This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File:                     aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier:          4oS0tyvQIg4kO60SmET6bR6o28kv6GaLWM+ajy0t2A4=
Subject key identifier:   04:1C:B7:F3:E0:0B:F2:81:AD:8E:F4:37:EE:A1:6C:A2:E7:9E:2A:0C
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer:       /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number:          AB
Signing time:             Sun 25 Jan 2026 05:23:11 +0000
Manifest this update:     Sun 25 Jan 2026 05:23:11 +0000
Manifest next update:     Sun 01 Feb 2026 05:23:11 +0000
Files and hashes:         1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: /o/G0fjtVFrTWMBMiueCOmI+u3rA/hJeHxloqwx8gEA=)
                          2: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: WNNdgOa5uNp5r/RGualxND4rs3LsvjdsPmDrTIMSRgg=)
                          3: 56AF0502E0F211F0800F01165C6F56BC.roa (hash: vQcaLA4nIYWWjg4a4BCyYh3EhrVOVINM1+lW1W2ysWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
                          rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
        Validity
            Not Before: Jan 25 05:23:11 2026 GMT
            Not After : Feb  1 05:23:11 2026 GMT
        Subject: CN=6975a8bf-e8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:fb:85:8c:40:bc:d6:38:e7:c1:34:4a:ce:
                    74:ef:52:e1:71:7a:b7:08:eb:b5:3a:ac:b5:0d:9e:
                    44:a5:94:94:21:64:1e:59:0c:13:2e:b6:fb:ff:9f:
                    90:ad:2e:09:a8:e0:57:a8:c0:bb:35:f7:bc:d6:e2:
                    de:1f:88:be:72:b1:d9:d4:8f:2e:9a:72:96:bf:8c:
                    38:78:b3:4a:1b:8d:fb:0f:c1:1d:e3:f1:02:e2:46:
                    4c:e0:cf:ff:11:bb:85:e0:f9:06:6e:bd:0e:80:ae:
                    61:61:24:c0:85:b3:fe:bb:a3:f0:ff:22:6b:30:49:
                    11:ce:f8:3b:df:05:a5:67:35:15:5e:4a:b4:3a:5d:
                    d0:21:b7:e4:2f:62:53:f3:02:5a:ca:5b:bb:d9:5c:
                    a1:36:36:ff:f1:98:01:47:9c:52:d4:d5:6c:80:9d:
                    06:af:06:3a:e8:45:54:10:cf:09:c1:70:27:5e:ac:
                    37:1d:47:42:f9:8c:66:75:b3:a1:8b:d3:69:29:61:
                    2a:df:04:b5:9f:b8:fe:a3:12:6b:6c:d3:e3:28:91:
                    96:91:ae:68:b6:d0:7a:f1:ca:e4:84:b4:cf:04:3b:
                    ae:88:5e:21:4c:de:40:0d:71:24:8f:f3:87:e3:57:
                    cb:48:3a:50:25:76:ba:a5:60:2d:6b:d6:2e:06:68:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:B7:F3:E0:0B:F2:81:AD:8E:F4:37:EE:A1:6C:A2:E7:9E:2A:0C
            X509v3 Authority Key Identifier:
                keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3d:c6:1b:6d:08:92:6a:77:07:b7:73:71:c5:61:80:5b:20:
         96:94:b7:33:10:a4:4f:33:14:55:38:9a:d0:9e:42:e1:1c:c4:
         3a:64:14:65:ad:43:36:21:c8:88:a7:4e:ba:b5:5f:d0:18:82:
         40:42:2c:c7:2f:06:3d:b0:59:2c:a1:30:3f:9c:05:c8:46:ff:
         3d:01:cb:d7:3e:0e:02:05:69:1f:69:53:13:04:f6:32:bd:86:
         51:aa:b6:79:1b:13:38:7b:4d:51:ba:0d:f2:4b:3c:38:3c:b7:
         cb:18:4e:57:35:f7:69:44:f1:c7:95:fd:30:b3:07:e2:fc:28:
         65:e8:73:c4:86:34:72:22:90:3e:cc:3c:68:7e:91:23:63:b0:
         3a:06:ce:04:70:6d:75:28:c6:76:3e:7a:0b:9c:2b:70:e3:a5:
         5f:f7:fd:37:7c:1e:60:f5:ff:a7:65:e5:16:6d:a3:34:b5:3a:
         86:ba:c8:92:95:8c:56:34:2f:09:c6:93:9c:eb:c3:d8:7c:59:
         3f:64:ae:bb:d4:4d:16:30:69:75:fb:5b:54:06:85:f8:9d:f8:
         a9:33:8c:74:c9:ba:1a:7b:35:e9:83:3f:b2:ff:93:b4:b8:2c:
         87:fc:ad:45:79:17:dd:ff:38:21:0c:84:37:31:bf:94:24:8d:
         cc:76:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:41:29 2026 by rpki-client