This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File:                     q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier:          KjLJ4C7Wk7XdwtOB+V9vp2LMwX40LzYROFE9lD7o8x4=
Subject key identifier:   BE:36:DB:84:69:72:9F:5D:38:3E:49:F3:C2:92:0E:A8:04:5A:96:5F
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer:       /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial:       1946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number:          192D
Signing time:             Sat 24 Jan 2026 16:13:36 +0000
Manifest this update:     Sat 24 Jan 2026 16:13:36 +0000
Manifest next update:     Sat 31 Jan 2026 16:13:36 +0000
Files and hashes:         1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: vjIzDvLDediG/FvUKbPBZfzu99HbdEuA3FTih/SF4Zc=)
                          2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
                          rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6470 (0x1946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
        Validity
            Not Before: Jan 24 16:13:36 2026 GMT
            Not After : Jan 31 16:13:36 2026 GMT
        Subject: CN=6974efb0-0056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:c3:cb:25:f3:1e:76:ee:0d:9b:4f:ce:e6:
                    92:25:aa:3b:d1:21:33:28:e9:f1:63:fb:c3:0d:86:
                    58:96:09:75:c6:57:3d:20:f5:e3:ce:37:03:92:32:
                    f6:84:44:d1:21:e6:4b:db:8e:cb:99:62:04:55:1a:
                    52:5e:fc:71:b7:63:fb:0b:f9:6d:a5:27:a7:99:56:
                    9a:fc:aa:55:3b:30:43:9c:c1:c0:7c:e4:dc:24:6b:
                    1d:3c:20:20:51:e7:0b:e3:25:94:68:72:67:f6:ad:
                    1d:3f:18:01:f3:40:d0:0c:40:c4:c8:fc:57:aa:a7:
                    d8:17:f5:8d:5e:6b:66:70:2f:fa:1e:6b:a1:78:95:
                    cb:10:51:77:8d:2c:f4:99:e7:c2:37:eb:22:3b:29:
                    ec:8c:17:3a:63:ac:53:fd:a4:96:67:6f:e1:a2:ee:
                    80:b6:e0:d1:9d:61:25:11:39:14:6c:3b:4d:df:da:
                    c3:34:db:8e:8e:27:7c:a6:af:75:d4:28:cc:7e:39:
                    e6:08:d4:d0:56:01:d8:cf:9d:35:a3:e0:56:73:ca:
                    e7:56:5c:be:32:3b:b5:3e:ad:aa:4d:cf:4b:81:3d:
                    ac:72:99:f1:c8:4d:16:67:aa:2f:0e:d0:31:11:73:
                    4e:22:15:a8:5c:e9:c7:18:5a:8a:ee:fc:6a:c7:4c:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:DB:84:69:72:9F:5D:38:3E:49:F3:C2:92:0E:A8:04:5A:96:5F
            X509v3 Authority Key Identifier:
                keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:39:d7:cb:09:be:88:10:0c:57:29:7c:8f:fa:3f:8c:fe:0f:
         9e:cf:69:78:f0:f5:2e:7d:0e:fe:57:dc:10:c9:c0:10:81:23:
         ad:74:63:24:ce:e5:ce:3c:5e:9f:a4:06:1c:cd:23:54:d8:4c:
         c2:48:ee:21:e8:3d:55:af:dd:34:36:59:b2:c1:73:b1:63:c7:
         cb:ee:ae:d5:20:7f:d6:87:cc:61:72:ee:39:24:87:78:c3:ee:
         b3:c1:72:56:29:4e:42:0e:02:93:30:45:7f:b7:6f:7c:26:43:
         7c:e9:91:cc:96:d1:3c:c1:2a:34:31:29:49:8c:b6:bb:7f:c5:
         c2:7a:fb:39:96:54:ac:0a:01:af:a6:cd:cc:6f:26:c2:2a:fe:
         78:cf:f8:85:11:7e:12:4c:75:61:40:67:e3:88:52:91:f6:f6:
         e9:80:da:8f:b3:36:93:19:96:f0:b8:97:cb:44:be:4e:a4:cf:
         05:b4:49:cf:0d:e8:11:83:fe:6f:da:03:6c:bd:94:46:21:61:
         6d:9e:2b:8b:cc:57:80:35:72:5d:24:df:a4:e3:14:10:67:fc:
         48:2a:94:b3:e5:e4:77:91:e7:d4:be:21:6d:7e:75:90:58:94:
         e3:53:ed:15:e3:1b:35:1c:77:b3:20:34:5e:45:04:f4:12:ab:
         98:88:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:18:15 2026 by rpki-client