This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
File:                     q6uaWObZNbfys4ayc-NP3Dhg0pk.mft (raw, json)
Hash identifier:          lC9i+yarLse8FQaEWXABM54KczIk8IjTnEsgZ2tUkmQ=
Subject key identifier:   88:E4:5B:32:BA:0A:37:DB:6A:B5:5A:F4:82:91:B1:DF:26:BF:19:B8
Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99
Certificate issuer:       /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
Manifest number:          0250
Signing time:             Sun 25 Jan 2026 01:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 01:01:24 +0000
Manifest next update:     Sun 01 Feb 2026 01:01:24 +0000
Files and hashes:         1: q6uaWObZNbfys4ayc-NP3Dhg0pk.crl (hash: P1XC8A0Lz8SCG1YdjXZv/EfFF3U0NxX5XVX0Kk7qYGg=)
                          2: 0CDB293E6E3F11ED9DF20483C4F9AE02.roa (hash: d+wu5/8SQF07OZNomUNLLvrSwSOmchI/wXzBDk7VXfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl
                          rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915802F, serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
        Validity
            Not Before: Jan 25 01:01:24 2026 GMT
            Not After : Feb  1 01:01:24 2026 GMT
        Subject: CN=69756b65-6ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:cc:b5:b8:2c:17:16:ad:1a:41:5b:48:d1:
                    c5:be:1a:37:44:46:0c:73:a1:ff:68:29:0e:94:8e:
                    d4:48:3e:31:fe:0a:c8:f8:f0:07:28:d1:ce:a2:dd:
                    b0:c8:63:fe:a2:ea:b4:ca:7d:b4:ba:71:80:f3:f4:
                    d0:e4:de:02:4b:f8:2f:04:a5:0e:15:53:46:ac:4a:
                    49:2a:1e:bf:78:7a:a5:a8:49:73:f9:f8:f3:44:54:
                    cb:66:f6:c0:81:58:4d:19:50:4a:ce:db:1a:6e:0a:
                    24:37:6a:3f:2e:74:81:a5:c3:ec:78:72:96:84:0a:
                    a2:f8:c1:3b:37:ef:b0:1e:7c:7b:8a:8f:ec:18:4d:
                    7c:76:ac:39:e7:95:b0:ab:5c:2c:d9:15:f1:96:b6:
                    59:05:dc:16:da:de:ad:a2:56:33:02:65:d5:e5:18:
                    98:99:35:d2:03:ff:eb:1f:59:c0:b6:47:a6:69:19:
                    09:bb:74:b2:13:2e:c2:d0:48:0f:6d:84:ce:bb:db:
                    d1:fc:9d:59:12:38:26:22:22:ca:5d:d7:16:aa:2f:
                    3a:0c:e6:2f:6a:ab:12:42:90:d4:ec:15:e1:70:69:
                    a9:2c:44:f5:7d:8c:e8:50:39:4b:eb:36:9a:77:fa:
                    12:f2:3b:09:a0:f9:2b:55:ff:a0:9c:d0:c1:88:62:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E4:5B:32:BA:0A:37:DB:6A:B5:5A:F4:82:91:B1:DF:26:BF:19:B8
            X509v3 Authority Key Identifier:
                keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:22:b8:69:55:f1:65:83:20:18:f3:d3:a9:68:49:2c:e2:
         db:6a:e2:de:3e:db:1b:4c:a7:54:ce:ec:dc:7d:79:62:b0:01:
         9b:2a:aa:8a:cf:b4:1d:74:65:b1:30:17:67:28:93:d3:88:25:
         5d:b5:03:e6:7b:08:09:08:f6:ef:99:4f:e1:8d:14:47:c3:25:
         b7:5c:c4:9c:41:c0:ee:98:d3:8e:35:31:b7:79:d5:c5:82:c7:
         ea:43:8b:51:f2:d4:11:d3:8e:b4:65:11:99:c4:3a:dc:76:6d:
         7b:3f:4a:16:5e:4f:47:af:b2:9f:d1:53:a1:c6:35:44:e4:a5:
         c9:58:84:e3:68:c6:aa:5b:1a:42:4d:67:b7:81:b1:7a:c2:ef:
         37:eb:9e:3b:8b:76:91:08:2d:f0:88:36:d5:23:12:6e:80:f9:
         7c:9b:d9:e6:01:f5:c2:44:10:09:d7:7f:83:c4:f1:13:e0:e8:
         72:57:26:77:a8:eb:ee:d5:94:3c:5c:5e:ba:e1:d3:6b:9f:b6:
         20:4c:e7:9c:88:d7:0a:69:18:b8:06:f9:d6:d0:cb:a3:4f:75:
         b0:32:d1:f1:dd:43:c6:8e:49:00:a3:79:d5:63:8d:58:60:d4:
         ff:19:8b:60:d8:34:0a:0c:a9:53:77:ee:1f:40:9f:1c:6d:61:
         f1:53:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:26 2026 by rpki-client