This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File:                     1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier:          4BDwr2HxeLSwz2sEpygTqEqQJYwxax/3xbtT4BV6pWA=
Subject key identifier:   CF:30:5D:44:CD:1F:F8:2B:F7:B0:9A:68:E7:31:37:B3:56:55:9A:22
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0B9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number:          0B90
Signing time:             Sat 24 Jan 2026 18:36:33 +0000
Manifest this update:     Sat 24 Jan 2026 18:36:33 +0000
Manifest next update:     Sat 31 Jan 2026 18:36:33 +0000
Files and hashes:         1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: NcgK+s3/700y9yFDD1hOQQ/wcjwXODeG1QJn+xXXwLw=)
                          2: 74CA44AA049F11F087661234C4F9AE02.roa (hash: Dt3Rxw54HIQ46kEi6T0edZoyMwWemQneM/8kvnTf7jo=)
                          3: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: V1nVjcRX5R04AqVfR5w5cXlLTGnKcZ3YhA/Vr4DbC7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Jan 24 18:36:33 2026 GMT
            Not After : Jan 31 18:36:33 2026 GMT
        Subject: CN=69751131-4232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:9f:33:9e:08:d4:04:71:96:51:8d:4f:5b:
                    74:e0:67:fb:ef:16:9c:25:12:1b:0f:5b:ef:52:11:
                    8c:56:b7:b5:30:a4:f7:c0:7b:7f:32:30:8f:34:ae:
                    8d:17:ff:99:6b:c9:d7:21:08:f6:45:b3:65:cf:a5:
                    98:37:70:e7:82:b6:14:a6:08:b3:38:26:8c:06:1c:
                    9a:91:13:50:9a:bd:ab:72:0f:18:4e:d2:91:58:d9:
                    9c:25:f5:6b:42:db:1d:07:51:55:cb:91:c2:6e:45:
                    04:ff:e2:bd:fa:96:58:f1:4f:84:09:6e:97:6e:84:
                    d2:9b:b4:0b:b3:f1:42:90:a5:a4:a4:db:ae:e1:63:
                    62:98:4b:4e:c9:8e:f1:0f:de:94:cc:7b:e7:a3:36:
                    19:e9:e8:42:f9:31:b4:8f:ec:9e:a5:c4:e1:cd:2d:
                    1c:5a:5d:b6:40:11:95:0d:b3:84:13:98:d1:17:72:
                    80:94:41:51:fe:36:3b:a1:c2:b1:df:8d:0e:8a:0e:
                    15:cd:ed:0b:ba:80:0d:9d:7f:d0:93:6a:2e:ee:77:
                    53:8f:7d:8c:11:f8:9b:cd:74:75:3c:ed:fb:b7:01:
                    db:3c:44:f7:1a:16:48:6f:59:86:5d:d0:c0:0d:9f:
                    71:ed:17:02:a7:c3:90:e8:6f:a1:35:13:40:b7:94:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:5D:44:CD:1F:F8:2B:F7:B0:9A:68:E7:31:37:B3:56:55:9A:22
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:70:5d:fb:5f:07:2b:aa:c1:4e:a5:6e:67:60:7b:ff:f2:
         20:8a:b4:66:c7:19:81:42:a0:84:d8:77:68:57:46:07:be:e9:
         7b:e1:44:ef:a1:42:50:2d:6d:c0:e0:fa:97:20:2a:6e:c2:43:
         36:95:d3:e9:8c:19:59:f3:72:21:68:74:54:09:05:f4:6b:8f:
         7d:f0:83:81:c0:a9:19:e5:e5:19:e7:67:04:b2:25:0b:55:fa:
         97:9a:90:4e:a4:05:06:fa:0e:fc:84:25:19:94:b1:16:7d:bb:
         57:b3:df:eb:e3:ae:b5:97:9e:89:3c:99:5a:0a:ec:8c:08:84:
         85:8a:d0:c3:94:54:45:34:b1:e9:c0:33:c9:29:16:6c:4e:97:
         13:0d:2d:25:a7:35:d3:2b:5b:fc:15:8e:45:0a:9d:cf:e8:51:
         8d:35:db:2a:1f:ae:92:a8:8a:92:18:05:d3:54:c5:a0:c5:d4:
         b9:91:43:f4:8f:54:65:5e:58:e5:c6:9a:c7:d8:c1:74:5b:e8:
         e5:98:1a:78:8d:28:1e:b2:e7:e8:fc:d2:df:38:63:0e:b1:3e:
         07:a4:d5:b6:e0:79:96:6c:71:93:c5:19:44:5f:b2:ff:33:7e:
         a2:d0:24:03:81:70:cb:c0:42:0b:b7:a8:9c:49:78:a7:9a:ce:
         9e:35:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:14 2026 by rpki-client