This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File:                     rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier:          l4badJjCDZs93B3pdKMx3rcPqvlV6zObNk997JOjFsg=
Subject key identifier:   21:EC:64:93:B6:0C:B0:29:C4:BB:2D:AC:CC:2F:50:8F:F6:89:1A:7D
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer:       /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number:          68
Signing time:             Sat 17 Jan 2026 06:00:38 +0000
Manifest this update:     Sat 17 Jan 2026 06:00:38 +0000
Manifest next update:     Sat 24 Jan 2026 06:00:38 +0000
Files and hashes:         1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: 5GPnQCLl2z3lNKv7IJpR+I8Sjwo8dPHUVOaEbK6adsM=)
                          2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
        Validity
            Not Before: Jan 17 06:00:38 2026 GMT
            Not After : Jan 24 06:00:38 2026 GMT
        Subject: CN=696b2586-3305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:03:bc:06:81:19:03:fc:21:b3:2b:55:77:
                    3a:68:56:00:81:b0:3c:d9:29:f0:0b:6e:d8:24:79:
                    5d:e9:a4:d3:e4:f6:f8:44:de:52:f7:b4:47:37:de:
                    a4:ef:93:73:da:a3:9d:26:fb:c4:70:55:67:a4:d1:
                    5f:3a:64:af:08:6e:50:22:45:34:d3:42:08:cb:d9:
                    b6:8b:34:ae:33:ff:92:4d:c5:a7:96:30:1c:30:29:
                    5d:c4:d8:25:f4:a3:77:a7:8e:fe:4b:84:ae:c5:8d:
                    59:9e:ec:4b:cc:35:86:cd:83:ff:8d:1e:d2:92:30:
                    04:a3:50:7b:27:10:c4:de:d1:62:67:3e:ae:dd:af:
                    06:9f:1d:d7:8e:5a:c8:72:31:15:5b:23:74:7f:b5:
                    fa:88:f0:9a:30:1a:fc:9f:6a:7e:77:73:3f:67:ad:
                    13:79:96:40:92:fc:ed:64:2b:9b:89:9d:b3:60:d2:
                    46:60:cd:2a:dc:ff:2b:5f:d5:5b:2d:d1:3b:f3:de:
                    64:90:66:cf:ae:9b:b6:44:30:f4:f5:51:ec:a2:d8:
                    03:71:0a:de:2b:82:0f:75:21:77:2b:ba:6a:dc:18:
                    fb:db:9e:05:4b:05:f6:c3:b1:81:ef:7e:b3:4c:2b:
                    29:d5:6c:07:26:d5:0d:fe:b8:d2:a7:f6:47:a6:f0:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:64:93:B6:0C:B0:29:C4:BB:2D:AC:CC:2F:50:8F:F6:89:1A:7D
            X509v3 Authority Key Identifier:
                keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:db:7c:d9:20:d0:2b:3c:c6:57:95:af:84:2f:0b:4b:ce:50:
         5d:a4:45:6b:09:f1:21:37:d3:70:e4:d9:02:3b:1a:e7:eb:5c:
         03:67:00:64:4a:87:4e:02:16:e1:bd:93:57:c3:c3:bc:b4:9d:
         dd:40:8b:53:9b:19:8d:11:d3:08:4b:a5:ef:a6:7b:3c:47:f6:
         5f:f8:58:7c:59:6d:bd:07:f9:e6:2b:76:e3:1c:a4:8c:d2:bf:
         3f:92:ed:4d:dd:d7:60:95:1f:97:d5:6c:87:ce:1f:84:2b:98:
         b5:ca:4b:0e:cc:9e:99:43:3c:51:ae:fa:67:5a:9f:6a:4e:0b:
         24:7c:bc:1d:54:3d:bf:66:00:87:eb:db:8c:31:34:30:cc:dc:
         28:18:e9:05:4d:9c:3e:b6:fe:25:5a:70:11:89:b5:2c:5f:c2:
         a9:32:b7:8e:28:91:65:76:8e:ba:79:35:fd:5a:ae:b8:95:79:
         fd:61:86:b7:b1:4b:f5:b3:87:f1:5e:be:6b:0e:44:7e:26:59:
         21:50:37:e3:cd:e2:a3:11:f1:7c:ba:35:e0:4a:9c:23:3f:46:
         e0:19:30:9c:e8:2f:84:05:e8:a1:3b:5c:19:7f:1f:6c:e9:36:
         05:8a:18:d5:c1:b8:e2:9e:2d:4f:69:d4:54:ee:ec:ac:41:d2:
         3a:ff:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:14 2026 by rpki-client