This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File:                     PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier:          lLEJlv3WYlTYX7vJa4UpQkENbGnu2dF1sCQgP6qpm4A=
Subject key identifier:   97:31:12:C3:9F:62:FE:A7:19:BA:B6:CE:66:10:58:5D:F2:6F:2E:EE
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer:       /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number:          0177
Signing time:             Fri 23 Jan 2026 03:04:30 +0000
Manifest this update:     Fri 23 Jan 2026 03:04:30 +0000
Manifest next update:     Fri 30 Jan 2026 03:04:30 +0000
Files and hashes:         1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: cQ60qKoW29sVc4mbqJxQ2+tVoYJHKCweZ7ZINl7nDpA=)
                          2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: idAFhUmAkJaKGqP8j1ITDESnMkqFyJap6af21HGHAgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
                          rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
        Validity
            Not Before: Jan 23 03:04:30 2026 GMT
            Not After : Jan 30 03:04:30 2026 GMT
        Subject: CN=6972e53e-7ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:f0:b2:9b:12:da:84:53:b7:d9:2f:ea:69:
                    e5:c7:89:c2:84:37:ce:b9:6b:eb:fc:7f:e5:43:62:
                    16:22:51:5c:3a:7c:df:0b:34:97:ea:8c:d3:84:26:
                    09:4f:e0:3d:1f:b3:17:5b:6a:c2:1f:61:5d:b4:d5:
                    e5:f7:33:e5:26:f9:bf:86:f7:43:7b:0b:fb:be:3a:
                    1c:84:87:42:c4:83:3a:4f:1e:46:a5:cb:5d:a2:a8:
                    fb:17:44:7f:44:3e:65:06:87:b9:6d:30:ee:d5:93:
                    6e:39:4b:cc:7b:8b:59:5d:c6:5d:7a:36:7a:22:27:
                    85:fb:43:ed:5b:5b:ed:3a:9c:59:6e:ac:be:cf:c2:
                    c0:27:b4:26:ab:d5:5b:d0:ee:75:86:7b:e2:55:34:
                    72:5c:0b:97:2d:54:3e:a9:dd:6d:ad:bb:a8:2c:af:
                    8b:d7:6a:50:40:d1:0b:42:35:0e:b5:8b:98:f8:0c:
                    f3:4e:a1:76:69:eb:50:94:aa:de:2b:e2:2c:31:cf:
                    1a:62:08:c1:0c:36:a4:5c:b7:d6:33:6a:6f:30:c1:
                    c7:91:11:55:aa:5b:0b:7a:f3:42:14:d2:34:46:ce:
                    b0:3a:13:17:e9:b6:11:52:36:ff:b9:8d:94:a9:dd:
                    b7:ef:91:b2:5a:03:a2:c8:7a:27:c0:a2:90:e3:5f:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:31:12:C3:9F:62:FE:A7:19:BA:B6:CE:66:10:58:5D:F2:6F:2E:EE
            X509v3 Authority Key Identifier:
                keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:bd:ad:88:10:fa:80:75:0d:50:f1:50:c0:e7:47:99:51:3d:
         a1:18:82:ee:a3:32:1e:a3:41:9e:60:b7:4d:ea:1a:de:57:b7:
         96:20:f0:79:2e:52:f5:5e:23:4f:8c:11:b4:9d:5c:7e:87:d7:
         6f:48:02:53:b1:36:11:25:f8:52:ad:76:45:39:07:b7:f1:b6:
         09:92:a8:d6:e6:56:4a:3b:a9:c0:14:ce:ee:9d:15:34:f7:8e:
         4d:6c:6d:3e:09:1e:23:10:5f:dd:2a:7f:0b:a0:30:26:11:c2:
         32:0a:02:67:25:e0:71:bb:4f:e5:0b:6c:e4:00:6d:8d:60:76:
         21:e2:b7:65:c5:1e:51:84:af:78:6c:50:c2:d2:b6:a2:8e:6a:
         e4:0f:ea:8d:1f:2a:fb:6d:3d:10:ef:a3:9a:a5:43:40:85:8a:
         56:e2:ab:23:f4:66:64:a9:21:a2:41:54:8f:65:2d:65:20:f4:
         38:4c:3c:cd:04:13:73:d5:72:68:83:8b:df:eb:56:f4:5d:ab:
         6a:17:42:83:18:84:28:2b:6e:ac:d1:1c:33:4c:18:7a:3b:2f:
         7c:36:64:d5:36:ac:f2:51:86:f9:07:d9:3d:dd:4f:0c:ef:e3:
         e8:69:21:04:76:db:ab:4c:37:45:c8:7e:f0:06:17:0f:2c:2e:
         3c:74:33:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCNTExMTAvBgNVBAUTKDNFQTQzNDdEMkQ5RkQ2RUI2QTAxQjQ0RTU1NzFGODhC
MDhBQ0MyNUIwHhcNMjYwMTIzMDMwNDMwWhcNMjYwMTMwMDMwNDMwWjAYMRYwFAYD
VQQDDA02OTcyZTUzZS03YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1fXwspsS2oRTt9kv6mnlx4nChDfOuWvr/H/lQ2IWIlFcOnzfCzSX6ozThCYJ
T+A9H7MXW2rCH2FdtNXl9zPlJvm/hvdDewv7vjochIdCxIM6Tx5Gpctdoqj7F0R/
RD5lBoe5bTDu1ZNuOUvMe4tZXcZdejZ6IieF+0PtW1vtOpxZbqy+z8LAJ7Qmq9Vb
0O51hnviVTRyXAuXLVQ+qd1trbuoLK+L12pQQNELQjUOtYuY+AzzTqF2aetQlKre
K+IsMc8aYgjBDDakXLfWM2pvMMHHkRFVqlsLevNCFNI0Rs6wOhMX6bYRUjb/uY2U
qd2375GyWgOiyHonwKKQ41+6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcxEsOf
Yv6nGbq2zmYQWF3yby7uMB8GA1UdIwQYMBaAFD6kNH0tn9bragG0TlVx+IsIrMJb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1MS8yNUFDRjVDMEM0
QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1dHFBYlJPVlhINGl3aXN3
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BxUTBmUzJmMXV0cUFiUk9WWEg0aXdpc3dscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI1MS8yNUFDRjVDMEM0QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1
dHFBYlJPVlhINGl3aXN3bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDJva2IEPqAdQ1Q8VDA50eZUT2hGILuozIeo0GeYLdN6hreV7eWIPB5
LlL1XiNPjBG0nVx+h9dvSAJTsTYRJfhSrXZFOQe38bYJkqjW5lZKO6nAFM7unRU0
945NbG0+CR4jEF/dKn8LoDAmEcIyCgJnJeBxu0/lC2zkAG2NYHYh4rdlxR5RhK94
bFDC0raijmrkD+qNHyr7bT0Q76OapUNAhYpW4qsj9GZkqSGiQVSPZS1lIPQ4TDzN
BBNz1XJog4vf61b0XatqF0KDGIQoK26s0RwzTBh6Oy98NmTVNqzyUYb5B9k93U8M
7+PoaSEEdturTDdFyH7wBhcPLC48dDMO
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:40 2026 by rpki-client