This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
File:                     cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json)
Hash identifier:          0eISJ6TA/L0347FkrcvzUMHRrufLsw2XeHGEx+YEakA=
Subject key identifier:   F2:B8:75:0C:3B:E6:DB:EC:00:CB:B3:B2:CE:75:67:3F:F6:9E:76:1F
Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
Certificate issuer:       /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Certificate serial:       03F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
Manifest number:          03E9
Signing time:             Sat 24 Jan 2026 23:44:15 +0000
Manifest this update:     Sat 24 Jan 2026 23:44:15 +0000
Manifest next update:     Sat 31 Jan 2026 23:44:15 +0000
Files and hashes:         1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: oPbL9ZXkZZnBRXbOKXTDLDw0WYz6eiu0IZxXaIzPxmw=)
                          2: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: H+STQ1E/JUpy5S0r72n/zNh28glR7Zy7UzRfBCi1atI=)
                          3: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: H4c2167/k5Ul/Jd2rdZpeNc0eDfRXqGo52dTMlrcW1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
                          rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
        Validity
            Not Before: Jan 24 23:44:15 2026 GMT
            Not After : Jan 31 23:44:15 2026 GMT
        Subject: CN=6975594f-c062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:4f:36:4f:12:cf:c2:fd:22:19:f1:98:ce:
                    72:f3:10:11:77:b4:e4:a5:70:c4:68:a8:1f:01:ec:
                    a0:09:75:49:86:87:31:86:75:42:cf:d9:47:27:1b:
                    cb:54:f7:63:fc:aa:a2:dd:02:ef:bd:1d:b8:32:e0:
                    cb:a2:ac:a5:c2:d2:45:ed:04:48:d3:3d:ee:ad:54:
                    2d:44:fe:a3:72:e4:81:88:36:4c:1e:54:00:9f:98:
                    50:09:bf:4f:6a:5e:ff:84:f8:cf:bf:4e:56:ed:01:
                    3c:46:14:74:ca:16:32:e4:45:a2:21:3f:a7:f5:fc:
                    61:17:72:68:ba:a4:31:14:e5:75:aa:43:47:51:22:
                    67:36:29:68:01:99:dc:c0:d0:59:8e:20:a0:62:28:
                    99:db:ba:59:51:05:8f:f5:df:fc:8a:29:2b:2b:d6:
                    bf:50:d2:22:f4:50:a1:32:d3:59:8f:26:15:06:6b:
                    5e:3f:40:84:15:3d:ac:c5:8b:99:cb:38:32:5c:0d:
                    20:18:d5:55:3f:71:68:95:35:19:1c:68:67:4f:65:
                    2a:af:72:b3:53:e5:2e:8d:58:69:61:92:93:ec:87:
                    48:dd:6f:67:04:74:76:40:e7:01:b3:97:48:d7:43:
                    b0:19:eb:54:10:a7:e1:76:18:04:02:8a:a0:e4:39:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:75:0C:3B:E6:DB:EC:00:CB:B3:B2:CE:75:67:3F:F6:9E:76:1F
            X509v3 Authority Key Identifier:
                keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:81:4a:83:91:66:a7:ca:ba:41:64:89:af:37:b2:00:06:
         32:8f:62:f1:96:87:18:5f:ee:76:e9:21:fc:30:a8:58:ab:36:
         39:02:c2:de:ff:d8:fc:3f:08:c1:f0:ac:2d:f4:1f:a2:b1:23:
         92:f5:26:c9:9a:cc:81:e0:c0:2d:44:d3:a2:3c:e1:b4:e7:57:
         70:7d:0e:d2:a0:6f:4b:17:d4:b5:05:12:95:2d:7d:3e:53:15:
         31:02:3d:c5:34:7e:4d:e7:bd:92:21:2d:87:fa:d5:8d:f5:86:
         1b:24:13:6f:ac:ad:43:53:06:2f:6e:5c:bc:05:06:e0:41:52:
         08:b2:db:ee:b4:55:fa:46:0a:4b:df:fe:7d:1a:85:19:b6:a5:
         4c:77:bb:16:51:25:27:e7:8f:53:b4:39:3c:71:c7:7a:27:4f:
         be:15:fd:41:64:43:72:ef:77:cc:43:70:be:95:e9:69:75:61:
         8a:e2:82:34:85:1b:e7:41:01:d4:c0:b5:82:fc:73:be:61:d6:
         06:e6:6b:41:6f:c2:7f:ec:47:bf:ce:e5:e8:50:f0:a9:c1:96:
         30:de:a7:1b:05:0c:ce:cc:1e:95:d5:34:52:f5:67:e3:5e:f6:
         43:89:79:c1:32:f8:ce:c8:c9:17:ef:c0:8c:e3:de:d0:55:10:
         c7:4f:cc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:41 2026 by rpki-client