This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File:                     QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier:          +z5VOr6g8DzQr8a7qnAi1GsTTwHHdzqOMZE6aJuEDz0=
Subject key identifier:   4B:A5:36:44:DF:E4:29:62:45:96:D4:36:89:CE:90:F1:19:CF:F0:8D
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer:       /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial:       02BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number:          02A7
Signing time:             Sat 17 Jan 2026 00:37:59 +0000
Manifest this update:     Sat 17 Jan 2026 00:37:58 +0000
Manifest next update:     Sat 24 Jan 2026 00:37:58 +0000
Files and hashes:         1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: LEonGoJ5waxmbGrzO1ZdVxYL2p1VeVASOxzscOAwr+c=)
                          2: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: qhznDNvcFltG9PwBLgpJI2AZg4OwvFhBs11ilZmd8Fw=)
                          3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: d6eJEQL6/aDhQPXXhC+h3c+SvVdhNiD1CDNjsKC9Qac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 00:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
        Validity
            Not Before: Jan 17 00:37:58 2026 GMT
            Not After : Jan 24 00:37:58 2026 GMT
        Subject: CN=696ad9e6-cc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:17:b7:c5:fa:6a:9e:b6:0c:e0:1a:e1:26:
                    9c:5b:46:78:70:6b:bc:4d:6b:c0:e0:b0:0f:68:3d:
                    33:92:15:de:29:6d:ac:ac:bb:f1:e3:af:db:93:37:
                    66:a4:02:79:e4:dc:a5:d2:de:fd:61:a6:e3:8f:b9:
                    ac:a3:c6:ee:b4:67:79:af:59:b2:b7:0c:7d:c9:a0:
                    e9:87:83:4b:80:08:d2:79:81:09:18:46:bf:83:90:
                    9b:7f:e4:a4:57:40:a4:11:ab:5f:b5:6c:89:85:02:
                    3d:61:ff:72:96:9f:a2:90:39:08:7e:89:8b:8e:52:
                    9b:bb:ec:a9:83:2b:04:10:bb:06:3b:9a:9f:b6:08:
                    94:fd:c3:52:b4:51:b6:2b:a2:4e:0b:7f:58:8d:a7:
                    47:d9:8f:fe:34:35:f8:95:b3:0b:83:fb:5d:b8:2b:
                    55:c1:26:e6:7c:8f:f9:4f:1b:1b:e5:6e:53:62:f9:
                    8f:0f:0c:c8:42:33:17:9c:6f:82:ae:92:b6:1b:6b:
                    2e:b7:95:77:97:01:d7:f1:d4:e5:87:7f:dc:a6:bd:
                    d4:09:d0:85:a7:0e:70:93:77:a2:0f:46:91:e8:99:
                    a5:8d:19:f1:eb:2e:62:ab:f7:1b:26:39:f9:0a:fd:
                    aa:40:53:bc:c4:c1:f5:2c:fc:0d:0c:5a:54:06:45:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A5:36:44:DF:E4:29:62:45:96:D4:36:89:CE:90:F1:19:CF:F0:8D
            X509v3 Authority Key Identifier:
                keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:ee:ac:d3:3e:7d:89:a8:29:aa:42:1d:78:a3:32:07:ba:
         70:94:9e:63:aa:50:57:7b:62:b6:0c:32:eb:a1:0c:e5:a7:4d:
         ce:f4:12:12:d1:9b:5a:91:53:4b:b5:1c:7d:36:34:5d:34:75:
         d0:23:4e:72:11:a9:d6:3a:8f:00:99:40:cd:7a:2c:05:68:5d:
         5d:86:dc:64:3e:37:78:8b:08:74:44:2c:05:11:45:11:b4:9d:
         e3:7f:7d:b8:a9:f7:c3:04:b8:35:0c:48:ee:83:3b:59:91:92:
         80:1b:f6:fa:58:ac:75:eb:a9:e2:ca:b3:79:8b:68:36:c0:7c:
         cb:c3:3e:49:ca:92:e6:a5:c6:f7:fc:05:ee:a1:90:5d:2a:d4:
         70:9a:df:71:8e:1d:23:bf:4a:86:af:9b:f8:c1:ca:4f:75:91:
         15:12:99:96:c9:59:7c:77:32:27:2f:7e:4a:b3:ce:35:e1:6e:
         62:b5:4d:2d:56:fc:ca:f4:2c:0d:10:11:e1:41:25:0f:97:d2:
         79:ec:0b:18:82:e8:f5:4b:72:8d:7c:a3:15:09:b9:61:f6:d4:
         0f:4c:5f:93:08:5e:f3:48:14:4f:20:4b:92:96:bb:7d:d6:85:
         48:f5:ae:8b:7c:2f:03:63:5a:14:42:a1:7d:d2:88:e7:8a:27:
         c5:d4:27:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0
ODFBMzcxOUUwHhcNMjYwMTE3MDAzNzU4WhcNMjYwMTI0MDAzNzU4WjAYMRYwFAYD
VQQDDA02OTZhZDllNi1jYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzoQXt8X6ap62DOAa4SacW0Z4cGu8TWvA4LAPaD0zkhXeKW2srLvx46/bkzdm
pAJ55Nyl0t79Yabjj7mso8butGd5r1mytwx9yaDph4NLgAjSeYEJGEa/g5Cbf+Sk
V0CkEatftWyJhQI9Yf9ylp+ikDkIfomLjlKbu+ypgysEELsGO5qftgiU/cNStFG2
K6JOC39YjadH2Y/+NDX4lbMLg/tduCtVwSbmfI/5Txsb5W5TYvmPDwzIQjMXnG+C
rpK2G2sut5V3lwHX8dTlh3/cpr3UCdCFpw5wk3eiD0aR6JmljRnx6y5iq/cbJjn5
Cv2qQFO8xMH1LPwNDFpUBkWScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEulNkTf
5CliRZbUNonOkPEZz/CNMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj
WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p
UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLKe6s0z59iagpqkIdeKMyB7pwlJ5jqlBXe2K2DDLroQzlp03O9BIS
0ZtakVNLtRx9NjRdNHXQI05yEanWOo8AmUDNeiwFaF1dhtxkPjd4iwh0RCwFEUUR
tJ3jf324qffDBLg1DEjugztZkZKAG/b6WKx166niyrN5i2g2wHzLwz5JypLmpcb3
/AXuoZBdKtRwmt9xjh0jv0qGr5v4wcpPdZEVEpmWyVl8dzInL35Ks8414W5itU0t
VvzK9CwNEBHhQSUPl9J57AsYguj1S3KNfKMVCblh9tQPTF+TCF7zSBRPIEuSlrt9
1oVI9a6LfC8DY1oUQqF90ojniifF1CdX
-----END CERTIFICATE-----
Generated at Sun Jan 18 12:10:47 2026 by rpki-client