This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
File:                     JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json)
Hash identifier:          snuTXTsuU/Tf0krb8uhNe9ddbZWjqXFNQ1CTOUaykZI=
Subject key identifier:   0A:85:39:18:45:56:8A:72:92:A9:13:6C:D8:78:13:77:B8:55:D9:55
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       06C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
Manifest number:          06C2
Signing time:             Sat 24 Jan 2026 21:31:39 +0000
Manifest this update:     Sat 24 Jan 2026 21:31:38 +0000
Manifest next update:     Sat 31 Jan 2026 21:31:38 +0000
Files and hashes:         1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: gxEsvnQclztRReXnLyVTky1rlSr7PR+UwL2j89JKmv4=)
                          2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
                          rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
        Validity
            Not Before: Jan 24 21:31:38 2026 GMT
            Not After : Jan 31 21:31:38 2026 GMT
        Subject: CN=69753a3b-b768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:db:72:6a:9b:2f:05:db:a0:5a:f9:f9:55:
                    ec:9e:33:8a:33:88:ff:22:6e:72:9b:dd:bc:a5:44:
                    2c:cc:46:40:34:2d:5d:0e:51:9b:73:a5:eb:67:7b:
                    94:ef:17:44:31:80:32:88:a6:ff:11:2b:89:05:e2:
                    6f:90:56:c8:f3:37:92:1e:4f:c3:c7:9a:7d:01:f9:
                    35:09:c8:84:50:e3:3b:be:76:f6:5c:05:4f:33:65:
                    5a:e5:27:0c:bf:f8:de:cf:18:ce:65:57:24:0c:1b:
                    05:9a:bc:a3:a8:bb:92:8e:38:3c:4b:5b:b3:81:4c:
                    e7:a5:4c:56:70:19:92:e8:89:ae:70:e8:c1:76:7b:
                    d9:3a:ad:9c:1a:b1:36:11:0a:a2:cc:6d:d0:ae:d1:
                    82:df:d9:d6:dc:96:35:1f:2b:48:4f:5e:bd:7e:68:
                    16:dc:fd:a3:3d:1c:0d:f1:58:d9:de:59:cf:51:95:
                    07:16:31:70:76:63:5c:74:5a:97:b6:04:78:25:60:
                    38:be:81:30:d2:f3:44:b0:fc:4f:d1:45:8b:1c:e5:
                    3b:e5:ae:da:79:b3:ef:f9:a5:3f:7d:04:be:59:9c:
                    72:1e:36:c5:ad:ee:9c:56:3b:87:9e:35:65:1e:6c:
                    fd:b1:f7:7e:22:ec:92:32:1d:b6:d8:11:67:2b:ca:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:85:39:18:45:56:8A:72:92:A9:13:6C:D8:78:13:77:B8:55:D9:55
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:2d:a4:66:a1:2d:34:47:e8:de:98:f6:47:c8:4c:09:84:
         99:aa:87:37:7b:f3:92:9b:d2:9e:16:c0:79:1c:25:0a:8d:8a:
         90:3c:d9:76:20:a7:f0:42:5c:2c:99:d4:ee:77:7e:25:1e:85:
         28:c1:ea:ad:aa:84:9a:5c:51:4d:5b:47:ee:c9:e5:38:3a:47:
         8d:93:a5:bf:b6:24:b6:86:90:6f:54:82:c1:b8:5c:56:2d:be:
         89:2c:b0:59:f7:79:6e:b9:42:6c:3e:db:43:b2:14:97:1b:96:
         66:56:6b:fb:3e:ce:a7:d0:70:f9:c3:77:97:7d:e1:c6:c6:7e:
         57:31:ef:10:6a:b0:33:42:4a:46:42:43:e5:7a:8d:ed:63:94:
         da:9a:1a:74:2e:a4:7e:61:8f:05:24:14:15:de:32:2c:9c:4a:
         69:6d:53:f4:67:0a:c9:d1:02:1a:39:f8:99:e5:c5:2e:4c:1a:
         fe:22:5d:de:df:8c:15:0c:bc:4b:56:23:54:d9:48:19:6f:40:
         76:60:93:9e:bf:12:c1:df:fa:31:78:81:a6:e3:22:fe:6a:7c:
         2e:72:34:71:83:a9:58:4d:6d:fd:e4:52:4b:2a:29:1b:df:50:
         b6:fe:44:96:f0:98:95:1e:4c:d5:07:c6:fc:b9:39:3e:f2:e4:
         c3:96:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:54:16 2026 by rpki-client