This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          t7qKgmoGg1T+zvGooRkrAliiMn3w/LsJGvghZqYX8Lc=
Subject key identifier:   F1:7A:BD:3E:B1:98:1E:76:1F:65:F1:35:C7:95:A1:1D:49:8F:4F:C7
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          0270
Signing time:             Sat 24 Jan 2026 21:24:14 +0000
Manifest this update:     Sat 24 Jan 2026 21:24:13 +0000
Manifest next update:     Sat 31 Jan 2026 21:24:13 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: v0ZvmZEjddBiNhE+S9G4rgkO7vrMkBFToO6koV/vabM=)
                          2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=)
                          3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Jan 24 21:24:13 2026 GMT
            Not After : Jan 31 21:24:13 2026 GMT
        Subject: CN=6975387e-7723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:84:9e:27:b3:dc:8f:2a:8e:61:32:5f:92:
                    41:52:0d:13:ba:19:e7:8f:22:ac:71:57:27:b5:c4:
                    e9:e8:ca:16:6c:28:b5:a9:4c:c7:65:24:ab:6d:99:
                    6b:98:4c:9b:44:86:7d:d9:c7:80:62:61:30:a5:0d:
                    18:31:02:b2:0d:40:22:63:8e:86:4b:9e:b1:fa:be:
                    29:ef:3b:13:e2:30:68:32:55:30:6d:db:15:2d:c5:
                    e2:02:c6:9e:12:6a:62:d7:83:a8:eb:de:3a:c8:41:
                    b9:2a:6c:f3:5e:e6:70:41:4d:92:fd:a2:da:ca:64:
                    e5:aa:33:ba:44:68:05:5f:c3:df:b6:e3:d4:aa:34:
                    85:9e:03:cf:05:61:55:60:09:8b:51:eb:b3:27:a0:
                    bf:d5:6f:3b:27:0f:d3:4d:28:38:54:fb:d5:bf:3a:
                    e7:5d:2b:bf:d0:0d:6f:af:80:fc:f2:23:47:e5:ca:
                    4e:40:4e:02:c2:b5:86:91:b3:f3:bd:c6:4e:bd:53:
                    fb:bb:e3:a1:ed:eb:cb:6e:76:6e:fa:ae:e2:1a:c7:
                    8c:b5:d8:65:2b:5e:28:07:93:1a:b8:fd:43:b3:10:
                    21:5e:ea:e0:47:b8:04:20:ee:90:16:de:26:e2:ed:
                    27:24:1b:83:09:2a:94:07:b9:d8:44:5e:d8:c6:4f:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7A:BD:3E:B1:98:1E:76:1F:65:F1:35:C7:95:A1:1D:49:8F:4F:C7
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:6b:1e:14:9d:8f:2a:04:9c:26:46:e3:36:89:3c:44:e6:0b:
         51:03:14:99:69:d7:f0:36:70:04:ea:b2:b6:4d:2c:e7:5d:59:
         5e:81:d1:9e:05:5c:c4:b6:b7:8d:07:85:c2:48:bd:6a:1e:47:
         b9:7b:04:e2:31:40:4f:b4:9e:3a:a0:3a:3c:bb:c0:16:5e:79:
         55:7b:85:93:af:f0:56:c9:31:d4:d2:e6:b8:e6:6d:12:5d:2e:
         64:dd:91:58:4d:60:d7:90:f7:bc:33:2c:66:8f:33:35:bd:21:
         9e:be:da:54:a6:88:49:dc:97:f5:21:d3:7c:a8:dc:b1:16:4d:
         61:75:d8:49:47:cd:b5:96:21:67:8e:6f:5b:28:6e:7f:10:57:
         bf:76:43:94:bb:c1:24:78:e2:43:91:32:0c:59:d1:ec:a6:4f:
         4b:37:38:11:f3:d9:e3:a6:7c:ec:ae:a0:98:5d:e1:90:4e:0e:
         7a:bc:df:82:7d:a7:4d:f9:fb:e0:57:1f:33:71:2f:b7:04:7a:
         41:71:26:5f:0b:03:9d:28:e4:de:da:ac:f4:c2:43:85:09:8a:
         e9:24:1b:e1:7a:25:62:57:2e:df:33:dd:d5:2c:3c:4a:49:d9:
         f9:be:b1:6a:2a:7f:8a:2f:33:a0:99:47:5a:5f:ac:27:52:10:
         5e:07:02:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5
OTFDQzQwRkIwHhcNMjYwMTI0MjEyNDEzWhcNMjYwMTMxMjEyNDEzWjAYMRYwFAYD
VQQDDA02OTc1Mzg3ZS03NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vKEniez3I8qjmEyX5JBUg0TuhnnjyKscVcntcTp6MoWbCi1qUzHZSSrbZlr
mEybRIZ92ceAYmEwpQ0YMQKyDUAiY46GS56x+r4p7zsT4jBoMlUwbdsVLcXiAsae
Empi14Oo6946yEG5KmzzXuZwQU2S/aLaymTlqjO6RGgFX8PftuPUqjSFngPPBWFV
YAmLUeuzJ6C/1W87Jw/TTSg4VPvVvzrnXSu/0A1vr4D88iNH5cpOQE4CwrWGkbPz
vcZOvVP7u+Oh7evLbnZu+q7iGseMtdhlK14oB5MauP1DsxAhXurgR7gEIO6QFt4m
4u0nJBuDCSqUB7nYRF7Yxk98uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF6vT6x
mB52H2XxNceVoR1Jj0/HMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0
NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a
ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9ax4UnY8qBJwmRuM2iTxE5gtRAxSZadfwNnAE6rK2TSznXVlegdGe
BVzEtreNB4XCSL1qHke5ewTiMUBPtJ46oDo8u8AWXnlVe4WTr/BWyTHU0ua45m0S
XS5k3ZFYTWDXkPe8MyxmjzM1vSGevtpUpohJ3Jf1IdN8qNyxFk1hddhJR821liFn
jm9bKG5/EFe/dkOUu8EkeOJDkTIMWdHspk9LNzgR89njpnzsrqCYXeGQTg56vN+C
fadN+fvgVx8zcS+3BHpBcSZfCwOdKOTe2qz0wkOFCYrpJBvheiViVy7fM93VLDxK
Sdn5vrFqKn+KLzOgmUdaX6wnUhBeBwJ2
-----END CERTIFICATE-----
Generated at Mon Jan 26 13:48:53 2026 by rpki-client