This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File:                     QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier:          rNAZz0WW1prg3xZ8Cvga7BpbbjZiqC6aek9dKOC3XM0=
Subject key identifier:   5E:A0:EF:A1:23:51:46:09:3C:98:B2:21:8F:B9:37:43:EC:52:08:A9
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer:       /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial:       0841
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number:          0839
Signing time:             Sat 24 Jan 2026 20:12:26 +0000
Manifest this update:     Sat 24 Jan 2026 20:12:25 +0000
Manifest next update:     Sat 31 Jan 2026 20:12:25 +0000
Files and hashes:         1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: xDv/N8OuBdXHo4iHcZ3XR2uCYEEvlWaZukETR4IOaHI=)
                          2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: WFvsYGxGbZsMpR4I2mqKInKvSm7CH4Awmh5yfhBmFLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
                          rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
        Validity
            Not Before: Jan 24 20:12:25 2026 GMT
            Not After : Jan 31 20:12:25 2026 GMT
        Subject: CN=697527aa-58a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:fe:0f:98:bb:aa:af:76:e2:df:99:8f:c4:
                    57:a3:f0:8d:12:11:5f:2c:4e:80:5a:4f:46:56:e8:
                    d8:a6:32:05:3e:97:57:90:e4:c6:f5:fb:8f:8b:a0:
                    d4:0a:8f:f2:83:b4:9d:18:af:e8:70:62:0b:da:3e:
                    38:82:79:2e:e2:9e:b0:f0:35:d7:ca:95:06:83:89:
                    fb:18:7d:70:4e:7d:87:f7:90:12:4e:fb:0d:58:d7:
                    e7:8f:be:f1:d6:81:57:54:d1:d6:be:3e:12:74:b9:
                    7d:fd:81:ab:c9:40:7f:ab:d0:70:f0:0e:93:4a:46:
                    1c:4d:f7:06:66:7e:6a:08:7b:96:42:1a:12:10:70:
                    fd:c7:b2:27:7a:f1:a9:f7:7a:a5:64:21:99:55:cd:
                    e2:90:8c:8e:3c:e3:7f:bb:c1:14:c1:ce:06:75:ec:
                    e1:f2:26:45:ec:3c:d7:af:4c:b0:d6:4b:96:61:3a:
                    5b:44:69:54:af:66:05:32:01:51:97:3c:21:a9:15:
                    62:a7:29:93:c9:db:cc:10:d3:f4:b3:9e:a6:6e:ce:
                    6c:48:f6:5f:a3:5f:c8:2b:d0:75:f9:7b:96:4f:eb:
                    3d:bb:9b:29:bc:eb:df:80:6d:3f:ab:aa:cc:b7:ba:
                    05:8a:c1:9e:7b:78:4a:9b:77:89:d2:09:e1:19:a2:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:EF:A1:23:51:46:09:3C:98:B2:21:8F:B9:37:43:EC:52:08:A9
            X509v3 Authority Key Identifier:
                keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1e:68:86:9d:7a:83:42:19:c5:b0:8a:d2:79:cf:0f:a4:b2:
         0b:98:5e:25:8f:56:a3:20:a8:3a:c6:a0:af:d9:69:28:ac:c0:
         01:a5:23:2d:ef:00:84:e7:66:65:e6:e7:bc:27:da:3f:47:fd:
         af:0f:2f:5a:62:18:c8:9c:6c:08:11:17:9b:ea:3e:93:5a:36:
         33:88:32:19:d7:5e:c0:4b:b6:82:33:f5:d5:26:4d:c1:36:09:
         48:80:d6:e5:8e:02:9e:a4:ec:94:3d:ae:d6:64:5c:03:cd:40:
         15:fd:63:b6:1c:7f:65:9f:5c:59:ac:5d:5c:50:40:c9:21:2b:
         b3:df:99:6d:f0:ca:74:4b:67:3a:bd:07:64:3d:33:d1:8a:98:
         15:05:e3:89:d1:4b:e7:0c:61:58:9a:c8:da:42:4b:9b:95:a8:
         f3:53:99:3e:09:08:da:89:46:7e:89:81:cf:b3:85:a8:bb:ea:
         66:4f:c7:80:1d:47:24:de:f7:e3:ea:5d:a5:53:ae:1f:0a:df:
         ba:3f:3d:49:25:50:0f:60:cf:72:1c:18:b1:14:17:e6:11:52:
         d3:ac:67:95:4b:ea:e5:24:6c:fe:bd:e0:b4:94:ce:54:0c:4e:
         25:e0:78:9a:2e:9f:ba:77:47:2a:61:c8:06:8a:f5:85:0e:66:
         82:c6:1e:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGNEMxMTAvBgNVBAUTKDQxRTM4MEEwQzlGQUJDQzEwRjhFQTMyOTYzNTJFNkE3
ODc4RDM1M0IwHhcNMjYwMTI0MjAxMjI1WhcNMjYwMTMxMjAxMjI1WjAYMRYwFAYD
VQQDDA02OTc1MjdhYS01OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm/+D5i7qq924t+Zj8RXo/CNEhFfLE6AWk9GVujYpjIFPpdXkOTG9fuPi6DU
Co/yg7SdGK/ocGIL2j44gnku4p6w8DXXypUGg4n7GH1wTn2H95ASTvsNWNfnj77x
1oFXVNHWvj4SdLl9/YGryUB/q9Bw8A6TSkYcTfcGZn5qCHuWQhoSEHD9x7InevGp
93qlZCGZVc3ikIyOPON/u8EUwc4Gdezh8iZF7DzXr0yw1kuWYTpbRGlUr2YFMgFR
lzwhqRVipymTydvMENP0s56mbs5sSPZfo1/IK9B1+XuWT+s9u5spvOvfgG0/q6rM
t7oFisGee3hKm3eJ0gnhGaI+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6g76Ej
UUYJPJiyIY+5N0PsUgipMB8GA1UdIwQYMBaAFEHjgKDJ+rzBD46jKWNS5qeHjTU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEY0Qy85NDA3NjVGQ0Y5
NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZNRVBqcU1wWTFMbXA0ZU5O
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FlT0FvTW42dk1FUGpxTXBZMUxtcDRlTk5Ucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEY0Qy85NDA3NjVGQ0Y5NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZN
RVBqcU1wWTFMbXA0ZU5OVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEHmiGnXqDQhnFsIrSec8PpLILmF4lj1ajIKg6xqCv2WkorMABpSMt
7wCE52Zl5ue8J9o/R/2vDy9aYhjInGwIEReb6j6TWjYziDIZ117AS7aCM/XVJk3B
NglIgNbljgKepOyUPa7WZFwDzUAV/WO2HH9ln1xZrF1cUEDJISuz35lt8Mp0S2c6
vQdkPTPRipgVBeOJ0UvnDGFYmsjaQkublajzU5k+CQjaiUZ+iYHPs4Wou+pmT8eA
HUck3vfj6l2lU64fCt+6Pz1JJVAPYM9yHBixFBfmEVLTrGeVS+rlJGz+veC0lM5U
DE4l4HiaLp+6d0cqYcgGivWFDmaCxh4U
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:37 2026 by rpki-client