This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          jAXUEYRh9DPr58WANadgJKNXEvvZmP/+ufatZdc9pj4=
Subject key identifier:   A5:22:26:20:B9:DC:78:61:B4:1F:96:6A:E6:1B:98:0E:81:67:20:B3
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       11F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          2071
Signing time:             Sat 24 Jan 2026 16:53:20 +0000
Manifest this update:     Sat 24 Jan 2026 16:53:20 +0000
Manifest next update:     Sat 31 Jan 2026 16:53:20 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: LV0Bv0RqIX+KNtAucPgHiEtYRrQmYsAu9ATFw5d8Cro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4596 (0x11f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Jan 24 16:53:20 2026 GMT
            Not After : Jan 31 16:53:20 2026 GMT
        Subject: CN=6974f900-c724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:17:8a:cc:5e:40:9d:b0:4a:37:d0:43:28:9a:
                    56:8c:89:9f:d1:df:44:75:a5:6e:cf:cb:1d:a5:5d:
                    a6:11:34:24:51:f8:af:bf:3e:08:7d:bf:fc:76:03:
                    6f:2e:aa:e2:84:21:14:32:61:6a:20:d9:6b:1c:b4:
                    57:32:d7:ad:92:36:f4:ff:a8:6d:41:13:6b:89:62:
                    76:38:76:d5:fd:9b:d7:76:19:5c:22:17:b0:22:64:
                    47:db:62:4f:c6:27:18:19:db:cc:10:4c:53:9a:73:
                    49:df:3f:6c:cc:b1:45:a3:ae:7e:b1:6f:0e:4c:a0:
                    2d:db:c5:c2:75:e7:26:1b:d6:af:a4:ab:c0:5e:68:
                    fe:c7:11:7f:90:56:af:dd:e3:15:35:2c:e2:ee:06:
                    76:b8:4d:b1:41:32:65:b2:ff:47:ce:8e:93:c1:c8:
                    4e:b2:a8:14:ba:a5:ba:8c:da:cd:02:82:63:ba:49:
                    1b:23:84:2b:62:ec:34:33:1c:32:8a:4a:98:e7:f4:
                    d4:cf:7a:2e:42:84:cb:35:01:5a:d6:0b:e2:18:8f:
                    48:1c:12:11:38:c3:2b:bd:28:d6:2e:a9:6a:a9:5f:
                    e1:08:9d:97:f3:8a:9d:81:f9:3d:bc:da:eb:4f:7f:
                    3a:ce:f1:b8:da:8a:eb:cb:5d:8c:47:78:15:8b:68:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:22:26:20:B9:DC:78:61:B4:1F:96:6A:E6:1B:98:0E:81:67:20:B3
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:45:9e:7f:49:7d:10:96:53:bc:68:a5:ed:7b:e1:75:0c:
         07:c5:2f:c1:c0:c5:b9:07:53:c3:2a:b0:5c:4b:6e:a5:f1:88:
         38:f2:b2:de:33:ac:c5:56:da:77:af:df:70:0d:78:98:d9:93:
         29:65:04:e1:a6:d7:65:13:e4:41:36:d5:79:20:5f:97:61:b4:
         66:63:e6:c7:d3:55:f7:c8:86:45:5f:ad:30:8b:a0:79:80:27:
         3e:7a:5a:9e:f1:e5:8b:4c:8c:e8:78:50:d2:a6:e0:d2:3c:2a:
         29:a5:76:4a:3d:af:0b:c7:81:4b:b4:b0:d7:d4:71:08:31:d7:
         26:42:c3:69:d4:48:ac:d6:4c:dc:75:cf:c1:86:5a:40:3b:91:
         e8:8f:6a:9b:86:21:44:cb:93:b1:05:04:44:9a:aa:ae:7e:5c:
         45:0b:e2:32:96:b2:b8:90:2e:e8:00:ee:b2:59:d2:5b:91:9d:
         ef:f1:5d:e1:2f:03:5d:b2:ec:78:7e:35:1b:ec:b9:ff:e3:4e:
         50:e8:58:35:bf:7a:3a:86:66:94:1b:a7:67:40:df:db:90:fd:
         fa:32:9f:84:c3:ea:90:ad:c4:9c:c2:71:9a:ac:a1:9b:60:dd:
         75:1f:49:c1:1f:ce:6c:de:51:4b:f5:bf:a5:07:a9:d8:95:42:
         b0:27:29:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD
MDk5MEE4NTMwHhcNMjYwMTI0MTY1MzIwWhcNMjYwMTMxMTY1MzIwWjAYMRYwFAYD
VQQDDA02OTc0ZjkwMC1jNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlheKzF5AnbBKN9BDKJpWjImf0d9EdaVuz8sdpV2mETQkUfivvz4Ifb/8dgNv
LqrihCEUMmFqINlrHLRXMtetkjb0/6htQRNriWJ2OHbV/ZvXdhlcIhewImRH22JP
xicYGdvMEExTmnNJ3z9szLFFo65+sW8OTKAt28XCdecmG9avpKvAXmj+xxF/kFav
3eMVNSzi7gZ2uE2xQTJlsv9Hzo6TwchOsqgUuqW6jNrNAoJjukkbI4QrYuw0Mxwy
ikqY5/TUz3ouQoTLNQFa1gviGI9IHBIROMMrvSjWLqlqqV/hCJ2X84qdgfk9vNrr
T386zvG42orry12MR3gVi2hB0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUiJiC5
3HhhtB+WauYbmA6BZyCzMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF
QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1
Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiMUWef0l9EJZTvGil7XvhdQwHxS/BwMW5B1PDKrBcS26l8Yg48rLe
M6zFVtp3r99wDXiY2ZMpZQThptdlE+RBNtV5IF+XYbRmY+bH01X3yIZFX60wi6B5
gCc+elqe8eWLTIzoeFDSpuDSPCoppXZKPa8Lx4FLtLDX1HEIMdcmQsNp1Eis1kzc
dc/BhlpAO5Hoj2qbhiFEy5OxBQREmqquflxFC+IylrK4kC7oAO6yWdJbkZ3v8V3h
LwNdsux4fjUb7Ln/405Q6Fg1v3o6hmaUG6dnQN/bkP36Mp+Ew+qQrcScwnGarKGb
YN11H0nBH85s3lFL9b+lB6nYlUKwJynb
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:02 2026 by rpki-client