This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File:                     2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier:          AVxxxpD5SmmintQYNscJCIOXv0Khukv2S4QR1Q8K0/s=
Subject key identifier:   F8:CF:3A:D9:20:61:CD:CB:58:25:E2:1C:D1:D4:19:08:6C:FB:46:6E
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer:       /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number:          82
Signing time:             Wed 21 Jan 2026 05:48:28 +0000
Manifest this update:     Wed 21 Jan 2026 05:48:28 +0000
Manifest next update:     Wed 28 Jan 2026 05:48:28 +0000
Files and hashes:         1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: ZqE0NrVUKRbRqpbI+4YdK8pgZ8wHSgUI5RrVY36/gpI=)
                          2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: sEqEu4ZHkgzDYvWJDII6WZOgnySzMlBVpuOMflPaWms=)
                          3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: n8XUmr5KjS13+kjcxi8G3iN9bzXMPfNq3EcEqckzzBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 05:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
        Validity
            Not Before: Jan 21 05:48:28 2026 GMT
            Not After : Jan 28 05:48:28 2026 GMT
        Subject: CN=697068ac-d75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:08:42:92:dd:03:b8:c4:eb:1a:c7:81:ca:
                    5d:35:51:1f:56:5f:61:f1:5c:a3:2e:0e:a1:9f:a6:
                    41:e7:46:80:0d:ba:e6:0d:76:0e:99:ad:bf:44:9a:
                    42:9b:e9:24:36:64:ea:59:de:1e:c8:96:d3:77:15:
                    e4:df:74:58:97:c2:b3:82:df:9a:33:96:8e:bd:97:
                    7b:cd:d6:4f:d8:8e:3d:70:ea:9a:3a:cb:6b:cf:34:
                    a6:d2:e2:87:fb:32:43:74:39:5f:f5:c5:06:81:66:
                    dd:0d:51:64:46:2f:c9:0e:fe:47:7d:df:ed:ac:88:
                    c0:0e:70:b8:a6:13:53:34:46:9d:7a:f9:4f:fa:8f:
                    1b:4f:75:49:d6:2d:a0:44:6a:cb:aa:1c:b8:6d:9d:
                    3f:3a:c4:ba:0a:d2:c5:4d:e8:84:fa:db:26:66:10:
                    ce:e2:4f:1b:33:5c:88:be:e0:3f:6a:21:a4:6d:3b:
                    e8:5c:43:23:fe:cf:87:be:9c:56:14:ae:7a:05:3b:
                    74:84:4b:00:1e:25:c9:16:2d:4d:55:e6:a4:92:58:
                    2f:15:6d:69:58:46:34:62:5e:e1:a5:54:a8:f3:e1:
                    9f:14:51:15:9e:17:9d:ab:31:2f:f3:7b:8d:49:b5:
                    93:9c:d5:98:5c:bc:3e:60:c9:f3:a7:03:cc:0d:b4:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:3A:D9:20:61:CD:CB:58:25:E2:1C:D1:D4:19:08:6C:FB:46:6E
            X509v3 Authority Key Identifier:
                keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:51:b2:ef:62:51:42:f5:26:7b:2e:1b:71:c5:14:04:f4:
         5e:cd:c7:9d:aa:38:17:63:2a:57:3f:7b:65:e2:64:81:dc:3e:
         6e:76:77:d8:ad:be:a5:4e:69:80:a5:ae:10:b0:fd:13:26:4d:
         5e:4b:07:04:c2:65:e5:20:15:81:9d:8f:0d:9b:56:fc:3d:00:
         fe:67:6a:9b:b8:d9:fa:65:1c:e5:1c:82:74:d5:11:98:35:73:
         78:96:f9:27:3c:e7:8f:a3:c4:a5:d5:ee:7b:9a:a1:83:fd:10:
         89:41:0d:d1:8c:ca:07:ac:34:c2:ea:14:36:3e:f1:72:ee:76:
         ed:fb:e9:d6:69:16:99:10:b4:c6:bd:b7:50:11:9e:10:4d:e6:
         53:3b:81:a9:3e:65:36:e4:51:95:18:26:55:b3:5a:4d:bb:c2:
         53:b3:4b:dc:cc:6a:bd:6a:d4:51:d7:ce:ec:6e:b9:62:73:54:
         09:72:49:7b:e7:f2:39:ad:60:d4:28:a5:a6:cc:65:83:9c:b8:
         ed:75:3a:aa:2b:73:8b:61:ac:25:8f:d6:dd:ac:ad:8d:4e:70:
         b2:5a:e6:da:a6:f5:7c:4e:6e:b1:65:10:b5:34:70:cb:3f:57:
         4c:47:0c:63:51:37:63:c4:4f:13:67:f1:9a:ce:ef:b6:84:0f:
         c0:c9:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:41:08 2026 by rpki-client