This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
File:                     PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json)
Hash identifier:          i4PAM8MroTQ7eNpF7PiC9H8+/d+OcfFiurDggUU1M+8=
Subject key identifier:   1C:37:AD:4D:55:F1:82:20:82:DC:40:DB:0F:20:19:28:1C:81:09:59
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Certificate issuer:       /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
Manifest number:          0182
Signing time:             Sun 25 Jan 2026 03:00:25 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:24 +0000
Manifest next update:     Sun 01 Feb 2026 03:00:24 +0000
Files and hashes:         1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 5Q2RHSHsbeVemBoi4cV+YM2CzKMb9YD3Xsd4ZDaEWaQ=)
                          2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=)
                          3: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
        Validity
            Not Before: Jan 25 03:00:24 2026 GMT
            Not After : Feb  1 03:00:24 2026 GMT
        Subject: CN=69758749-b815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:22:24:cc:49:48:f3:87:33:44:91:92:0c:
                    8f:49:8d:85:a5:f6:e5:05:53:b9:3c:4e:65:5b:b1:
                    24:74:ef:ce:6b:b0:57:b2:a1:88:2c:53:2e:c1:be:
                    60:31:f0:1e:6d:3a:85:6d:81:1c:7c:a2:92:71:91:
                    66:39:8d:86:99:e7:54:8f:6a:0a:e7:14:72:ae:fd:
                    29:b0:a9:00:d5:28:22:06:3e:cb:1f:27:da:ea:c4:
                    c8:79:cc:14:0d:64:5b:92:79:c3:27:95:ae:67:af:
                    27:1d:d2:df:bf:7f:ee:7f:50:1c:81:43:e9:4c:f9:
                    1b:41:3f:8f:33:84:03:a9:29:d0:51:59:ef:b4:a6:
                    52:86:2c:fa:54:82:d4:a0:18:33:97:30:fa:e8:0d:
                    68:2c:89:0f:00:1e:ec:07:a6:25:5e:f5:27:1c:64:
                    4a:0c:69:14:d2:9a:a1:f7:b6:2e:48:4b:a8:9b:57:
                    8f:53:4c:6e:ef:f5:db:bb:af:a4:35:9a:49:c9:3f:
                    ee:30:35:27:a4:cd:44:0f:f9:24:3c:95:e6:a4:f0:
                    58:33:68:f3:f3:7f:7a:b1:9d:7d:e3:6c:d6:49:91:
                    76:6b:e1:2f:d8:eb:4f:9b:04:4d:96:f5:2f:0e:aa:
                    65:0f:37:94:e8:28:9d:e0:75:b8:38:c7:1e:98:a5:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:AD:4D:55:F1:82:20:82:DC:40:DB:0F:20:19:28:1C:81:09:59
            X509v3 Authority Key Identifier:
                keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:50:1e:1f:f7:77:c3:33:3f:f4:2b:70:fd:03:61:16:be:ab:
         a5:cc:b3:62:01:cc:a0:f8:b2:82:cf:b6:07:bd:dd:9a:ba:f1:
         ee:b4:18:48:0e:74:23:70:44:88:93:cb:bb:0e:99:33:3a:30:
         bd:16:ce:28:c5:4a:15:cc:77:25:5b:02:32:e5:e3:96:5d:35:
         25:20:b8:2f:87:bd:81:dd:e4:f7:61:f2:88:57:f0:76:e1:83:
         bf:f8:a9:a2:4e:bd:f3:c7:2c:87:06:09:11:46:14:9e:00:8d:
         80:26:dd:d4:b1:49:d2:47:d7:72:24:98:d8:cc:2a:b8:e1:43:
         1c:39:84:f6:45:aa:27:b5:5e:e6:c2:87:85:39:59:15:58:e3:
         32:ec:03:51:4d:3c:9b:71:21:9e:d6:94:63:dc:2e:f8:f3:68:
         aa:f6:2d:54:8d:a0:38:0d:3d:23:41:47:a0:de:72:c6:95:f9:
         e0:da:01:ae:c7:24:2f:24:4f:f8:ee:86:ab:85:2b:09:35:95:
         7c:ee:69:b2:b4:b4:6a:09:cb:84:26:6f:5c:57:87:37:4d:97:
         8b:a6:6b:ec:c7:ac:f2:f5:22:77:0c:ab:04:39:08:85:7e:27:
         c6:1d:f5:c3:c6:61:62:b2:de:f3:c8:30:0a:b6:e6:55:8b:14:
         46:86:9e:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5
OEREREEzNzIwHhcNMjYwMTI1MDMwMDI0WhcNMjYwMjAxMDMwMDI0WjAYMRYwFAYD
VQQDDA02OTc1ODc0OS1iODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAMiJMxJSPOHM0SRkgyPSY2FpfblBVO5PE5lW7EkdO/Oa7BXsqGILFMuwb5g
MfAebTqFbYEcfKKScZFmOY2GmedUj2oK5xRyrv0psKkA1SgiBj7LHyfa6sTIecwU
DWRbknnDJ5WuZ68nHdLfv3/uf1AcgUPpTPkbQT+PM4QDqSnQUVnvtKZShiz6VILU
oBgzlzD66A1oLIkPAB7sB6YlXvUnHGRKDGkU0pqh97YuSEuom1ePU0xu7/Xbu6+k
NZpJyT/uMDUnpM1ED/kkPJXmpPBYM2jz8396sZ1942zWSZF2a+Ev2OtPmwRNlvUv
DqplDzeU6Cid4HW4OMcemKVLUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBw3rU1V
8YIggtxA2w8gGSgcgQlZMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz
RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0
S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSUB4f93fDMz/0K3D9A2EWvqulzLNiAcyg+LKCz7YHvd2auvHutBhI
DnQjcESIk8u7DpkzOjC9Fs4oxUoVzHclWwIy5eOWXTUlILgvh72B3eT3YfKIV/B2
4YO/+KmiTr3zxyyHBgkRRhSeAI2AJt3UsUnSR9dyJJjYzCq44UMcOYT2RaontV7m
woeFOVkVWOMy7ANRTTybcSGe1pRj3C7482iq9i1UjaA4DT0jQUeg3nLGlfng2gGu
xyQvJE/47oarhSsJNZV87mmytLRqCcuEJm9cV4c3TZeLpmvsx6zy9SJ3DKsEOQiF
fifGHfXDxmFist7zyDAKtuZVixRGhp4I
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:54 2026 by rpki-client