This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
File:                     QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json)
Hash identifier:          vPIcMFxosc3S+VrYpbZfbX7UbWWWsqoqWbMOHq5eOOA=
Subject key identifier:   6C:71:43:81:40:2F:43:F7:70:CB:D1:52:C0:4E:86:C5:B2:23:E7:EC
Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
Certificate issuer:       /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Certificate serial:       0CF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
Manifest number:          0CE9
Signing time:             Sat 24 Jan 2026 17:47:37 +0000
Manifest this update:     Sat 24 Jan 2026 17:47:37 +0000
Manifest next update:     Sat 31 Jan 2026 17:47:37 +0000
Files and hashes:         1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: uL3jvGbQVwhngVzOKnA9ldk9oGzFcFaSq81boc6Sv+s=)
                          2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: CJEgaP8KqXDJxOZP2RnxuUbrLWDCGR55rSwKPSomEHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
                          rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3320 (0xcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
        Validity
            Not Before: Jan 24 17:47:37 2026 GMT
            Not After : Jan 31 17:47:37 2026 GMT
        Subject: CN=697505b9-444a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:2c:2e:ee:80:89:07:48:af:e2:18:05:25:
                    05:8f:10:1f:ba:58:0b:6c:6f:0c:d2:a8:d1:a4:8f:
                    7b:4a:07:48:a8:43:c7:0b:0e:7d:8c:43:57:04:2b:
                    f3:36:b3:c4:57:4f:dd:e6:e5:8b:77:1b:c7:9c:e4:
                    40:17:2d:38:9a:6b:ab:40:52:03:73:fa:52:ca:ac:
                    fd:6b:54:bc:d7:64:8e:4f:7e:d2:60:f1:61:fd:a5:
                    0e:f9:3e:ec:c3:93:a4:02:0e:53:f7:99:cb:e7:28:
                    d2:ea:b2:5a:49:a5:61:0c:a1:ab:71:e0:e3:47:c5:
                    4f:a6:30:e7:0e:e3:a2:47:ec:77:00:fb:68:f4:4d:
                    00:25:8b:10:9e:76:9c:9d:63:2c:c6:5a:cd:08:ae:
                    ed:47:40:0b:28:25:18:91:f1:ea:4f:ab:da:1b:66:
                    7a:f3:ab:24:91:9d:a9:cd:96:33:7d:3e:74:3d:00:
                    b0:d4:a4:a6:b1:50:12:cf:40:15:ab:c1:24:84:88:
                    46:f4:47:84:a5:7e:99:92:6f:be:14:d9:50:bd:b0:
                    29:d4:50:6f:c1:eb:36:27:89:fb:73:ee:42:7c:66:
                    94:62:c9:00:8e:f9:a1:ea:41:b8:41:d7:5c:e6:45:
                    fd:d8:57:af:ea:66:46:40:2f:e1:e3:f1:9c:5c:9f:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:43:81:40:2F:43:F7:70:CB:D1:52:C0:4E:86:C5:B2:23:E7:EC
            X509v3 Authority Key Identifier:
                keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d7:07:78:9d:2d:f8:73:b7:a6:62:4c:e8:28:93:5e:54:e5:
         bb:22:91:29:93:68:b4:0b:c1:e4:f9:1b:88:9e:f5:92:31:05:
         60:2a:eb:0a:b9:41:46:e2:2d:80:5b:4f:00:df:88:0f:40:1e:
         41:ef:e8:d4:82:70:36:eb:40:67:bf:52:29:85:89:8d:79:45:
         0d:c0:3b:44:ba:2b:37:c0:7d:84:8e:80:51:b4:72:89:05:6a:
         c5:15:19:06:32:b0:e9:53:5e:0a:cd:30:58:55:5a:ab:85:e6:
         56:2b:de:86:04:06:37:5d:59:27:fc:ea:ca:32:3e:54:f8:43:
         6f:51:4f:04:2f:87:62:16:03:92:93:f2:79:e1:9d:25:cd:ef:
         6a:80:6b:fa:f0:4a:62:06:a2:2e:b4:ff:eb:98:2e:92:e8:1b:
         b8:d6:1f:9e:f5:88:bd:30:13:65:c1:7f:85:f3:d5:99:65:6c:
         3d:80:e3:10:06:c4:dd:38:e7:ef:35:94:79:1d:1a:95:2e:90:
         83:e7:20:de:5b:29:ef:57:39:0d:11:78:5e:11:0d:e8:28:3b:
         0e:a6:38:57:6d:33:4d:b5:e5:b0:12:76:53:b1:43:12:e9:89:
         a2:b4:46:5f:24:99:1e:82:86:5e:b2:6c:1b:0e:53:4d:69:1e:
         fb:ca:b8:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0
RjgyODhBNEIwHhcNMjYwMTI0MTc0NzM3WhcNMjYwMTMxMTc0NzM3WjAYMRYwFAYD
VQQDDA02OTc1MDViOS00NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkAsLu6AiQdIr+IYBSUFjxAfulgLbG8M0qjRpI97SgdIqEPHCw59jENXBCvz
NrPEV0/d5uWLdxvHnORAFy04mmurQFIDc/pSyqz9a1S812SOT37SYPFh/aUO+T7s
w5OkAg5T95nL5yjS6rJaSaVhDKGrceDjR8VPpjDnDuOiR+x3APto9E0AJYsQnnac
nWMsxlrNCK7tR0ALKCUYkfHqT6vaG2Z686skkZ2pzZYzfT50PQCw1KSmsVASz0AV
q8EkhIhG9EeEpX6Zkm++FNlQvbAp1FBvwes2J4n7c+5CfGaUYskAjvmh6kG4Qddc
5kX92Fev6mZGQC/h4/GcXJ98swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxxQ4FA
L0P3cMvRUsBOhsWyI+fsMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG
QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu
VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA11wd4nS34c7emYkzoKJNeVOW7IpEpk2i0C8Hk+RuInvWSMQVgKusK
uUFG4i2AW08A34gPQB5B7+jUgnA260Bnv1IphYmNeUUNwDtEuis3wH2EjoBRtHKJ
BWrFFRkGMrDpU14KzTBYVVqrheZWK96GBAY3XVkn/OrKMj5U+ENvUU8EL4diFgOS
k/J54Z0lze9qgGv68EpiBqIutP/rmC6S6Bu41h+e9Yi9MBNlwX+F89WZZWw9gOMQ
BsTdOOfvNZR5HRqVLpCD5yDeWynvVzkNEXheEQ3oKDsOpjhXbTNNteWwEnZTsUMS
6YmitEZfJJkegoZesmwbDlNNaR77yrgx
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:39 2026 by rpki-client