This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File:                     QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier:          vxyn8bt0vz6wm5IH29yXOrfZIZoV4poA1VCiEYPcI1A=
Subject key identifier:   73:2A:83:E4:25:11:14:E6:70:98:ED:9D:B1:D5:0E:BC:F4:69:AC:02
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer:       /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial:       02B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number:          029C
Signing time:             Thu 01 Jan 2026 01:20:41 +0000
Manifest this update:     Thu 01 Jan 2026 01:20:40 +0000
Manifest next update:     Thu 08 Jan 2026 01:20:40 +0000
Files and hashes:         1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: dvI8/4SiEYm95tLbbzfFZ35t3xC2Ia8GV/zlNvvNGJQ=)
                          2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: /MTc52VTEWoaEpfKddxioXXvfOhw6UX8c6jqYFUJ31k=)
                          3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: qhznDNvcFltG9PwBLgpJI2AZg4OwvFhBs11ilZmd8Fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 01:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
        Validity
            Not Before: Jan  1 01:20:40 2026 GMT
            Not After : Jan  8 01:20:40 2026 GMT
        Subject: CN=6955cbe8-014e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:8a:b1:cb:11:83:01:57:d4:86:10:40:ed:
                    f5:a5:63:f6:30:00:3f:dd:83:30:b0:ae:b6:4c:b7:
                    c7:1f:51:78:3d:ef:c8:0c:d0:96:02:db:54:54:46:
                    9c:43:79:46:27:6e:7d:7c:78:36:4c:8e:c5:3d:2a:
                    10:e9:2a:8a:59:20:d4:b4:7d:fe:17:70:2c:bd:70:
                    63:83:dd:92:f0:54:b5:91:38:ec:1b:b6:0a:32:26:
                    10:be:a9:59:ed:01:22:cd:32:6e:bf:be:cf:65:50:
                    b6:59:d3:e1:c7:e8:97:47:39:46:c8:08:0d:36:34:
                    e7:ad:c6:95:34:63:49:17:34:d0:f3:ea:16:ef:f1:
                    da:6f:f9:42:42:f7:88:d5:0b:68:f1:60:3d:eb:f3:
                    60:34:14:43:84:ff:91:6b:cb:01:80:95:ee:2b:fd:
                    24:01:12:75:35:d2:f3:ff:c1:88:f6:49:b6:70:72:
                    52:0a:8b:08:26:94:c2:93:fc:6c:1f:80:35:e8:ca:
                    60:5c:fb:55:ab:8b:41:64:74:62:60:d1:f0:7a:a4:
                    3d:ed:77:b1:7f:ac:12:c5:87:70:22:c1:23:18:9a:
                    5c:d1:ca:9c:84:a9:63:67:4a:10:89:ad:f4:4f:98:
                    42:e6:d1:76:91:f6:87:95:9b:cd:e5:f5:c0:a2:52:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:83:E4:25:11:14:E6:70:98:ED:9D:B1:D5:0E:BC:F4:69:AC:02
            X509v3 Authority Key Identifier:
                keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:3e:d4:35:30:f5:bc:c6:14:e3:e9:69:ca:b7:04:04:17:
         9b:95:d3:a7:38:0f:97:ea:2b:e2:71:24:b4:95:c4:84:56:d5:
         e1:6d:32:d1:29:79:0e:91:ac:96:29:56:37:a6:ff:74:13:2f:
         38:f7:ff:44:60:5b:f2:f6:ef:97:d2:2c:e7:f7:65:b2:ff:8f:
         6f:37:89:33:6f:47:64:1b:a1:1a:65:c3:10:b1:3b:89:88:79:
         e6:ea:b3:bb:da:f9:29:05:fe:5d:f7:d4:1b:3e:1d:d3:5b:73:
         e9:a3:b3:77:1e:ae:1d:30:75:79:03:2c:ff:6a:b5:e8:a7:79:
         82:f9:4c:27:2d:f7:50:bb:ed:0c:1e:f9:77:78:76:80:7d:22:
         7b:18:2a:ea:83:e8:06:65:38:c5:c4:ed:fa:0b:61:c3:51:5c:
         17:67:30:fd:d6:10:18:e2:c6:bc:76:b7:df:2e:f7:d8:d0:06:
         a9:29:2b:6f:92:4a:83:6f:e1:9c:94:ce:89:ce:94:44:6e:1f:
         b3:ac:f5:bf:ec:b4:7f:a1:83:8d:23:e3:97:e4:e0:1b:6c:4f:
         86:63:31:9b:59:5f:5a:09:bd:d7:6b:af:a5:a3:28:d4:4d:33:
         78:f6:97:f0:82:f3:03:12:bc:88:34:7c:a6:d0:07:d7:61:1d:
         47:67:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 08:15:06 2026 by rpki-client