This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File:                     ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier:          wZsgBsk0FrDdwIeOBk1GxgOSclBX+tny9cmQzsAvtqA=
Subject key identifier:   72:A1:12:B7:29:1D:94:8C:5A:DE:71:DA:07:5E:0C:0D:1A:08:2F:2E
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number:          E0
Signing time:             Sun 25 Jan 2026 04:47:27 +0000
Manifest this update:     Sun 25 Jan 2026 04:47:26 +0000
Manifest next update:     Sun 01 Feb 2026 04:47:26 +0000
Files and hashes:         1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: DmxBNf4rjW1wqUeV22oOccvWayTLXqHjYfgaC06o4OY=)
                          2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: xcqj8HSqchRdLe4+Q8uH5I216oeW9jwEXnaM3/r/V9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: Jan 25 04:47:26 2026 GMT
            Not After : Feb  1 04:47:26 2026 GMT
        Subject: CN=6975a05f-6809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:f8:0d:0e:23:cd:27:ac:a7:dd:4c:62:71:
                    40:22:03:b2:38:69:62:14:f9:68:c7:9f:00:65:d7:
                    2f:90:02:2b:25:b1:6a:b1:9e:90:17:0d:ec:38:00:
                    35:23:02:df:1e:ef:bf:cf:f9:43:3f:62:83:e1:c4:
                    1e:3f:6c:2d:ae:d1:0f:c9:79:6b:23:14:21:d1:5f:
                    fd:88:96:ca:48:a4:41:12:b1:ff:a9:f3:0e:32:80:
                    cd:18:59:ff:c0:ac:f8:b2:7e:a1:01:7e:88:46:2c:
                    49:31:67:86:50:72:64:27:56:2a:bb:ae:0e:2a:d8:
                    8a:53:65:18:84:5a:9c:79:de:46:42:92:31:44:cf:
                    2b:da:a1:45:f8:57:ca:0d:22:e2:bf:11:16:c6:a0:
                    4c:d7:d5:73:3c:40:12:a6:8b:13:04:3a:3e:8b:50:
                    5b:94:43:c1:f5:1a:e3:49:97:6c:4b:90:4f:f4:3c:
                    19:ed:3b:cc:dd:b6:7b:c2:cc:c5:19:77:9f:3b:39:
                    a9:f6:d1:2c:fc:dc:e1:94:14:a3:fc:b3:3c:ed:f6:
                    0b:12:c6:c6:1b:01:3a:fa:9a:09:8f:c2:9a:fd:93:
                    01:98:31:36:a9:b1:ad:94:a1:26:cf:7a:8a:13:f8:
                    82:3c:a9:4c:98:e7:e3:4d:29:4e:a1:2a:ea:15:2a:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:12:B7:29:1D:94:8C:5A:DE:71:DA:07:5E:0C:0D:1A:08:2F:2E
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:aa:cf:fc:26:75:d8:b6:7c:39:9e:6a:9d:ff:17:37:b7:
         e9:e1:55:78:99:8f:4c:9a:b1:46:e7:ad:4c:73:ef:23:dd:67:
         c4:67:d0:b2:94:21:0b:88:29:f1:7a:1b:ca:32:26:6b:4c:c8:
         2c:f7:b4:e6:6e:b0:ae:92:6f:c7:57:74:cc:aa:bc:5d:58:23:
         85:cc:17:9d:78:38:7e:d0:2b:58:16:e3:3a:47:e4:32:db:1f:
         3e:72:2b:a7:14:c7:08:54:d2:78:06:da:08:48:28:0d:65:69:
         ba:6c:de:7e:8f:16:4f:c8:89:16:08:2c:f0:86:50:af:1d:df:
         72:19:c7:17:30:3f:6b:f7:68:7b:08:1d:be:5a:33:a8:65:92:
         c2:09:92:d2:ab:21:42:85:13:a3:57:fa:94:45:77:71:ab:ef:
         07:15:3f:9b:6d:7e:c9:2f:80:ab:ea:6b:77:4f:b3:85:6c:0b:
         73:b3:e8:61:21:29:ab:05:94:4c:66:9d:d0:8c:82:40:cd:6a:
         a5:ca:1d:d6:2b:70:13:9e:94:95:ba:2b:b3:3b:99:20:c4:86:
         7e:c3:bd:26:fe:72:be:47:4c:0a:57:6f:ed:ca:1d:c3:2c:67:
         0b:8e:38:72:92:42:49:bc:f3:33:36:30:7a:03:e8:20:d3:96:
         0a:70:0b:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1
NTk5OTYzRjIwHhcNMjYwMTI1MDQ0NzI2WhcNMjYwMjAxMDQ0NzI2WjAYMRYwFAYD
VQQDDA02OTc1YTA1Zi02ODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmKL4DQ4jzSesp91MYnFAIgOyOGliFPlox58AZdcvkAIrJbFqsZ6QFw3sOAA1
IwLfHu+/z/lDP2KD4cQeP2wtrtEPyXlrIxQh0V/9iJbKSKRBErH/qfMOMoDNGFn/
wKz4sn6hAX6IRixJMWeGUHJkJ1Yqu64OKtiKU2UYhFqced5GQpIxRM8r2qFF+FfK
DSLivxEWxqBM19VzPEASposTBDo+i1BblEPB9RrjSZdsS5BP9DwZ7TvM3bZ7wszF
GXefOzmp9tEs/NzhlBSj/LM87fYLEsbGGwE6+poJj8Ka/ZMBmDE2qbGtlKEmz3qK
E/iCPKlMmOfjTSlOoSrqFSrOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKhErcp
HZSMWt5x2gdeDA0aCC8uMB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3
RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx
NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmUKrP/CZ12LZ8OZ5qnf8XN7fp4VV4mY9MmrFG561Mc+8j3WfEZ9Cy
lCELiCnxehvKMiZrTMgs97TmbrCukm/HV3TMqrxdWCOFzBedeDh+0CtYFuM6R+Qy
2x8+ciunFMcIVNJ4BtoISCgNZWm6bN5+jxZPyIkWCCzwhlCvHd9yGccXMD9r92h7
CB2+WjOoZZLCCZLSqyFChROjV/qURXdxq+8HFT+bbX7JL4Cr6mt3T7OFbAtzs+hh
ISmrBZRMZp3QjIJAzWqlyh3WK3ATnpSVuiuzO5kgxIZ+w70m/nK+R0wKV2/tyh3D
LGcLjjhykkJJvPMzNjB6A+gg05YKcAuq
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:22 2026 by rpki-client