This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
File:                     ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json)
Hash identifier:          gqZ/N0XiqJ9gOJGWDixiZ3wQtkjNi9n03Gz7o+vBbdU=
Subject key identifier:   D8:09:CE:63:4E:97:45:08:A3:EF:F1:5A:AD:BF:F4:E4:54:72:73:D3
Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F
Certificate issuer:       /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
Certificate serial:       0A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
Manifest number:          0A7C
Signing time:             Sat 24 Jan 2026 19:04:09 +0000
Manifest this update:     Sat 24 Jan 2026 19:04:09 +0000
Manifest next update:     Sat 31 Jan 2026 19:04:09 +0000
Files and hashes:         1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: UsfNUuJ/CdqF0sT1E2Lu8Bpv9puJHkhiX0JF1KjPySY=)
                          2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: yZGCclZoBxnBhfhgaEtvdMtpamiVGJaHMeM0i3edazA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
        Validity
            Not Before: Jan 24 19:04:09 2026 GMT
            Not After : Jan 31 19:04:09 2026 GMT
        Subject: CN=697517a9-ad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:60:83:e8:b7:73:6e:bd:34:32:a8:3b:ee:
                    d3:df:ee:03:7f:9c:13:2e:0b:27:bf:1a:d2:26:e6:
                    73:ca:65:fb:2f:a3:51:5c:90:3f:cf:cb:72:23:33:
                    77:d8:f6:3d:91:87:57:b6:4c:3b:2b:0f:f3:11:04:
                    42:b0:5a:85:90:4f:4c:15:da:c4:bb:ec:f9:19:bf:
                    70:73:9d:31:d9:ab:60:d4:d3:a1:83:0e:01:90:c5:
                    9a:38:a7:d9:c9:77:30:fe:b8:0f:c9:fd:9c:3d:5f:
                    0b:e0:49:b1:68:bd:c1:4e:43:20:b7:12:58:93:79:
                    32:2d:9f:2c:2f:96:8f:4e:11:8e:d4:9f:c4:fd:4d:
                    32:36:b5:07:dd:af:b6:bf:78:35:53:31:05:d9:22:
                    45:2a:23:f0:50:53:7f:e6:89:7d:9e:e0:c8:9a:f9:
                    c4:bc:9d:65:bd:a4:75:54:30:6f:0f:a8:d2:d3:75:
                    4a:be:b5:00:50:2b:58:87:86:15:1d:ec:1b:b7:0a:
                    e0:d5:e2:1e:28:08:08:19:16:6c:06:df:26:0c:84:
                    a4:57:cc:23:e7:43:b7:e7:be:b9:d5:00:d2:a3:b3:
                    2a:cb:17:b7:4d:00:91:a7:78:c4:54:4a:0c:82:35:
                    88:34:73:a7:d9:98:31:d3:15:23:87:eb:43:77:cd:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:09:CE:63:4E:97:45:08:A3:EF:F1:5A:AD:BF:F4:E4:54:72:73:D3
            X509v3 Authority Key Identifier:
                keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:2f:03:98:9a:8c:15:84:eb:ec:87:a6:75:da:ce:72:d9:
         d0:58:20:d1:06:f3:51:f7:1f:15:c1:5f:ed:e3:02:73:4f:2a:
         d6:f2:75:ca:64:1f:e7:cb:78:05:d4:e8:9d:26:9d:ad:0b:18:
         8e:51:62:09:d3:eb:8f:e5:a2:29:53:d5:35:55:51:df:b7:6b:
         28:cb:cd:71:9d:4c:4b:4c:fa:18:98:d1:0a:4b:c7:64:0c:9d:
         2c:cf:df:06:24:d8:be:12:f6:7d:c1:af:0e:6d:74:b1:39:f0:
         0c:ab:2b:e6:d5:ba:1e:84:7e:80:46:c2:51:0d:0e:0c:bd:24:
         4b:28:d9:0e:4d:52:2d:e7:6e:06:91:30:fd:9e:1c:00:43:ee:
         0d:42:84:c6:69:82:1a:6e:81:e0:cf:e3:4b:5f:15:3f:09:a6:
         af:51:46:45:8a:87:5d:83:ff:2f:d4:1c:ab:56:91:37:e5:59:
         1f:e8:cb:87:fd:57:d5:d3:c6:4f:df:4d:ab:bc:c2:09:b9:1c:
         9c:7f:8d:8d:81:01:63:08:7e:81:5f:eb:1e:48:af:ef:df:a4:
         85:86:06:5f:8c:75:da:53:ba:2b:a7:56:ff:6a:1d:e3:13:c9:
         6b:39:7a:f4:de:96:4b:4b:60:1c:2c:61:f8:e0:4e:f2:56:10:
         c0:df:ac:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF
RTNBNDUwNUYwHhcNMjYwMTI0MTkwNDA5WhcNMjYwMTMxMTkwNDA5WjAYMRYwFAYD
VQQDDA02OTc1MTdhOS1hZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthVgg+i3c269NDKoO+7T3+4Df5wTLgsnvxrSJuZzymX7L6NRXJA/z8tyIzN3
2PY9kYdXtkw7Kw/zEQRCsFqFkE9MFdrEu+z5Gb9wc50x2atg1NOhgw4BkMWaOKfZ
yXcw/rgPyf2cPV8L4EmxaL3BTkMgtxJYk3kyLZ8sL5aPThGO1J/E/U0yNrUH3a+2
v3g1UzEF2SJFKiPwUFN/5ol9nuDImvnEvJ1lvaR1VDBvD6jS03VKvrUAUCtYh4YV
Hewbtwrg1eIeKAgIGRZsBt8mDISkV8wj50O357651QDSo7Mqyxe3TQCRp3jEVEoM
gjWINHOn2Zgx0xUjh+tDd8095QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgJzmNO
l0UIo+/xWq2/9ORUcnPTMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1
NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0
b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKgC8DmJqMFYTr7IemddrOctnQWCDRBvNR9x8VwV/t4wJzTyrW8nXK
ZB/ny3gF1OidJp2tCxiOUWIJ0+uP5aIpU9U1VVHft2soy81xnUxLTPoYmNEKS8dk
DJ0sz98GJNi+EvZ9wa8ObXSxOfAMqyvm1boehH6ARsJRDQ4MvSRLKNkOTVIt524G
kTD9nhwAQ+4NQoTGaYIaboHgz+NLXxU/CaavUUZFioddg/8v1ByrVpE35Vkf6MuH
/VfV08ZP302rvMIJuRycf42NgQFjCH6BX+seSK/v36SFhgZfjHXaU7orp1b/ah3j
E8lrOXr03pZLS2AcLGH44E7yVhDA36wh
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:43 2026 by rpki-client