This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
File:                     rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json)
Hash identifier:          YGnAP2iMZ8qAtDJ8a1lnkz9ZeD/btFaNt7xrQseFv/Q=
Subject key identifier:   86:50:2B:EE:53:AB:F0:6F:D2:84:FF:A9:B4:FE:07:F0:7C:BA:5A:83
Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F
Certificate issuer:       /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
Manifest number:          0518
Signing time:             Sat 24 Jan 2026 22:49:43 +0000
Manifest this update:     Sat 24 Jan 2026 22:49:42 +0000
Manifest next update:     Sat 31 Jan 2026 22:49:42 +0000
Files and hashes:         1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: 4/jiD8p0NO888BUOeBs4pRUzII/cmdwA07kats80KkI=)
                          2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: 5d3BGh0li8EHX8JHtfB+7TdjESbNbmWdHjwtH5IwxkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl
                          rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F
        Validity
            Not Before: Jan 24 22:49:42 2026 GMT
            Not After : Jan 31 22:49:42 2026 GMT
        Subject: CN=69754c87-e56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:42:00:cc:27:f4:fc:ab:06:48:cb:f3:12:
                    62:1e:cc:d2:6d:03:d5:1c:62:5e:88:6a:b6:a5:39:
                    db:b3:4d:33:7c:2b:80:51:9e:4b:b6:0e:34:19:4d:
                    b5:35:22:5a:80:bf:e8:38:9e:cc:d1:87:cb:b3:bb:
                    ed:8e:de:1d:88:f3:25:d2:ee:c9:ce:83:b9:c4:07:
                    24:ec:28:85:b7:10:6a:bf:ad:9b:54:03:5b:39:6a:
                    bc:9f:69:cc:53:af:e5:a3:00:b4:74:26:c5:42:c6:
                    66:0f:6f:c2:d7:1b:95:19:26:bd:56:33:35:20:06:
                    2c:e4:3f:52:0c:35:bd:db:7e:af:13:4f:26:a9:b4:
                    73:8a:79:94:32:c2:0e:15:1b:da:32:56:1d:cb:4d:
                    30:e1:d6:bb:da:0f:39:57:24:bb:9a:db:1c:8b:20:
                    61:55:ca:f7:42:de:0a:d2:26:4d:0c:34:cb:cc:03:
                    4f:74:e3:fa:6a:c1:8a:b7:40:17:ea:f2:18:41:a4:
                    06:f2:9e:db:c1:50:25:e8:88:71:19:ca:1b:c3:e0:
                    f1:92:59:ad:f3:32:99:ff:43:91:6e:66:c5:d1:7a:
                    90:f9:32:aa:b0:20:44:d2:20:6e:8a:72:38:9a:a2:
                    38:2f:fe:38:05:46:04:7c:37:b4:f2:31:b3:20:71:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:50:2B:EE:53:AB:F0:6F:D2:84:FF:A9:B4:FE:07:F0:7C:BA:5A:83
            X509v3 Authority Key Identifier:
                keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:66:00:55:92:0c:f2:39:94:3b:e2:96:c7:25:21:a8:41:1d:
         06:dc:95:4a:d9:3c:3f:d0:e1:84:50:0b:4c:ce:93:f4:a2:08:
         e0:11:e6:7f:30:79:33:a4:a0:da:40:5c:fa:74:b2:d8:7c:4d:
         29:d5:97:b0:9f:50:5c:ef:f8:32:be:33:11:48:b8:3a:f4:d3:
         f0:9e:41:db:ea:3a:66:6f:c7:a7:bb:d0:ae:2c:fd:64:f0:3f:
         7b:e0:0d:3c:c9:cc:60:7e:e6:4c:58:a3:cc:18:c1:93:c9:d9:
         0c:7c:98:1a:02:92:04:5b:5f:77:be:dc:8c:00:be:95:4b:e8:
         de:f1:5c:81:15:90:94:73:de:f2:58:26:c1:d4:b9:b3:77:12:
         82:a4:32:4b:86:74:f0:4d:33:de:99:60:4b:b0:a0:9e:c3:f8:
         73:6b:a1:59:bf:20:95:90:48:e3:07:7b:2e:46:9a:c1:58:d3:
         40:3a:5d:a4:ab:5e:27:f8:2b:6d:8d:f6:bd:3a:cc:89:a6:c9:
         a7:7d:55:7d:2c:a4:fe:1e:88:5e:0a:90:b0:ad:6d:20:20:9f:
         ae:5e:e9:1c:fe:c1:63:fd:62:74:2e:fd:ff:bd:fe:d8:c2:88:
         00:be:2e:3a:b6:4b:3e:29:82:03:42:ea:5c:10:20:70:28:cf:
         53:23:1c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:05 2026 by rpki-client