This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
File:                     22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json)
Hash identifier:          ctEyuc+FHCkXndh48pwWhtspM76iR/GRgR3JJLfBZBc=
Subject key identifier:   A4:ED:DE:D6:37:64:72:EC:17:A5:56:AB:1B:2F:86:37:18:3C:D2:F8
Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
Certificate issuer:       /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Certificate serial:       09B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
Manifest number:          099C
Signing time:             Sat 24 Jan 2026 19:30:54 +0000
Manifest this update:     Sat 24 Jan 2026 19:30:54 +0000
Manifest next update:     Sat 31 Jan 2026 19:30:54 +0000
Files and hashes:         1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: LfN8QpJbVDuEb4z57vxQ0Zht3phza2RI42ixtiOlz20=)
                          2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: nnJopRuWF4IPI2CoSPvt+TdVM1R3rgDYOUPBMtlzCqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
                          rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
        Validity
            Not Before: Jan 24 19:30:54 2026 GMT
            Not After : Jan 31 19:30:54 2026 GMT
        Subject: CN=69751dee-584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:7e:c1:0f:31:36:6d:c5:58:4b:af:ee:8f:
                    be:3b:d8:20:3b:4c:ab:67:a8:95:91:8d:44:80:ba:
                    0a:33:60:1b:3f:d0:85:61:b7:48:c3:a6:8b:e4:72:
                    e3:51:55:dd:bf:1b:10:c0:e2:a9:27:af:57:26:92:
                    35:e1:4c:77:b4:f2:c1:68:05:da:6f:d0:0c:57:b6:
                    4d:c5:e6:78:f0:b4:df:fa:ae:a2:62:63:63:b1:c3:
                    80:23:71:85:fd:61:db:5e:2c:97:10:e7:0a:17:bb:
                    a7:99:d4:8b:5e:9f:08:c5:f0:77:1c:9f:47:19:cc:
                    08:84:42:cf:b9:d7:36:c7:ad:65:1f:14:49:42:ae:
                    87:2f:08:a8:40:77:99:48:ec:d6:71:bd:39:d7:d7:
                    1e:fc:69:5b:7e:27:f2:4c:da:71:38:50:5d:03:14:
                    87:b5:53:45:6c:ad:3a:08:5c:9b:45:31:01:22:a8:
                    54:aa:cf:e9:89:24:fa:16:06:c3:a3:ab:a0:8c:cc:
                    c9:87:26:35:0a:23:e2:87:fc:9b:b3:cb:65:32:96:
                    46:ed:4a:55:33:c9:c9:e4:cb:a3:f8:1a:f9:f3:e7:
                    88:ab:ff:07:bc:75:92:1f:2a:67:c3:57:5b:96:b3:
                    2a:2e:77:a4:1b:b7:b2:bb:df:33:b9:51:39:06:53:
                    5f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:DE:D6:37:64:72:EC:17:A5:56:AB:1B:2F:86:37:18:3C:D2:F8
            X509v3 Authority Key Identifier:
                keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:a5:86:5c:12:d1:82:a6:bc:69:62:67:eb:de:39:01:1e:
         4f:42:3f:ad:e0:b4:36:38:44:1d:a3:4e:21:26:ca:bc:91:03:
         b1:6e:d4:e5:d6:26:ba:75:73:ec:f6:a6:17:cb:25:ec:7d:49:
         80:dd:77:6a:35:c5:d1:c0:8a:09:d2:80:50:a8:eb:d1:7e:c3:
         80:52:67:46:b5:9a:66:05:96:fb:3a:f3:50:2e:26:23:1d:6a:
         6d:ff:44:94:6f:89:fb:c4:b4:40:0b:da:97:c4:27:27:a8:fb:
         af:ec:3f:75:f1:ba:d6:b1:4f:0a:42:57:ba:a3:fe:37:59:6c:
         a7:23:ed:36:b3:49:58:e7:05:21:c0:80:1f:eb:df:db:43:2c:
         35:2c:63:42:42:46:89:ca:ae:d7:a3:03:26:d4:6c:4d:6e:39:
         24:9d:cf:04:85:52:19:0e:ec:78:1f:c7:7b:ee:80:e5:37:27:
         49:86:25:42:01:8c:48:e7:58:46:49:cd:4c:c8:09:6c:f6:48:
         93:08:1b:c4:41:04:dc:a5:dc:e0:5a:53:f2:fb:62:59:0f:93:
         49:5c:d7:68:81:94:dd:35:d7:3c:7a:28:e2:1f:04:70:24:e6:
         5f:9b:67:f0:ff:5e:9f:2e:8b:2d:bc:80:fd:66:8e:75:7f:c3:
         d1:b6:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:56 2026 by rpki-client