This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File:                     q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier:          Mrh4k6O25Z61rofeS2N1A9BZzF87RzZ78IaQHEPMtYA=
Subject key identifier:   6F:AB:FF:0F:1A:44:5E:63:F6:C8:70:2E:DB:94:8E:1E:9D:82:C1:C7
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       3683
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number:          35AB
Signing time:             Sat 24 Jan 2026 14:27:49 +0000
Manifest this update:     Sat 24 Jan 2026 14:27:49 +0000
Manifest next update:     Sat 31 Jan 2026 14:27:49 +0000
Files and hashes:         1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: w7rPtT6WFoUwaBkZksoJJ8kfeuRPMgADXPmdXpatuOM=)
                          2: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: 1K5D/YGkb4vaB5fYueEaz915gxnQJAISZWApLFWpf04=)
                          3: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: sAQbMZEcMczj5RHqmOv2OaiDpZIXaUFx3oE34rVPeYo=)
                          4: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: rKeTKoMj7TYIpspiwdUo3fnXHo6IEREq4lIaF9E8hIA=)
                          5: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: Q4QnXloRUzx2A7Tu4hex2E+VF8wZbHiTAEA4RdwhS1w=)
                          6: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: duKdaSAy3lZyijWEMsDKsNMUdFH6paWRdLfwaKH4jqk=)
                          7: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: 9mT7qPe0jtXzHyfYPGvCu4areC+be6JvN+bMcwo+UAE=)
                          8: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: 9sCJlpZ+MZm9Y8fMj5geVr74KyJJassWJH9YXhrkVAQ=)
                          9: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: 4X/9XTCj8Tn5wmoatIqa/M1mn+d3I1LzqCMAdWjEEKo=)
                          10: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: qDmF4kH3QlbY4Zqg12dB1C1trP96qj3Fl98NZEEVYjQ=)
                          11: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: NcbrIjjwUgYHdCTODgZkq15jqvFAdToiBXgMc60L8i0=)
                          12: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: mNtwPjnCIz/fPyYT4pHp2y4OsV0nrnCLOsALXcX5nBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13955 (0x3683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Jan 24 14:27:49 2026 GMT
            Not After : Jan 31 14:27:49 2026 GMT
        Subject: CN=6974d6e5-c1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:85:40:4f:dc:cd:3a:13:52:9d:2b:0d:d8:
                    fa:af:84:04:cd:ed:e4:f8:c4:85:e2:c8:25:d3:e4:
                    cf:02:32:aa:41:c7:50:3e:86:7a:0d:3f:54:40:42:
                    5e:72:b5:f4:a3:66:df:f5:5e:a4:d1:0b:22:1c:a0:
                    2a:cb:4d:42:c5:92:d9:7f:34:98:dd:9e:0b:bd:69:
                    03:cd:88:9b:6d:a3:2b:f6:37:42:c5:53:d6:e9:70:
                    a5:fd:70:4d:89:4f:44:9c:9b:92:0d:4b:3e:00:6d:
                    f6:f2:44:23:56:c4:40:f0:41:b4:87:1f:17:b9:8e:
                    ea:fc:56:96:37:90:ae:0e:70:44:4b:ec:4f:2d:86:
                    58:31:1a:5d:73:b4:26:f6:8d:d8:dd:3b:03:b7:d4:
                    59:02:13:35:1c:63:d5:aa:40:2e:91:7c:ad:56:dd:
                    08:71:cd:c8:a2:d5:8f:6a:8d:d8:3f:48:fc:2a:af:
                    4d:28:c7:23:85:2a:12:72:74:0a:54:87:60:8d:cd:
                    d3:7a:a9:e1:56:38:98:cf:5e:18:0a:cd:4d:0e:9a:
                    0c:b3:5a:c1:99:8f:71:72:75:cb:d5:85:86:73:1f:
                    bd:ac:9c:ff:6e:3a:19:0b:9b:e9:48:95:6e:db:a4:
                    40:ad:7e:91:a1:62:62:9b:66:1a:09:e4:ab:ae:52:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AB:FF:0F:1A:44:5E:63:F6:C8:70:2E:DB:94:8E:1E:9D:82:C1:C7
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:3e:50:77:6c:b6:9d:66:f3:39:06:cf:1e:99:9f:cb:df:
         68:e3:30:cf:e3:73:73:63:11:99:05:80:ac:4e:a2:f1:88:a8:
         97:53:39:36:0f:68:a9:cd:85:fa:d3:09:c6:dc:65:19:83:5f:
         21:bb:e8:7d:a1:60:d3:3b:22:8f:c5:3a:e5:cb:82:d6:b1:24:
         c9:af:5a:70:20:fb:a3:d2:b6:dc:c8:47:f0:49:bf:c7:70:c7:
         5b:30:50:89:e2:4b:7d:57:5c:f1:6a:68:ff:c2:69:f9:9a:f3:
         a6:7f:6a:65:38:17:52:65:83:4e:73:36:dc:d7:f8:5a:40:f1:
         61:e1:0b:4c:4c:9e:cf:e3:42:c3:f4:39:1c:f4:f3:84:13:c2:
         16:ba:ca:88:d8:33:05:ba:7c:55:63:05:a9:e5:c6:6e:3a:28:
         80:90:e5:15:47:65:6f:d0:b2:a6:76:89:6a:bd:7e:29:e2:35:
         47:73:53:19:6e:be:84:27:11:20:97:c0:c0:16:a4:b2:d5:90:
         93:34:da:6e:4c:af:e1:f2:a8:a0:ed:c8:b2:8f:fc:76:c5:c0:
         75:eb:ba:09:7b:92:4d:a9:2a:1a:44:8c:ee:66:8d:f2:b5:bc:
         79:77:60:55:8a:16:bc:9a:2a:8f:fc:ed:5d:d2:41:65:5e:77:
         77:b5:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:17 2026 by rpki-client