This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File:                     t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier:          WyVnTuwIGSSib6iEpSIm1bUf6xknxXh6J9SoKmGft5I=
Subject key identifier:   89:4F:98:36:D4:B6:6A:68:AB:1B:62:FD:38:0F:00:63:54:15:66:F9
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer:       /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number:          01EF
Signing time:             Fri 23 Jan 2026 01:48:15 +0000
Manifest this update:     Fri 23 Jan 2026 01:48:15 +0000
Manifest next update:     Fri 30 Jan 2026 01:48:15 +0000
Files and hashes:         1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: oyKQF3AaUKCjdyD8cUyhQyv4YHb6IvGkd4yRst5TJvk=)
                          2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 01:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
        Validity
            Not Before: Jan 23 01:48:15 2026 GMT
            Not After : Jan 30 01:48:15 2026 GMT
        Subject: CN=6972d35f-9b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:c2:c3:3f:a7:3c:18:fe:3a:4c:9a:4b:6e:
                    04:18:39:b4:8d:99:0d:11:75:0a:51:8a:ec:71:18:
                    09:11:48:df:87:af:dd:3a:e2:c5:8b:0e:33:a6:af:
                    40:d7:e4:70:c2:61:57:3d:22:8e:83:45:65:b2:06:
                    e9:bd:b0:eb:b1:f9:1d:ee:77:b7:01:a0:fc:99:04:
                    50:5f:57:39:7d:a1:21:33:8d:05:5e:ad:08:25:d2:
                    bf:a5:9e:ab:ed:dc:f7:f0:c2:c9:12:f9:e2:59:c7:
                    21:b4:57:84:e3:0f:71:cb:a6:8d:20:48:b4:b6:a5:
                    a5:dd:9b:7a:5e:82:ae:a3:67:4d:7c:22:75:95:26:
                    a9:a1:1f:7b:a1:51:a9:b4:62:12:12:61:7c:9c:b2:
                    46:c6:5c:01:a7:7c:77:7b:c6:8d:ec:4d:e9:b8:27:
                    d2:91:35:40:dd:7a:d9:9b:a5:d7:9c:03:32:ae:d4:
                    20:09:b4:55:25:b4:ff:4e:28:ef:ee:62:bd:56:ae:
                    6a:3f:5a:bf:dc:9f:24:4d:14:ea:a8:6b:bb:b8:7d:
                    5e:c0:40:51:1d:1f:43:6e:35:0c:5a:a2:20:cc:58:
                    fa:41:31:1c:e5:25:4c:40:b9:da:95:e2:f4:1a:dd:
                    de:78:34:e5:da:eb:83:b8:05:29:61:ec:9b:7d:d1:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4F:98:36:D4:B6:6A:68:AB:1B:62:FD:38:0F:00:63:54:15:66:F9
            X509v3 Authority Key Identifier:
                keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:40:d3:43:98:6c:22:38:01:21:ce:71:ef:29:08:c8:dd:
         ef:71:7c:f1:08:cc:92:37:d4:99:c1:a7:77:63:d3:95:6d:58:
         d2:95:e4:4b:f4:d5:23:13:0b:b4:6d:54:c9:e2:41:ba:f5:c7:
         48:8d:e2:ab:97:47:06:34:2c:85:7d:78:54:93:91:49:3a:71:
         29:d8:31:a1:37:c3:87:04:e4:c3:d9:cd:3e:17:a6:18:0c:2c:
         a8:ce:03:4c:95:f0:a6:9b:14:c1:7c:35:2e:92:44:3a:93:91:
         5e:cb:26:7a:52:1e:8b:43:1c:86:03:b2:45:7c:d0:d9:82:e1:
         9e:74:6d:e3:ee:da:06:f9:5b:02:d2:c8:e5:94:94:6c:31:e5:
         76:84:62:3a:97:d9:4d:2c:91:3b:f2:66:65:24:e7:5e:c6:79:
         39:7f:4c:67:d7:a4:2b:c1:f3:c4:f7:a2:c1:91:94:14:2d:0b:
         81:62:ac:0f:de:d5:17:e2:b6:44:fb:eb:37:eb:e6:fb:b4:a8:
         66:f6:13:9e:79:81:a0:42:2c:98:32:13:73:53:56:c5:d9:f8:
         2e:25:2c:20:67:6f:5f:b4:28:69:04:9c:1c:42:2d:f8:f8:98:
         1b:9d:38:c5:2f:0b:8a:0b:ab:76:bf:3d:37:27:6c:46:2c:1f:
         45:15:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:48 2026 by rpki-client