU5cvD8aQJak=
Subject key identifier:   3C:15:5A:4D:2B:9E:B4:9B:7F:8C:80:93:63:9D:42:9C:F9:7A:91:C3
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer:       /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial:       17A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number:          179F
Signing time:             Sat 10 Jan 2026 16:20:33 +0000
Manifest this update:     Sat 10 Jan 2026 16:20:33 +0000
Manifest next update:     Sat 17 Jan 2026 16:20:33 +0000
Files and hashes:         1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: r6C9jFozUAsF9+PFWX/6Enlk+qABfNz1GrNiLnyS0Eo=)
                          2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: lHKNLWfYNI9WQcRtKzmUJBeHs5miXzhGVpBtJH3ux+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6057 (0x17a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
        Validity
            Not Before: Jan 10 16:20:33 2026 GMT
            Not After : Jan 17 16:20:33 2026 GMT
        Subject: CN=69627c51-3d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:71:6a:f1:7b:7e:ed:80:24:ee:83:a0:bd:
                    3e:49:28:fa:46:2f:a4:c0:0e:de:ee:74:12:79:f3:
                    b5:48:27:50:2c:d5:21:dd:19:0a:84:2e:78:30:a1:
                    8c:0d:0a:81:2f:76:fd:6b:f5:aa:2e:3e:ec:b4:85:
                    20:5f:e8:de:9f:e5:77:c3:43:5f:75:30:c5:af:f3:
                    32:4a:db:81:e9:5a:74:64:4c:63:0d:47:55:cb:0a:
                    2e:5b:1f:31:f9:e9:88:bf:80:84:f6:db:53:b0:1c:
                    4e:35:19:b3:6e:89:bf:c7:00:66:19:53:fd:60:c2:
                    f4:0e:52:da:87:fc:b7:4f:f2:26:fd:b2:a4:92:d8:
                    88:59:38:52:70:72:b7:a7:0c:23:f5:6f:f0:72:73:
                    db:9d:fd:c2:2c:93:29:97:73:26:d2:25:17:c7:75:
                    4f:05:c3:fd:0b:4b:d4:cc:50:e7:47:64:94:8d:fb:
                    a3:e5:40:cc:63:21:d9:ff:97:2c:1f:58:25:64:6d:
                    0b:ff:0d:3c:1b:39:e0:75:2a:4b:35:7f:ed:a4:71:
                    ac:76:41:75:26:6a:ba:ca:63:d0:41:d4:06:6f:ab:
                    9a:6d:62:d0:2e:af:f8:a1:51:74:7c:1d:a0:7b:cc:
                    a8:dc:aa:3e:e2:6a:bd:5d:9a:3d:28:76:ef:c2:4b:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:15:5A:4D:2B:9E:B4:9B:7F:8C:80:93:63:9D:42:9C:F9:7A:91:C3
            X509v3 Authority Key Identifier:
                keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:69:bb:ef:0e:bc:71:de:b3:a3:15:0c:12:88:16:f2:61:39:
         e7:39:1b:76:35:3b:3c:d3:bd:ef:fc:54:b8:35:c8:3e:69:aa:
         2a:7d:26:b6:48:1a:04:b7:d9:36:00:3c:3b:f2:e0:d1:fd:57:
         12:0f:93:eb:e3:99:35:1a:83:59:db:e5:f1:e8:5b:69:e8:c2:
         a0:e2:c9:05:14:7c:03:17:93:01:d9:36:4a:84:2e:35:e4:28:
         d2:da:07:8b:1b:93:ec:0f:39:ea:73:aa:b4:ce:a8:53:4d:bf:
         2d:e5:2d:74:b4:85:8f:f1:f3:63:74:3d:79:a8:a5:b9:8e:47:
         c7:21:0d:ab:d5:26:03:48:45:b2:b8:62:7d:9d:ea:21:fe:d7:
         26:34:26:cb:80:a7:61:39:1c:8f:d1:85:b7:ee:95:59:93:dc:
         e6:2c:76:ed:af:ad:5f:e5:2f:48:28:1a:c1:a5:d4:4e:81:96:
         70:78:99:78:2e:f1:14:90:9b:4f:15:c8:ab:62:0e:31:bf:27:
         1d:31:b5:d2:6e:85:98:ec:13:59:be:13:39:70:8d:6a:30:b2:
         ea:cd:75:ce:f9:e3:48:48:ce:ce:0f:f9:c0:89:c8:3e:aa:49:
         7d:34:14:fa:aa:44:86:21:e5:16:6a:98:d6:1f:36:53:27:91:
         b3:5b:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:55:32 2026 by rpki-client