This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
File:                     qJeuj_IUHLM06qS4gcw8VlbUdDY.mft (raw, json)
Hash identifier:          fImkMhsGISm1c4ASa9yQ/rpOwS4FH7Z4COUy/Oz0VoU=
Subject key identifier:   92:4C:9B:AC:A5:B8:F0:17:3D:A2:89:A0:8E:34:28:27:DD:9F:C7:4B
Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36
Certificate issuer:       /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
Manifest number:          86
Signing time:             Sun 25 Jan 2026 00:40:31 +0000
Manifest this update:     Sun 25 Jan 2026 00:40:31 +0000
Manifest next update:     Sun 01 Feb 2026 00:40:31 +0000
Files and hashes:         1: qJeuj_IUHLM06qS4gcw8VlbUdDY.crl (hash: oD/yszHY5nBIuNNxZEIJc3HL5le3vN4lfVrda+Ua7G0=)
                          2: 89A0A916B94711F0A4F9263BC4F9AE02.roa (hash: XCkecjbnjIa4wyzq9mZUunq7CO9Z4u+vFial10Yxu9o=)
                          3: B59F3130AA5C11F08080113BC4F9AE02.roa (hash: RrN69emHD5LJJbN43b1ri6XKXD1rzQb2RimMmZsDRe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436
        Validity
            Not Before: Jan 25 00:40:31 2026 GMT
            Not After : Feb  1 00:40:31 2026 GMT
        Subject: CN=6975667f-250d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:53:f8:9d:76:c1:b8:e6:f9:60:f1:13:81:
                    33:c7:ed:91:ca:90:89:54:60:67:1b:37:09:64:86:
                    a2:1c:fc:eb:a4:38:ba:27:43:d4:4a:32:69:71:24:
                    06:82:bc:2a:db:19:0e:d3:72:ad:73:3f:3d:14:b3:
                    52:e6:27:7a:c3:b0:8d:11:31:d7:4f:f5:ae:83:a0:
                    d3:b0:95:63:b0:17:88:13:ee:df:33:1e:7f:86:b9:
                    09:c8:83:eb:8b:97:45:a8:86:45:82:70:71:f6:17:
                    42:6b:0b:da:f0:12:e7:ac:8c:f0:db:6c:54:f0:a3:
                    ab:7f:0c:dc:ab:f8:5a:08:72:d5:4b:35:1f:1e:6d:
                    74:3f:9b:7d:0b:99:5f:49:6f:ac:64:17:91:9e:6e:
                    06:95:be:58:3f:45:2a:e8:d3:58:c5:1c:a5:05:a3:
                    c2:90:7e:2c:d5:14:f3:3a:00:d1:33:24:07:c7:74:
                    21:a2:91:ba:9e:56:a7:df:25:98:d1:96:5b:50:eb:
                    b9:63:7b:e5:5f:a5:20:a2:56:11:de:4a:62:6c:f6:
                    be:e1:35:cf:39:39:80:bd:35:84:da:5d:2f:12:a8:
                    1e:6d:9f:24:ce:33:0f:85:32:2e:b0:e7:0f:96:0a:
                    b7:2f:ab:50:c3:e2:5a:ef:fc:1d:2d:43:52:b3:2f:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4C:9B:AC:A5:B8:F0:17:3D:A2:89:A0:8E:34:28:27:DD:9F:C7:4B
            X509v3 Authority Key Identifier:
                keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0c:03:2f:dd:30:a3:87:86:15:46:e9:38:11:68:82:d4:06:
         cf:9c:07:27:0c:29:9d:60:b3:a6:06:c0:5c:a9:3a:cc:15:aa:
         a7:4b:ef:59:f3:91:f5:7e:16:13:79:d4:2b:ae:18:6f:a5:85:
         3d:7c:5c:1d:f8:4c:cb:e1:96:cd:a5:b0:a9:79:70:fc:00:d7:
         33:b2:97:cf:4d:b8:ac:1d:83:2a:af:fc:70:53:36:af:1c:9d:
         20:d8:d5:54:26:22:e0:f6:bd:90:0b:c3:54:b4:a9:66:c9:e1:
         97:76:de:f6:b3:ad:7c:2f:97:dc:ba:c8:88:43:d2:b6:fd:18:
         81:43:9c:d2:2d:08:3f:bc:5f:32:b9:6c:e5:5f:63:9c:33:e4:
         c9:4a:94:90:5f:0a:4f:28:6b:0e:9a:b5:06:fe:99:37:90:67:
         ad:51:44:c9:f9:35:fe:ee:e3:14:ba:4e:2a:80:27:62:2a:f3:
         8d:88:22:96:d8:2c:b6:d2:d8:5f:27:48:08:1e:ce:36:2e:91:
         3d:68:95:c0:e3:6c:49:32:c0:1a:ea:62:03:6e:20:22:5d:24:
         2a:46:be:af:ee:5d:3c:26:22:f3:15:73:a6:18:a7:c9:11:de:
         5b:60:85:da:95:cd:3c:29:0c:c9:7c:5a:42:1e:a7:2e:ff:f1:
         92:6b:8d:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIyQjgxMTAvBgNVBAUTKEE4OTdBRThGRjIxNDFDQjMzNEVBQTRCODgxQ0MzQzU2
NTZENDc0MzYwHhcNMjYwMTI1MDA0MDMxWhcNMjYwMjAxMDA0MDMxWjAYMRYwFAYD
VQQDDA02OTc1NjY3Zi0yNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYlT+J12wbjm+WDxE4Ezx+2RypCJVGBnGzcJZIaiHPzrpDi6J0PUSjJpcSQG
grwq2xkO03Ktcz89FLNS5id6w7CNETHXT/Wug6DTsJVjsBeIE+7fMx5/hrkJyIPr
i5dFqIZFgnBx9hdCawva8BLnrIzw22xU8KOrfwzcq/haCHLVSzUfHm10P5t9C5lf
SW+sZBeRnm4Glb5YP0Uq6NNYxRylBaPCkH4s1RTzOgDRMyQHx3QhopG6nlan3yWY
0ZZbUOu5Y3vlX6UgolYR3kpibPa+4TXPOTmAvTWE2l0vEqgebZ8kzjMPhTIusOcP
lgq3L6tQw+Ja7/wdLUNSsy88JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJMm6yl
uPAXPaKJoI40KCfdn8dLMB8GA1UdIwQYMBaAFKiXro/yFByzNOqkuIHMPFZW1HQ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zNTgzRTU4NjUx
NjUxMUYwQkMxQ0FGNzVDNEY5QUUwMi9xSmV1al9JVUhMTTA2cVM0Z2N3OFZsYlVk
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FKZXVqX0lVSExNMDZxUzRnY3c4VmxiVWREWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjJCOC8zNTgzRTU4NjUxNjUxMUYwQkMxQ0FGNzVDNEY5QUUwMi9xSmV1al9JVUhM
TTA2cVM0Z2N3OFZsYlVkRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3DAMv3TCjh4YVRuk4EWiC1AbPnAcnDCmdYLOmBsBcqTrMFaqnS+9Z
85H1fhYTedQrrhhvpYU9fFwd+EzL4ZbNpbCpeXD8ANczspfPTbisHYMqr/xwUzav
HJ0g2NVUJiLg9r2QC8NUtKlmyeGXdt72s618L5fcusiIQ9K2/RiBQ5zSLQg/vF8y
uWzlX2OcM+TJSpSQXwpPKGsOmrUG/pk3kGetUUTJ+TX+7uMUuk4qgCdiKvONiCKW
2Cy20thfJ0gIHs42LpE9aJXA42xJMsAa6mIDbiAiXSQqRr6v7l08JiLzFXOmGKfJ
Ed5bYIXalc08KQzJfFpCHqcu//GSa41l
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:08 2026 by rpki-client