This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File:                     qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier:          X0LlllfqUiL14U67jNxSn1vNnto2yoODbXArbrZgisw=
Subject key identifier:   13:0A:BB:91:47:6F:E2:0D:A0:04:96:CE:FA:67:96:23:13:1F:64:7B
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer:       /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number:          0217
Signing time:             Sun 25 Jan 2026 01:31:05 +0000
Manifest this update:     Sun 25 Jan 2026 01:31:05 +0000
Manifest next update:     Sun 01 Feb 2026 01:31:05 +0000
Files and hashes:         1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: C0+s5dcLUSR6htt2Adxf4z4g9+lZG0O8W3AL2s3VCgs=)
                          2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: qTpurh8+bWpZzwTVZxTLGeJXujwiEOMw1H0kXdqpaC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
        Validity
            Not Before: Jan 25 01:31:05 2026 GMT
            Not After : Feb  1 01:31:05 2026 GMT
        Subject: CN=69757259-feba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:85:ac:ca:85:bc:f0:a2:86:28:00:99:c0:
                    4f:42:20:1d:a6:c5:1b:24:f4:5a:3a:47:70:48:ed:
                    96:c4:85:a2:db:07:f9:b9:8b:66:2d:ca:9a:03:9f:
                    75:27:fd:5d:1b:fc:4c:b2:87:54:f8:f1:3e:5f:36:
                    60:68:d7:9c:64:8f:db:0e:77:30:c9:ac:d8:4a:83:
                    71:fb:3d:40:ae:5b:d8:3d:4c:d0:0e:eb:c6:86:20:
                    cd:b7:bd:f2:db:e7:be:68:b0:ad:67:ca:c3:2c:8f:
                    c8:ee:08:7c:b5:96:8e:fc:b8:7b:b4:6e:a4:79:2b:
                    1d:0b:f5:fb:2c:94:a4:0b:6f:9f:2d:0b:98:15:98:
                    39:44:fe:20:83:57:39:cb:62:90:b5:62:6e:99:c9:
                    22:cb:7b:49:94:48:23:0f:6c:22:a9:ab:35:23:9a:
                    97:c1:89:2d:1d:f7:22:af:74:64:45:a2:6b:80:70:
                    5c:22:57:d2:88:5e:15:d0:2a:c9:2c:90:95:cd:38:
                    10:a6:af:1d:18:8d:63:c3:6b:d9:a9:53:af:8e:c7:
                    24:a0:81:c1:8a:54:d0:83:7f:88:8d:e7:78:ae:e3:
                    39:72:98:7f:32:2d:79:f7:f5:d5:a1:04:b1:f7:10:
                    1d:6a:64:60:8e:d0:2f:c8:09:9c:99:6f:e1:b4:32:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0A:BB:91:47:6F:E2:0D:A0:04:96:CE:FA:67:96:23:13:1F:64:7B
            X509v3 Authority Key Identifier:
                keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b5:40:2d:3b:49:77:dd:84:5b:e0:56:cb:8d:38:fa:db:59:
         3e:8c:cc:43:87:8f:da:65:ee:a7:de:32:f4:53:fd:7b:5f:d1:
         f5:6a:96:32:e3:f4:08:cd:cd:a7:6b:fd:dc:4a:a7:96:e7:6a:
         bf:6d:b6:ed:56:0c:43:4d:e7:bc:44:bb:36:b9:2d:3e:37:18:
         aa:92:a7:80:9f:3a:6e:50:9d:d8:fd:f1:69:4c:f2:16:de:ee:
         48:37:15:33:95:6a:56:1f:06:0d:53:2d:13:7f:c2:e3:91:ce:
         be:bf:8d:32:f8:40:c4:94:63:ca:d7:ff:5a:f9:30:ef:70:21:
         c0:7c:d6:d2:f2:13:73:38:1f:99:9e:e3:8b:3e:8d:54:eb:9a:
         df:b6:91:db:50:9a:c2:4c:dc:e0:b2:95:64:48:78:83:78:e0:
         6f:d1:1e:4e:1a:6a:c1:36:4a:23:0d:6c:50:b7:de:d8:66:05:
         87:76:ce:1b:8d:e9:fe:e1:db:fd:6d:65:76:f6:95:ac:eb:93:
         1f:9d:1f:b3:68:45:ff:80:f0:4f:e3:49:25:e8:9b:6a:20:96:
         02:b9:02:db:12:3e:ca:3c:02:90:a6:88:d6:e3:d5:f9:e9:52:
         56:03:7b:e9:2e:44:ab:cd:df:73:a1:4f:a7:fa:c6:2c:e1:7a:
         26:7f:e6:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5
NDdCRTA5MkEwHhcNMjYwMTI1MDEzMTA1WhcNMjYwMjAxMDEzMTA1WjAYMRYwFAYD
VQQDDA02OTc1NzI1OS1mZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsuSFrMqFvPCihigAmcBPQiAdpsUbJPRaOkdwSO2WxIWi2wf5uYtmLcqaA591
J/1dG/xMsodU+PE+XzZgaNecZI/bDncwyazYSoNx+z1ArlvYPUzQDuvGhiDNt73y
2+e+aLCtZ8rDLI/I7gh8tZaO/Lh7tG6keSsdC/X7LJSkC2+fLQuYFZg5RP4gg1c5
y2KQtWJumckiy3tJlEgjD2wiqas1I5qXwYktHfcir3RkRaJrgHBcIlfSiF4V0CrJ
LJCVzTgQpq8dGI1jw2vZqVOvjsckoIHBilTQg3+Ijed4ruM5cph/Mi159/XVoQSx
9xAdamRgjtAvyAmcmW/htDIL6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMKu5FH
b+INoASWzvpnliMTH2R7MB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0
QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi
enJmc2RjRjRZUHVVZS1DU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDStUAtO0l33YRb4FbLjTj621k+jMxDh4/aZe6n3jL0U/17X9H1apYy
4/QIzc2na/3cSqeW52q/bbbtVgxDTee8RLs2uS0+NxiqkqeAnzpuUJ3Y/fFpTPIW
3u5INxUzlWpWHwYNUy0Tf8Ljkc6+v40y+EDElGPK1/9a+TDvcCHAfNbS8hNzOB+Z
nuOLPo1U65rftpHbUJrCTNzgspVkSHiDeOBv0R5OGmrBNkojDWxQt97YZgWHds4b
jen+4dv9bWV29pWs65MfnR+zaEX/gPBP40kl6JtqIJYCuQLbEj7KPAKQpojW49X5
6VJWA3vpLkSrzd9zoU+n+sYs4Xomf+Zm
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:35 2026 by rpki-client