This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File:                     MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier:          YL0K5CLqjMYgAw6QnNNV9XJiXksCTxy4QzLipTPrEw0=
Subject key identifier:   1A:F6:B8:AC:BF:43:33:55:C1:E4:97:8B:D0:CE:03:52:C9:82:5D:61
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer:       /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial:       0A4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number:          0A33
Signing time:             Sat 24 Jan 2026 19:13:30 +0000
Manifest this update:     Sat 24 Jan 2026 19:13:30 +0000
Manifest next update:     Sat 31 Jan 2026 19:13:30 +0000
Files and hashes:         1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: +xhzM+41G0OdMsQ5sLjTqU8zHOs9HuSgQL+Ks/Gf74o=)
                          2: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: Jhv7IIpmMM0oZ7iAKkds1Qiv2p8w6iMgKtc0KDhD18s=)
                          3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: WlJN5u1oi9WPrD229vbsWsLGL/hLS+xCYNJ5+hmxu8E=)
                          4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: 9Z+s94Y5T1K7IVPTPlx/BgDTI68R9a8i/jpS5x1Nr4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
        Validity
            Not Before: Jan 24 19:13:30 2026 GMT
            Not After : Jan 31 19:13:30 2026 GMT
        Subject: CN=697519da-074f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0e:2b:17:39:2f:59:fe:db:f8:64:a3:36:bb:
                    3c:ad:79:19:a0:c1:31:0d:ef:43:ac:a2:ae:f4:92:
                    16:e4:2d:f0:4a:61:2b:c1:f6:ba:a3:10:a2:1d:11:
                    73:b1:2b:1c:3a:a2:be:d4:59:8b:e1:7e:c4:a6:b5:
                    34:93:5d:36:ef:36:09:55:3e:1a:67:43:40:b3:09:
                    dc:27:b1:9d:bc:4a:31:5c:cb:93:f7:79:ba:fe:b4:
                    cd:eb:da:57:d9:3c:59:61:98:1c:82:68:b5:46:65:
                    af:f3:b0:66:5d:2e:4c:c0:68:4f:ad:31:fd:09:3d:
                    fe:6f:ec:2f:22:39:4b:c5:ec:50:96:f5:c7:a4:4e:
                    65:88:e8:62:be:10:ac:12:ae:bf:e7:8b:f1:17:69:
                    61:9b:d5:a6:6c:39:4d:0a:37:9b:e3:5c:74:97:8e:
                    2a:2f:10:c6:c1:4c:95:f8:f6:b4:cb:54:3d:84:87:
                    5c:3f:cc:05:8c:7e:d0:be:f1:20:32:d1:a5:1e:05:
                    f7:11:ca:47:f6:f1:2b:f4:c2:8b:b2:9b:9e:d0:c4:
                    8a:2f:0c:83:a4:47:f5:aa:59:80:50:2f:e3:ae:42:
                    67:fc:d8:11:4d:7e:0d:19:00:a9:41:42:e2:f4:f9:
                    52:e2:db:d5:04:33:10:60:45:5c:31:45:4c:8e:27:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F6:B8:AC:BF:43:33:55:C1:E4:97:8B:D0:CE:03:52:C9:82:5D:61
            X509v3 Authority Key Identifier:
                keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:46:fd:07:f3:47:13:a8:e2:24:bb:88:eb:73:b6:fa:21:c7:
         bd:9b:1b:90:00:64:f9:6a:e9:c2:65:e2:5d:66:eb:bb:78:b4:
         7f:2b:34:be:ae:5f:a9:81:9e:2e:31:6e:66:55:af:de:9c:b2:
         da:4f:b0:a3:04:98:17:99:84:01:ba:42:9b:08:d1:b2:f8:75:
         3f:43:4e:89:1b:db:d5:0b:44:c3:75:f1:d0:06:1f:49:bc:a8:
         3d:c3:19:7c:b6:a3:26:86:1a:46:74:11:4c:c9:33:fd:ba:e7:
         ac:0e:ae:76:64:34:0c:46:fd:c3:41:e7:9b:92:ac:cd:b7:4f:
         66:08:6a:de:51:05:43:91:da:fe:0a:97:5a:dc:26:2b:59:cb:
         4a:8b:80:6c:82:7a:5b:b4:f0:67:04:9b:12:b2:1f:43:6f:e1:
         f0:21:8b:60:c3:d9:04:7a:24:28:3f:37:81:23:73:b1:c5:41:
         56:0c:aa:ca:10:2f:72:f0:d6:7d:94:6e:c7:a6:de:7d:ba:aa:
         65:91:f5:f1:42:c1:01:90:47:ed:1f:7b:30:e1:f9:a3:6d:8e:
         d7:7d:05:98:23:e3:33:58:02:fa:f2:6f:0d:49:d6:da:09:df:
         98:c2:96:af:6a:fb:71:43:72:a4:f6:94:ea:b7:f9:7d:d2:0e:
         2a:22:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:01 2026 by rpki-client