This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          GhZb9JxtJsknwRoTBVTPMDvtvHTvzPf+a7rF09yZaL0=
Subject key identifier:   94:54:F4:C8:D7:49:5A:F6:68:6E:1F:EF:0D:A4:A4:7D:AA:54:12:43
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0D18
Signing time:             Mon 26 Jan 2026 18:15:11 +0000
Manifest this update:     Mon 26 Jan 2026 18:15:11 +0000
Manifest next update:     Mon 02 Feb 2026 18:15:11 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: SwXLZGFCWteonpjJAgBpcIgf6/JvKLsEL4ccUNqs+mI=)
                          2: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: kuWhK4UFHrcCwmxKZdtxH+JwJikckmhXycrJPXJmocI=)
                          3: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: Ihc5em2xtcgrxeXBgHA00MhNFM2/F8rCHHi4Ca+zk1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 18:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Jan 26 18:15:11 2026 GMT
            Not After : Feb  2 18:15:11 2026 GMT
        Subject: CN=6977af2f-7c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:4f:a4:25:68:d3:8f:52:13:1d:93:5a:35:
                    0a:e6:6c:a2:b8:f7:82:cc:9f:63:08:4c:17:40:35:
                    fc:90:bd:e8:98:c9:8a:95:5e:7f:51:0e:4c:12:8f:
                    b6:c0:cc:c1:8b:62:62:38:89:13:93:0f:ce:ee:e1:
                    38:23:53:c0:91:23:7b:18:7f:80:5e:d3:b2:3d:75:
                    21:9a:3d:7d:f5:f1:74:39:2b:b5:79:ba:e9:3a:20:
                    c7:89:cf:71:7e:8c:06:52:32:b5:e3:58:55:62:69:
                    f0:de:aa:9d:c1:eb:1f:57:38:60:34:01:f3:16:c7:
                    f3:08:e0:72:6a:ca:54:5b:19:91:a1:56:d6:a0:64:
                    ef:40:cd:8b:a7:a6:c3:78:54:09:9f:be:30:83:b4:
                    dd:04:53:ee:9f:85:e6:da:9a:48:47:7d:5e:1b:87:
                    31:56:f1:cd:46:c9:a8:b3:22:54:97:8a:80:ea:d2:
                    08:1d:5f:99:5f:3d:3d:6b:f9:a8:ed:89:f4:a6:21:
                    b2:01:93:c8:8f:8c:72:e8:bd:8b:56:28:81:4e:d9:
                    17:9b:54:e6:a9:e6:f8:17:7e:11:52:e9:63:33:26:
                    b5:bd:a7:eb:0a:4c:e0:1a:74:ed:53:03:d6:39:2d:
                    fd:bb:b0:fa:f5:96:3a:41:65:c4:f3:84:51:eb:b1:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:F4:C8:D7:49:5A:F6:68:6E:1F:EF:0D:A4:A4:7D:AA:54:12:43
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:73:29:e1:1e:a8:fb:b5:f5:b0:73:44:f1:de:7a:ad:0c:46:
         83:1b:87:01:48:8e:cf:3b:e7:ca:79:be:bd:5e:93:a0:03:4b:
         97:b0:f2:78:e9:b9:54:ec:3b:22:ce:bb:64:1e:10:96:e6:18:
         9e:7d:22:e3:52:30:a7:90:97:2a:89:d9:1c:74:f9:64:8b:44:
         dd:b4:ca:74:e7:da:9a:ea:db:ac:14:ee:dd:16:ad:8d:50:39:
         82:a3:13:75:ab:75:65:3b:9a:7e:16:fa:79:85:6a:02:56:10:
         a2:c9:d0:ef:fa:ec:e1:6b:a4:ae:24:19:0c:e5:bf:4a:2c:b0:
         df:de:26:77:23:fa:ef:6a:1f:87:72:bf:ed:ac:3f:0a:8f:5d:
         60:72:d5:9c:dd:b4:02:d4:52:99:31:41:90:6b:a8:13:75:c4:
         ea:f8:3d:18:f3:11:97:72:0d:db:18:1c:5a:b4:14:43:ed:a6:
         8b:18:90:fe:e1:9f:a3:be:b8:d5:c8:40:46:b5:de:ea:ea:15:
         d1:43:bb:12:b0:f8:cf:aa:1b:50:e9:72:a3:59:a2:a4:70:44:
         72:fa:85:52:50:2b:a0:5d:a3:9a:29:66:a5:02:16:d1:c4:2a:
         e8:83:ba:a2:5e:6e:87:7c:8a:ce:96:7d:de:4a:6f:3e:4a:55:
         b5:e4:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 05:35:27 2026 by rpki-client