This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File:                     kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier:          bT/wudocLuNLWKi7HylUqF+xVPSmbzu8XKxBEaGFYIE=
Subject key identifier:   72:07:95:F7:0A:67:B7:2F:3F:6B:25:BF:FC:E4:B0:D8:D2:9B:B5:98
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer:       /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number:          E4
Signing time:             Sat 24 Jan 2026 22:40:51 +0000
Manifest this update:     Sat 24 Jan 2026 22:40:51 +0000
Manifest next update:     Sat 31 Jan 2026 22:40:51 +0000
Files and hashes:         1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: 9pUusSrRfNjh0uzYwRuiHtndw/kDaKwA+gHw5mO0mBA=)
                          2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: Ifm3IRESO4IiNyy88ffJnkP8xwASc9gofSuSR7nlwHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
        Validity
            Not Before: Jan 24 22:40:51 2026 GMT
            Not After : Jan 31 22:40:51 2026 GMT
        Subject: CN=69754a73-2067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:93:7d:f8:f3:3a:45:9e:78:d2:ce:dc:6b:
                    87:68:70:13:c9:6d:fe:87:64:40:dd:15:ba:e7:d5:
                    25:83:b0:4b:aa:86:c9:ef:a8:69:32:a5:89:82:fb:
                    81:12:5e:28:be:3b:74:55:58:41:2a:6d:20:05:fe:
                    38:a2:46:fd:71:6b:cd:68:bc:d2:6f:09:08:ab:06:
                    b6:fc:5b:53:64:71:98:58:18:ee:91:94:e6:33:12:
                    6b:be:36:fe:ce:9a:83:59:61:05:83:bb:fa:c8:d6:
                    3e:a8:b5:74:a4:a9:1c:79:f4:8c:50:6e:83:00:b4:
                    a0:76:2d:15:bc:a8:31:18:89:29:cf:5f:08:35:e8:
                    89:a1:6a:5c:67:2a:3f:52:e5:33:b8:75:2c:cf:47:
                    9c:be:d1:94:d5:40:bc:ca:88:29:0e:7e:e5:50:95:
                    00:75:0c:67:c8:a6:09:f9:b0:4e:a7:4f:66:b0:3e:
                    08:56:c9:18:3c:ef:a8:e1:11:13:3e:f5:6c:49:ef:
                    0a:ce:5c:48:4e:aa:66:87:1b:b3:c4:a2:a4:db:2e:
                    3d:1f:2c:d9:7f:1f:00:34:26:5c:f5:24:6c:84:e7:
                    34:e5:09:68:b7:5b:20:26:ca:a6:a0:5a:93:72:98:
                    93:4c:fb:a6:d7:21:57:31:a8:05:8e:7a:89:59:c4:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:07:95:F7:0A:67:B7:2F:3F:6B:25:BF:FC:E4:B0:D8:D2:9B:B5:98
            X509v3 Authority Key Identifier:
                keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0d:c7:51:c8:9b:47:33:a1:dc:2b:9a:fd:c6:a0:1e:d2:01:
         13:c0:7d:b3:6b:01:9d:b7:7b:54:19:25:13:84:13:d8:5d:db:
         07:cd:92:a0:be:6c:a9:f2:21:77:fe:42:fa:04:8f:3c:29:4e:
         b3:a4:b2:17:af:36:ff:7a:06:30:9b:46:4a:7b:66:a5:65:d8:
         74:a5:66:2a:4f:b0:e2:18:32:ec:2c:7b:11:db:88:3b:86:a8:
         74:13:81:5b:43:97:6f:71:ce:51:48:06:3f:8f:dd:8e:9e:90:
         ce:00:63:47:7e:55:a4:b4:00:c1:8a:74:ac:2f:22:0f:64:b5:
         1d:88:91:db:31:2e:65:31:00:9f:4c:11:cb:db:e7:e8:05:15:
         f7:db:73:dd:e4:b0:63:1c:11:2a:0d:7b:4c:08:74:1d:8c:9b:
         f4:73:3d:70:28:d8:4b:4e:36:89:96:0a:41:bd:8a:d0:6d:2d:
         25:a5:c7:f6:36:ec:3d:63:e9:b6:c4:d8:37:9f:2d:54:b0:20:
         85:b1:0d:de:9a:71:4d:7f:e8:97:6f:dc:81:3c:c2:2d:74:35:
         26:ea:58:d0:40:6a:7f:f4:5a:d3:89:78:60:49:37:aa:1b:7a:
         65:a3:9e:88:9e:d1:3e:ab:98:a8:52:4e:19:24:b3:3f:2e:ba:
         df:76:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:20 2026 by rpki-client