This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File:                     Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier:          DLQ6kQf6Dx7IRA8YXLc8tYTp5kpalywVW1lI1Vy2q7A=
Subject key identifier:   B5:7F:BE:9D:57:9D:A3:E6:1E:5C:DB:55:DA:E1:47:2F:86:9F:B6:98
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       07AA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number:          07A0
Signing time:             Sat 24 Jan 2026 18:53:08 +0000
Manifest this update:     Sat 24 Jan 2026 18:53:08 +0000
Manifest next update:     Sat 31 Jan 2026 18:53:08 +0000
Files and hashes:         1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: ksS/7w8Hi8ki5jL9e5eNVr8Ofgwnpm0T3I6A8F8/YCY=)
                          2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Validity
            Not Before: Jan 24 18:53:08 2026 GMT
            Not After : Jan 31 18:53:08 2026 GMT
        Subject: CN=69751514-8eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:e4:cf:4d:ee:3c:b7:3a:ad:b9:65:05:8d:
                    6c:a5:c5:3b:c8:01:cd:7f:51:c5:1b:11:26:bb:c2:
                    8b:3a:6e:1e:ce:68:f7:b9:44:28:9d:fa:89:f1:a4:
                    a4:08:8f:5c:63:6d:9d:98:5c:47:d8:02:e1:28:9c:
                    ab:6b:fd:bd:8c:bc:7e:39:3e:48:8f:90:01:a8:28:
                    68:64:9c:c6:15:92:6c:77:a9:5b:b5:67:85:a6:39:
                    06:31:78:16:c5:43:df:da:6d:ed:2e:f1:d5:d2:0b:
                    95:9c:a3:10:f5:f3:4a:59:0c:93:1b:2f:0b:0d:fb:
                    1b:6c:b1:a6:6e:b2:e4:f7:6d:fe:e6:e9:2a:5f:dd:
                    1b:4d:bf:bd:d6:92:55:c8:0f:27:61:72:55:1f:f6:
                    77:20:0f:ec:3a:b9:2e:46:a6:01:62:ce:f5:25:29:
                    d6:e7:4e:a1:38:16:31:92:cd:e3:89:02:40:0f:5e:
                    4a:51:a8:61:07:9e:c5:10:66:1d:21:52:40:63:06:
                    13:52:16:02:2b:54:8f:0a:f1:11:c3:5c:f1:fb:dd:
                    e9:be:b7:81:fc:cf:f5:92:27:81:91:fc:7b:ea:e6:
                    0a:89:95:7c:ec:77:3f:1b:24:c6:ff:d2:ee:42:e7:
                    52:5b:6d:b7:fa:91:68:e9:2f:d4:e2:68:27:0c:63:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7F:BE:9D:57:9D:A3:E6:1E:5C:DB:55:DA:E1:47:2F:86:9F:B6:98
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:eb:c4:b5:af:0b:89:ee:5b:51:3b:08:74:5c:1c:1e:42:
         4e:51:04:5d:02:1b:6a:6d:a0:61:a9:80:36:5c:03:98:36:27:
         76:22:02:6b:71:55:97:28:74:92:6f:bc:8f:e3:2f:0e:e3:91:
         b7:56:a2:ef:f9:93:b3:44:1e:c8:0b:73:92:76:0f:cf:30:fd:
         30:bb:ec:6d:55:29:7b:fd:36:7f:b2:cf:93:a2:a2:e4:72:05:
         09:96:30:20:25:30:33:2d:a9:7d:82:7f:3a:a1:16:3c:48:bc:
         58:b2:8a:19:0b:bb:0f:06:90:ec:49:bd:6b:d1:d0:7a:8c:fc:
         30:9b:72:02:06:75:84:52:d6:9b:9f:d2:23:5b:ce:e5:e8:6e:
         b4:57:bf:1b:94:05:26:bf:8a:61:6e:db:c8:8f:30:ae:25:e4:
         6a:ec:56:0e:24:c3:73:4b:f3:5d:e6:05:ed:c3:e0:c4:81:58:
         3e:8f:cb:b9:c6:1e:d4:3b:06:34:b2:a8:6e:3c:9a:03:6c:45:
         5a:9b:e3:3d:2f:a0:1e:81:94:7e:d9:b0:e2:c8:e3:6b:01:a4:
         9e:17:27:c7:2c:cc:18:bc:ed:8d:14:15:ef:cb:d4:64:de:20:
         48:c4:1c:40:15:32:b7:5b:99:21:59:ee:9b:79:a7:2f:04:8b:
         ed:b9:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:30:22 2026 by rpki-client