This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File:                     q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier:          rjQLqPAIjGfaqZzO2VWMoQ7bG1B1hbIh0+QXnvnMbZY=
Subject key identifier:   06:5A:E4:47:C2:E8:09:43:68:5E:F1:86:C9:54:AF:A6:FC:B5:E0:2B
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       3681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number:          35A9
Signing time:             Tue 20 Jan 2026 14:27:54 +0000
Manifest this update:     Tue 20 Jan 2026 14:27:54 +0000
Manifest next update:     Tue 27 Jan 2026 14:27:54 +0000
Files and hashes:         1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: wsxQp7AtHU6RMscYx9qL5ULAkuaDlrl0BmBdH0/kXNo=)
                          2: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: sAQbMZEcMczj5RHqmOv2OaiDpZIXaUFx3oE34rVPeYo=)
                          3: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: 9mT7qPe0jtXzHyfYPGvCu4areC+be6JvN+bMcwo+UAE=)
                          4: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: 4X/9XTCj8Tn5wmoatIqa/M1mn+d3I1LzqCMAdWjEEKo=)
                          5: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: 1K5D/YGkb4vaB5fYueEaz915gxnQJAISZWApLFWpf04=)
                          6: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: rKeTKoMj7TYIpspiwdUo3fnXHo6IEREq4lIaF9E8hIA=)
                          7: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: 9sCJlpZ+MZm9Y8fMj5geVr74KyJJassWJH9YXhrkVAQ=)
                          8: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: Q4QnXloRUzx2A7Tu4hex2E+VF8wZbHiTAEA4RdwhS1w=)
                          9: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: mNtwPjnCIz/fPyYT4pHp2y4OsV0nrnCLOsALXcX5nBI=)
                          10: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: duKdaSAy3lZyijWEMsDKsNMUdFH6paWRdLfwaKH4jqk=)
                          11: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: NcbrIjjwUgYHdCTODgZkq15jqvFAdToiBXgMc60L8i0=)
                          12: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: qDmF4kH3QlbY4Zqg12dB1C1trP96qj3Fl98NZEEVYjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13953 (0x3681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Jan 20 14:27:54 2026 GMT
            Not After : Jan 27 14:27:54 2026 GMT
        Subject: CN=696f90ea-8e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:5d:c8:32:ef:60:2c:3c:f5:e3:b6:f6:c5:
                    5a:41:47:55:62:70:99:72:e2:00:a8:ca:20:8f:04:
                    61:5f:c3:29:81:e5:09:bb:c8:8f:4d:29:27:fe:08:
                    e8:55:b8:64:3f:66:49:77:e2:10:82:9f:99:cd:11:
                    62:59:14:20:67:5a:42:fc:45:8b:69:2c:eb:81:44:
                    3d:7f:38:aa:e0:3c:db:6b:89:12:79:d4:0a:fe:db:
                    33:12:fa:a9:7b:ae:0d:ce:95:10:8a:66:a1:66:89:
                    4f:1c:30:e0:82:c9:6a:4e:6d:2a:7a:a3:99:ae:08:
                    07:4a:d9:a1:93:f4:6e:71:80:29:ab:88:56:50:46:
                    fc:40:e3:aa:ec:82:3a:b1:98:a1:56:5e:a1:46:32:
                    d5:26:1b:d7:62:e1:c0:5b:6e:91:0e:df:2e:d1:03:
                    37:43:ff:bb:8a:46:81:16:00:7d:e2:5e:23:5b:0f:
                    72:e5:e1:b3:43:9c:ff:a7:1d:75:8a:10:9b:37:1a:
                    28:cd:ad:e8:ba:33:66:5e:94:60:1d:1a:55:13:1e:
                    ea:d3:27:55:f0:d9:64:b2:28:58:b4:2f:ab:56:12:
                    9c:30:04:8a:ca:ca:b8:11:f9:56:a6:42:6f:40:da:
                    cd:3b:1d:99:ca:2f:63:71:08:e8:9e:b9:5d:af:81:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:E4:47:C2:E8:09:43:68:5E:F1:86:C9:54:AF:A6:FC:B5:E0:2B
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bb:a8:57:12:a0:e8:6d:3c:2d:ee:c5:8d:f6:81:ba:bb:21:
         72:1a:bf:47:68:d1:21:20:7e:de:8d:5a:51:ae:24:20:4a:a2:
         f8:8d:06:93:1d:58:c4:e7:3d:a0:99:41:38:a4:20:fd:92:b6:
         16:a2:39:11:a0:fa:e4:e6:32:36:83:64:6f:f1:7b:6c:b1:c2:
         92:bc:88:01:d5:19:b2:36:f6:cb:1a:c9:e9:9f:4b:e6:5b:9b:
         22:e5:3b:9d:ef:70:fc:35:bc:b8:53:6d:34:22:9d:e4:f1:d4:
         d2:d7:c9:d7:b7:65:e9:5c:cf:22:5e:e2:7b:fb:1a:a2:fa:d9:
         36:ef:fe:98:af:89:e6:96:6c:93:23:cb:56:03:bb:47:26:96:
         ac:70:22:82:c4:3f:a2:cd:79:53:2a:4d:ab:e4:29:a8:ad:99:
         61:bd:e5:b3:ae:1b:bf:5d:0a:42:7f:dc:96:9c:c0:09:19:96:
         c3:cd:db:4f:26:79:5f:19:01:15:19:c5:aa:7d:66:51:a4:89:
         22:88:3f:ed:7b:70:47:ed:0e:b5:2b:98:07:92:59:66:0c:49:
         6f:ee:5d:c6:02:dd:5e:94:dd:fa:51:81:3e:59:8c:a2:79:89:
         d0:90:21:a6:ee:59:6a:f5:00:13:61:e4:f5:62:03:c5:2b:2b:
         b5:50:7b:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy
QTM2MkRBRjAwHhcNMjYwMTIwMTQyNzU0WhcNMjYwMTI3MTQyNzU0WjAYMRYwFAYD
VQQDDA02OTZmOTBlYS04ZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2vldyDLvYCw89eO29sVaQUdVYnCZcuIAqMogjwRhX8MpgeUJu8iPTSkn/gjo
VbhkP2ZJd+IQgp+ZzRFiWRQgZ1pC/EWLaSzrgUQ9fziq4Dzba4kSedQK/tszEvqp
e64NzpUQimahZolPHDDggslqTm0qeqOZrggHStmhk/RucYApq4hWUEb8QOOq7II6
sZihVl6hRjLVJhvXYuHAW26RDt8u0QM3Q/+7ikaBFgB94l4jWw9y5eGzQ5z/px11
ihCbNxooza3oujNmXpRgHRpVEx7q0ydV8NlksihYtC+rVhKcMASKysq4EflWpkJv
QNrNOx2Zyi9jcQjonrldr4HWfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZa5EfC
6AlDaF7xhslUr6b8teArMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE
ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdC
clVpM0hhbUxjOUlxTmkydkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAu6hXEqDobTwt7sWN9oG6uyFyGr9HaNEhIH7ejVpRriQgSqL4jQaT
HVjE5z2gmUE4pCD9krYWojkRoPrk5jI2g2Rv8XtsscKSvIgB1RmyNvbLGsnpn0vm
W5si5Tud73D8Nby4U200Ip3k8dTS18nXt2XpXM8iXuJ7+xqi+tk27/6Yr4nmlmyT
I8tWA7tHJpascCKCxD+izXlTKk2r5CmorZlhveWzrhu/XQpCf9yWnMAJGZbDzdtP
JnlfGQEVGcWqfWZRpIkiiD/te3BH7Q61K5gHkllmDElv7l3GAt1elN36UYE+WYyi
eYnQkCGm7llq9QATYeT1YgPFKyu1UHvP
-----END CERTIFICATE-----
Generated at Thu Jan 22 02:04:55 2026 by rpki-client