This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
File:                     poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json)
Hash identifier:          DjEDWTyLAaUaVIiqpjlwO8EIelK0o/ytfXshEoxZai8=
Subject key identifier:   0D:C7:B1:98:33:D0:B7:6B:DF:76:9F:0D:B4:53:FC:B6:70:48:AE:16
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Certificate issuer:       /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial:       3567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
Manifest number:          3532
Signing time:             Sat 24 Jan 2026 14:40:48 +0000
Manifest this update:     Sat 24 Jan 2026 14:40:48 +0000
Manifest next update:     Sat 31 Jan 2026 14:40:48 +0000
Files and hashes:         1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: HXErMd7PZ9Rh6ZciF7xC6tK2dl4rx5vwber+1CkjUU0=)
                          2: 42DAE250C8C711F08A7B6740C4F9AE02.roa (hash: LXms9Zrbk+PXqSOcObRZdGiWL7GgK8jI8GvKqfmYMjY=)
                          3: A50B2F32C68611EFB4077137C4F9AE02.roa (hash: Npaiqv8wx3x0juj2XPFP6NT15iQeinsY3d+rnK9Ipa8=)
                          4: 97F461E0C8CB11F0BFB08139C4F9AE02.roa (hash: gzKLnHGUVNhUy122xbHjkwFinEFr8S05RyLytJ6eVXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
                          rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13671 (0x3567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
        Validity
            Not Before: Jan 24 14:40:48 2026 GMT
            Not After : Jan 31 14:40:48 2026 GMT
        Subject: CN=6974d9f0-bf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:01:7f:c2:c1:9d:dd:27:82:d7:b8:c1:50:
                    41:e2:5a:42:fb:5a:70:bb:28:6c:98:a7:40:ed:1c:
                    99:a6:82:b7:04:47:bb:e5:16:f1:cf:1e:38:88:dd:
                    23:46:84:70:eb:14:3d:2e:1a:38:f5:eb:7b:d9:be:
                    fa:a0:54:8e:a5:01:f4:38:e5:99:da:d2:46:f2:4c:
                    e4:a4:ef:51:45:e1:a9:c1:76:04:49:71:d3:df:3d:
                    c2:7a:9e:ad:65:32:23:db:fe:21:56:51:4b:16:25:
                    09:56:eb:c4:d3:4e:29:a2:e1:d3:00:c1:0a:25:18:
                    66:27:60:1d:45:34:f8:e2:89:03:31:26:9e:56:8f:
                    54:43:e6:92:4c:f6:7a:b4:47:af:03:ce:af:a9:52:
                    c1:67:16:f4:2c:30:aa:5a:a5:77:3d:b2:be:38:f5:
                    ae:43:e8:61:73:d3:a4:60:13:72:0e:8e:00:e9:2e:
                    1f:5c:d2:d0:92:af:0e:69:b0:de:98:ab:ce:d4:e6:
                    51:3e:02:6e:79:32:25:7e:73:ab:e1:66:ee:9a:35:
                    1d:f0:d6:bf:88:9f:ec:82:1d:96:56:43:9e:e2:dd:
                    2b:05:9b:92:56:c9:a7:0a:fb:37:11:fe:47:8b:79:
                    a3:f3:0f:0d:75:64:5b:14:2b:52:c0:96:cf:4c:a2:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:B1:98:33:D0:B7:6B:DF:76:9F:0D:B4:53:FC:B6:70:48:AE:16
            X509v3 Authority Key Identifier:
                keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:8f:38:4a:05:fe:0e:c2:cd:bb:28:23:5a:94:2b:f0:c0:
         95:0b:42:8e:6a:8c:4f:f7:cf:34:90:e8:79:79:79:53:52:1d:
         35:8a:b9:83:55:3b:73:fc:ba:6a:6b:07:35:84:66:c3:ea:07:
         98:b8:47:ea:9c:dd:83:99:d5:70:ef:34:ac:7c:fb:f1:bb:17:
         f7:ad:14:31:7e:6f:9d:c1:38:a5:f6:ba:f9:9a:9a:26:82:37:
         a6:d1:53:28:d1:f3:3d:4b:90:e2:40:f6:ee:d1:87:2a:38:aa:
         76:51:eb:70:7b:93:dc:d3:ec:1f:1e:4f:7f:46:8f:92:8c:60:
         0d:3b:04:11:a9:fd:05:cf:8e:c8:8b:58:9e:ba:22:da:a5:47:
         f3:d7:1a:91:01:21:4a:86:7c:c8:8d:d4:10:cd:9f:7d:f3:e4:
         1b:2d:42:1c:1f:db:1a:60:1c:5d:eb:eb:da:51:d3:9e:9d:83:
         c6:32:e7:d5:91:00:35:54:8b:c9:a4:9d:cf:e5:9d:33:c2:9d:
         7e:9a:95:5d:5b:58:20:b0:1d:64:47:8c:83:c8:c1:40:82:dc:
         9e:ca:8a:6c:8f:11:6a:22:fd:de:2d:46:1e:71:7b:c0:a2:0a:
         f4:c8:83:9e:65:37:be:c2:9a:bf:67:f2:e7:1a:23:74:45:ae:
         75:24:5f:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw
MDM4MERERTMwHhcNMjYwMTI0MTQ0MDQ4WhcNMjYwMTMxMTQ0MDQ4WjAYMRYwFAYD
VQQDDA02OTc0ZDlmMC1iZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA140Bf8LBnd0ngte4wVBB4lpC+1pwuyhsmKdA7RyZpoK3BEe75Rbxzx44iN0j
RoRw6xQ9Lho49et72b76oFSOpQH0OOWZ2tJG8kzkpO9RReGpwXYESXHT3z3Cep6t
ZTIj2/4hVlFLFiUJVuvE004pouHTAMEKJRhmJ2AdRTT44okDMSaeVo9UQ+aSTPZ6
tEevA86vqVLBZxb0LDCqWqV3PbK+OPWuQ+hhc9OkYBNyDo4A6S4fXNLQkq8OabDe
mKvO1OZRPgJueTIlfnOr4WbumjUd8Na/iJ/sgh2WVkOe4t0rBZuSVsmnCvs3Ef5H
i3mj8w8NdWRbFCtSwJbPTKLeFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3HsZgz
0Ldr33afDbRT/LZwSK4WMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE
OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEQyMi8yNTI2OTc5ODFEOTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29U
OHRPYzh2SVZBTDRBT0EzZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBl2Y84SgX+DsLNuygjWpQr8MCVC0KOaoxP9880kOh5eXlTUh01irmD
VTtz/Lpqawc1hGbD6geYuEfqnN2DmdVw7zSsfPvxuxf3rRQxfm+dwTil9rr5mpom
gjem0VMo0fM9S5DiQPbu0YcqOKp2Uetwe5Pc0+wfHk9/Ro+SjGANOwQRqf0Fz47I
i1ieuiLapUfz1xqRASFKhnzIjdQQzZ998+QbLUIcH9saYBxd6+vaUdOenYPGMufV
kQA1VIvJpJ3P5Z0zwp1+mpVdW1ggsB1kR4yDyMFAgtyeyopsjxFqIv3eLUYecXvA
ogr0yIOeZTe+wpq/Z/LnGiN0Ra51JF/v
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:47 2026 by rpki-client