This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
File:                     cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json)
Hash identifier:          0bstr+inGbm+JTAvMNKdBpTlDPn70qf6xs6WQjnc63A=
Subject key identifier:   41:47:CE:12:B7:6F:5F:CD:A6:85:06:40:64:8B:D5:17:10:48:30:9C
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Certificate issuer:       /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial:       0779
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
Manifest number:          0771
Signing time:             Sat 24 Jan 2026 20:57:29 +0000
Manifest this update:     Sat 24 Jan 2026 20:57:28 +0000
Manifest next update:     Sat 31 Jan 2026 20:57:28 +0000
Files and hashes:         1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: XUDy6GTFV9oHkCtJFCNrISfE4/M4zZhg5MlNLTRKXk8=)
                          2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: m0A4bmKYQpyQxbJtwty9jze7vG5EqP7rfA85eJFYPgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
                          rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
        Validity
            Not Before: Jan 24 20:57:28 2026 GMT
            Not After : Jan 31 20:57:28 2026 GMT
        Subject: CN=69753239-7e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:43:85:ff:ef:f0:af:b9:09:1e:2a:ff:4d:
                    82:92:96:a3:8a:70:ca:2f:1e:51:03:b0:8a:e4:6d:
                    15:e3:75:58:0b:36:7b:b7:f3:01:54:cc:12:57:d0:
                    49:7a:e7:f8:cc:ec:ef:28:6b:79:c2:ee:f6:8a:f3:
                    71:3e:cc:c8:35:19:b0:d6:83:2e:37:72:58:da:be:
                    72:ce:12:0b:2d:ab:53:78:ea:70:11:ad:a0:6b:d6:
                    d0:e6:4c:a9:93:7c:7f:80:ba:85:88:f0:f7:d0:24:
                    51:82:c4:48:f6:9d:a6:e3:d0:32:a9:57:5b:73:21:
                    7a:99:1d:6b:a2:cf:d6:2b:06:b0:d7:6f:da:a3:a4:
                    d5:e8:ed:f4:cc:73:c7:a7:52:b7:67:a5:c8:5b:34:
                    29:a6:1a:c8:0c:3e:c0:da:02:82:81:fa:69:36:d1:
                    84:6f:8d:e2:d9:26:4f:2d:44:be:58:44:e2:e8:56:
                    75:59:2d:cd:bd:e8:50:7e:73:02:42:dd:ed:61:68:
                    7a:85:da:f4:61:25:f0:fb:0d:ee:2d:fc:c3:b0:43:
                    8b:d8:74:ef:ef:ec:89:18:3d:10:09:7d:10:1e:d3:
                    24:24:72:ab:1d:bc:c0:11:b3:62:9c:bb:76:36:69:
                    fc:e6:9d:a1:bb:b3:05:0f:11:a8:be:c9:42:b2:78:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:47:CE:12:B7:6F:5F:CD:A6:85:06:40:64:8B:D5:17:10:48:30:9C
            X509v3 Authority Key Identifier:
                keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:85:1f:19:8b:b1:d8:04:7a:8f:67:2e:dd:af:79:99:cb:47:
         ce:0f:21:e5:7e:9d:00:32:cb:0d:80:9b:04:a4:53:8f:05:33:
         21:b9:6e:35:68:2f:05:7a:b5:11:fb:f5:99:be:e8:64:0c:d8:
         e1:4b:14:b8:19:cb:40:c5:46:27:c6:ea:45:da:e5:2e:5c:2c:
         8b:8c:d6:65:51:cf:64:05:ff:17:78:a2:b4:20:ec:2c:e5:de:
         33:ab:09:71:75:f5:44:e8:79:a2:d4:9a:a5:04:ec:b3:38:ad:
         22:e6:1f:f3:0b:4c:8f:05:d4:c0:a7:cf:77:dd:a1:17:4d:21:
         f5:f8:76:c8:57:3f:7f:32:04:0c:d8:81:61:8f:c9:ee:ba:23:
         39:0d:48:92:a0:60:86:85:5a:df:11:df:a9:11:f1:74:21:e1:
         1c:91:a2:9e:29:cd:c2:a3:29:70:ea:0a:7e:be:db:0f:7d:44:
         3b:0f:9a:d2:bf:34:36:c8:8e:0f:0a:4a:c1:39:71:c0:4f:bc:
         04:2d:85:5e:f5:3c:7a:db:f1:8d:22:1a:86:18:6d:70:6a:db:
         bc:4e:df:ee:e5:99:b2:20:97:b5:6f:bb:19:9d:5b:13:06:9e:
         7e:7f:21:fe:db:18:66:d4:fe:78:c6:7d:95:25:9a:2d:12:1c:
         fd:24:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:53 2026 by rpki-client