This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          0+eodTt+fNs9GtJmx955VxTZ9q9DrB/rTn+hfw0JjzA=
Subject key identifier:   4B:A0:26:09:41:9E:78:08:F8:D4:10:64:63:5D:9E:A4:1D:24:86:F6
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          0232
Signing time:             Sun 25 Jan 2026 01:21:16 +0000
Manifest this update:     Sun 25 Jan 2026 01:21:15 +0000
Manifest next update:     Sun 01 Feb 2026 01:21:15 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: R//HY7icyapCQE/xyIYG9woHc3E7YzEp3shFUf2MyS8=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Jan 25 01:21:15 2026 GMT
            Not After : Feb  1 01:21:15 2026 GMT
        Subject: CN=6975700c-468f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:69:40:78:94:17:c2:f8:92:52:c2:9f:dd:
                    59:57:6b:bf:b8:53:49:39:f9:1b:f3:18:53:30:5f:
                    22:ea:aa:59:4e:a2:be:ee:55:0d:e6:e0:06:5b:55:
                    24:4f:2b:5f:1a:32:60:76:9f:8a:99:19:1d:09:b8:
                    53:74:74:d5:e0:8c:ae:4a:4c:10:c4:5b:0e:e3:e6:
                    10:8b:79:a6:71:7c:eb:47:19:9f:c6:6c:61:c2:fa:
                    1d:aa:92:dd:b1:02:ca:89:3d:ed:a9:07:70:60:67:
                    d4:34:e5:9e:ed:cf:f3:76:03:3c:7d:ea:11:71:15:
                    63:1c:b2:e9:67:7f:73:91:75:69:59:60:8e:9f:15:
                    f8:b3:8d:54:52:90:ce:4b:b3:52:ba:c8:55:de:4b:
                    a3:b2:4b:30:4f:00:5e:de:22:dc:86:3c:25:25:1b:
                    b0:8c:28:0c:26:93:21:a6:3e:5e:08:be:71:92:b6:
                    c5:41:4b:b0:81:5c:53:54:2f:5d:6b:b8:68:d6:34:
                    c3:49:e9:5c:c3:28:9e:4f:ef:8a:ff:87:e9:87:88:
                    07:54:18:58:9b:d0:29:19:42:3c:67:26:64:f9:80:
                    a8:4c:95:85:86:c3:d1:bd:cb:fb:0c:ff:df:88:31:
                    8b:73:53:c7:a6:7f:bf:96:43:c9:9f:c2:cd:4d:4f:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:26:09:41:9E:78:08:F8:D4:10:64:63:5D:9E:A4:1D:24:86:F6
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2b:c9:d8:5b:78:d3:d4:a4:c8:5b:26:f8:3a:0f:ae:e9:3a:
         34:5e:13:25:99:9d:65:bc:00:0c:f5:f1:37:00:bf:a5:0c:af:
         8a:3c:d0:88:51:9c:f2:f9:b2:e8:32:f3:83:fb:0a:a0:44:29:
         19:3f:04:fb:df:7f:de:c6:2d:08:82:53:c6:e8:c9:d6:b6:e2:
         27:c8:47:20:e8:15:3a:59:36:0b:b9:37:71:00:0f:88:44:58:
         9b:35:57:9d:22:8f:c0:e4:02:ae:aa:c1:2d:58:d6:49:70:43:
         24:e3:ac:4c:98:03:90:ad:0d:81:08:c0:33:22:85:f3:1e:af:
         63:d6:ed:f1:3b:06:19:6e:55:70:a1:98:44:05:f1:ee:2a:a4:
         de:4b:55:82:23:1f:d1:bf:de:0c:dd:aa:b1:a5:b3:bb:80:a9:
         03:ce:2b:db:f5:37:5a:3e:95:16:ba:ab:4c:f1:27:8e:26:ae:
         6d:c0:b5:03:7e:18:5c:60:dc:1e:c7:b8:2a:be:0e:09:77:5d:
         67:3c:7d:19:91:05:fc:27:94:b8:c3:2c:c3:69:96:84:6e:9b:
         57:96:0d:1b:1a:d9:70:d7:36:4c:98:ff:6f:d0:28:57:e2:60:
         30:30:69:d4:12:6b:60:14:2b:76:28:65:5e:c4:9b:c9:9d:22:
         0e:50:ad:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz
Mzc0NkNFODcwHhcNMjYwMTI1MDEyMTE1WhcNMjYwMjAxMDEyMTE1WjAYMRYwFAYD
VQQDDA02OTc1NzAwYy00NjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJBpQHiUF8L4klLCn91ZV2u/uFNJOfkb8xhTMF8i6qpZTqK+7lUN5uAGW1Uk
TytfGjJgdp+KmRkdCbhTdHTV4IyuSkwQxFsO4+YQi3mmcXzrRxmfxmxhwvodqpLd
sQLKiT3tqQdwYGfUNOWe7c/zdgM8feoRcRVjHLLpZ39zkXVpWWCOnxX4s41UUpDO
S7NSushV3kujskswTwBe3iLchjwlJRuwjCgMJpMhpj5eCL5xkrbFQUuwgVxTVC9d
a7ho1jTDSelcwyieT++K/4fph4gHVBhYm9ApGUI8ZyZk+YCoTJWFhsPRvcv7DP/f
iDGLc1PHpn+/lkPJn8LNTU+t1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEugJglB
nngI+NQQZGNdnqQdJIb2MB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD
MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE
QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlK8nYW3jT1KTIWyb4Og+u6To0XhMlmZ1lvAAM9fE3AL+lDK+KPNCI
UZzy+bLoMvOD+wqgRCkZPwT733/exi0IglPG6MnWtuInyEcg6BU6WTYLuTdxAA+I
RFibNVedIo/A5AKuqsEtWNZJcEMk46xMmAOQrQ2BCMAzIoXzHq9j1u3xOwYZblVw
oZhEBfHuKqTeS1WCIx/Rv94M3aqxpbO7gKkDzivb9TdaPpUWuqtM8SeOJq5twLUD
fhhcYNwex7gqvg4Jd11nPH0ZkQX8J5S4wyzDaZaEbptXlg0bGtlw1zZMmP9v0ChX
4mAwMGnUEmtgFCt2KGVexJvJnSIOUK0O
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:58 2026 by rpki-client