This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          h7oQDJ4Z6kkZNxxW2ytvlmDtQBcEJ6P+skwesPov5/I=
Subject key identifier:   5F:DE:B3:E8:5C:8A:99:04:FF:22:5C:C5:55:84:3B:76:B8:8B:82:35
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1BF8
Signing time:             Sat 24 Jan 2026 16:01:36 +0000
Manifest this update:     Sat 24 Jan 2026 16:01:36 +0000
Manifest next update:     Sat 31 Jan 2026 16:01:36 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: OLpcs5Y2aaNwVCeCG9jUuG78AZmWzB9rYwXWUjRAJk0=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=)
                          3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7183 (0x1c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Jan 24 16:01:36 2026 GMT
            Not After : Jan 31 16:01:36 2026 GMT
        Subject: CN=6974ece0-fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ff:72:d4:2d:13:d7:e0:e3:80:6b:4d:6a:be:
                    37:e1:b4:d5:cc:52:9c:96:a0:a4:89:76:74:21:15:
                    f7:2b:f9:c3:4c:50:29:8b:32:a1:76:85:59:f0:dd:
                    a1:80:4b:ed:43:42:b1:06:f6:d2:48:c7:79:07:24:
                    4e:ca:47:dc:ef:28:9c:12:6a:e7:e0:f0:d0:f8:dc:
                    bd:fa:02:8b:66:54:5f:a4:e8:de:41:3b:25:d9:4c:
                    29:0f:eb:3b:24:3f:fb:65:13:3f:40:88:12:da:3d:
                    87:b3:1b:3d:fe:c3:91:d1:f5:62:72:9d:b9:5e:76:
                    b4:a6:36:98:4a:c6:87:26:11:76:34:b0:82:ec:9a:
                    0d:07:06:a3:89:f1:86:1c:bc:9f:b4:a1:0c:77:1b:
                    d8:52:fe:10:1b:6d:5c:d0:38:2a:9b:33:31:36:8c:
                    b1:17:db:0e:14:4a:9d:ee:bf:e2:79:2f:f0:2a:be:
                    90:6d:54:28:c3:86:39:1b:8a:15:31:3b:56:61:c5:
                    0c:a6:c5:77:70:38:6f:aa:f8:74:69:ab:cd:42:41:
                    84:01:03:cf:f2:18:c3:22:9d:a8:bc:b0:e6:77:42:
                    b6:6c:7e:7b:de:53:5e:54:b5:85:4f:9a:a3:3b:ac:
                    63:ba:f5:ca:a1:ba:c2:0b:5b:e8:a0:46:cc:15:47:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:B3:E8:5C:8A:99:04:FF:22:5C:C5:55:84:3B:76:B8:8B:82:35
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:2d:11:97:6a:8e:99:f5:fe:33:78:92:01:d4:c9:60:0c:
         c6:94:1f:c9:1b:91:2d:97:ec:29:e0:e8:69:a1:d0:73:10:95:
         27:11:b7:de:0c:8d:1f:55:87:b9:14:af:5f:80:94:4a:34:7c:
         2f:c2:52:b9:59:2e:81:2c:bf:53:9a:06:f6:eb:4c:c9:6b:7d:
         11:e0:84:3c:66:51:68:d0:bc:dc:5e:5f:5e:e7:0e:0b:7d:35:
         6a:0d:0e:18:40:ec:82:00:7c:02:4e:dd:05:96:f2:c0:f6:1f:
         8b:75:d1:fa:b5:24:65:1f:cc:4a:6c:65:a8:ac:9d:23:68:37:
         07:fc:04:6f:2b:1b:d5:09:62:58:9b:39:fb:d2:01:24:08:5a:
         39:98:f8:02:1d:3b:45:ce:78:75:d6:73:98:13:c0:e9:a4:f3:
         7d:90:36:7e:d5:17:e5:df:16:52:67:68:ad:d1:2e:0a:88:0c:
         8b:c2:f4:28:3f:ff:8f:5d:8a:a8:8b:d0:e8:1a:ea:bd:bd:06:
         23:4f:dd:b6:4b:42:68:c3:7b:71:06:80:af:fb:e0:f3:67:c2:
         49:f1:35:ab:12:42:c9:49:74:bd:89:11:93:2a:c5:2b:86:70:
         a8:5e:60:90:4e:76:9c:bc:a0:bd:fe:b3:77:d0:aa:a8:81:e4:
         fb:bf:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:06:55 2026 by rpki-client