This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File:                     qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier:          Qm7vt0Iys/ZeY6cMQ3VsY4yAKBCzRgql47131jANIKg=
Subject key identifier:   7C:8F:69:05:20:D4:B6:2D:6C:3F:A8:03:9F:5C:7E:04:82:82:B8:69
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       0A21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number:          0A12
Signing time:             Sat 10 Jan 2026 19:17:04 +0000
Manifest this update:     Sat 10 Jan 2026 19:17:04 +0000
Manifest next update:     Sat 17 Jan 2026 19:17:04 +0000
Files and hashes:         1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: auwgdvrBnyAQCxjn4VH6JVlVOqwfT/nUuQaxP7V1dR4=)
                          2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2593 (0xa21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Jan 10 19:17:04 2026 GMT
            Not After : Jan 17 19:17:04 2026 GMT
        Subject: CN=6962a5b0-694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:db:f0:2b:a2:d0:2c:0d:0f:c3:af:b9:d9:b7:
                    16:ff:e0:4b:51:73:07:a9:ed:5b:ae:c7:d7:e4:f9:
                    5d:e4:04:4d:66:cc:2e:f3:9a:99:1b:7e:4d:b6:88:
                    08:35:cb:df:b5:d0:e3:65:8f:a7:17:03:fd:1f:b3:
                    4e:95:af:84:68:52:39:35:c7:f9:86:0a:32:1b:13:
                    7b:60:e9:e5:e6:c1:65:2a:0e:81:1f:06:4f:3b:38:
                    3e:ab:60:5e:2a:bd:de:df:3c:df:c2:50:92:dc:e9:
                    9d:8f:0f:44:ef:43:ed:41:71:12:c9:fc:f3:fd:20:
                    46:c9:8a:83:c7:39:90:d0:63:d7:52:c3:9f:4c:4b:
                    0c:89:be:36:e6:6a:c4:62:1f:51:d5:65:97:bb:42:
                    b2:1b:80:20:de:a8:47:70:f4:54:f6:00:7b:5b:b9:
                    7e:63:8a:fa:83:8c:74:31:81:a0:2e:3a:0a:95:cd:
                    56:a3:60:98:95:b7:8c:6f:36:ea:cb:0e:0e:0b:15:
                    57:03:9d:71:40:33:72:03:9a:ea:0e:6e:6e:fd:30:
                    66:bf:de:a7:25:df:6b:fd:45:67:09:b1:cf:f1:a5:
                    18:58:21:bb:5f:28:9d:07:5a:b4:cf:62:10:b3:13:
                    a5:b4:51:fb:7a:01:c4:ea:c8:42:b2:08:11:96:2d:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8F:69:05:20:D4:B6:2D:6C:3F:A8:03:9F:5C:7E:04:82:82:B8:69
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:a0:9a:2e:32:92:d1:0d:6a:70:6c:74:56:bd:b9:a5:b9:
         22:c6:f8:16:a5:c2:a0:04:82:3f:77:07:ab:5d:a5:8d:91:d9:
         cf:c2:f9:0f:53:51:82:ba:53:d6:54:78:96:44:47:01:66:3b:
         e2:90:6c:f5:ea:80:23:2d:16:b4:6a:f1:67:2b:0c:16:97:f6:
         63:2b:97:5a:d7:22:e3:aa:92:c5:f9:3d:c5:61:56:ab:f8:74:
         e1:6f:31:fd:7e:58:91:5b:07:2e:17:46:c1:69:c8:d3:50:f0:
         c1:65:a9:a3:39:fa:79:dd:c6:f1:5e:0c:46:bb:b7:89:ae:e7:
         47:55:2e:83:04:8a:6c:19:ce:13:ef:ef:d7:2f:be:87:93:40:
         92:5a:17:f4:66:8b:99:8c:b5:ee:a1:83:40:75:e2:64:16:d1:
         c8:cd:7c:2a:0f:6c:aa:35:a6:32:40:3a:9c:a4:f6:a5:d0:64:
         29:94:4a:24:ea:b8:be:c3:da:30:10:d2:9d:bc:4d:4e:67:8d:
         d5:70:92:27:67:01:98:d5:cb:10:d3:50:27:cd:c0:a8:25:3e:
         14:5e:51:fb:e5:1e:cd:91:10:2d:f4:83:43:16:59:1c:52:03:
         5e:85:ae:31:c3:05:55:c2:63:94:90:84:d2:17:9d:b1:45:8e:
         9f:f1:20:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5
MzYxQTJGNDMwHhcNMjYwMTEwMTkxNzA0WhcNMjYwMTE3MTkxNzA0WjAYMRYwFAYD
VQQDDA02OTYyYTViMC02OTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+dvwK6LQLA0Pw6+52bcW/+BLUXMHqe1brsfX5Pld5ARNZswu85qZG35NtogI
NcvftdDjZY+nFwP9H7NOla+EaFI5Ncf5hgoyGxN7YOnl5sFlKg6BHwZPOzg+q2Be
Kr3e3zzfwlCS3Omdjw9E70PtQXESyfzz/SBGyYqDxzmQ0GPXUsOfTEsMib425mrE
Yh9R1WWXu0KyG4Ag3qhHcPRU9gB7W7l+Y4r6g4x0MYGgLjoKlc1Wo2CYlbeMbzbq
yw4OCxVXA51xQDNyA5rqDm5u/TBmv96nJd9r/UVnCbHP8aUYWCG7XyidB1q0z2IQ
sxOltFH7egHE6shCsggRli16swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyPaQUg
1LYtbD+oA59cfgSCgrhpMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB
RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV
MWNveHE1OS1oRGVUWWFMME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4PKCaLjKS0Q1qcGx0Vr25pbkixvgWpcKgBII/dwerXaWNkdnPwvkP
U1GCulPWVHiWREcBZjvikGz16oAjLRa0avFnKwwWl/ZjK5da1yLjqpLF+T3FYVar
+HThbzH9fliRWwcuF0bBacjTUPDBZamjOfp53cbxXgxGu7eJrudHVS6DBIpsGc4T
7+/XL76Hk0CSWhf0ZouZjLXuoYNAdeJkFtHIzXwqD2yqNaYyQDqcpPal0GQplEok
6ri+w9owENKdvE1OZ43VcJInZwGY1csQ01AnzcCoJT4UXlH75R7NkRAt9INDFlkc
UgNeha4xwwVVwmOUkITSF52xRY6f8SAo
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:36:25 2026 by rpki-client