This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File:                     pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier:          Z2VX4JwRoE/XTglivRzgHxnvuODhJfpCXf+Jr6UYO/k=
Subject key identifier:   ED:79:67:E2:A0:6A:37:5D:BD:98:01:EF:7E:94:DD:94:A8:77:08:4C
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer:       /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial:       06D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number:          06D0
Signing time:             Tue 06 Jan 2026 21:28:09 +0000
Manifest this update:     Tue 06 Jan 2026 21:28:08 +0000
Manifest next update:     Tue 13 Jan 2026 21:28:08 +0000
Files and hashes:         1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: 6MbenFPjnO+kdg9KXYu4jVZ5zSG+P7EHUMXBWfh37T4=)
                          2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: pKScxQMxg1WdvXI6uB4aKpZXfYDWDJw+VDC0QK45Pf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
                          rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 21:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
        Validity
            Not Before: Jan  6 21:28:08 2026 GMT
            Not After : Jan 13 21:28:08 2026 GMT
        Subject: CN=695d7e69-09c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:3d:0a:ef:09:9d:8e:43:4b:c4:7a:a9:97:
                    4f:c9:73:b5:d9:e7:34:88:3f:fa:40:7a:6e:3c:36:
                    ad:a4:5f:f9:88:ac:a4:96:9c:4a:01:20:a4:eb:77:
                    b4:c2:2d:de:17:92:e6:ec:61:12:06:31:cc:59:3c:
                    ac:44:59:15:25:b3:1b:e8:df:79:27:71:9a:bd:03:
                    8d:b2:9d:75:30:14:ed:cd:f9:90:5b:32:f5:1b:ba:
                    da:58:4d:6f:5b:b2:37:a6:80:65:e1:c3:b2:91:b9:
                    82:13:e1:c7:ec:bd:81:69:ac:9b:ce:b4:e7:84:50:
                    1e:e4:0e:e7:42:88:28:aa:c4:98:2c:45:d6:04:fa:
                    bb:8f:f4:d9:73:74:ec:66:e7:b1:e1:27:e1:bf:15:
                    da:e1:d3:96:4d:02:73:22:d3:1c:51:6b:e7:30:47:
                    d2:d5:99:d9:35:dc:d0:36:01:39:78:07:c9:0f:bb:
                    91:1e:7f:b5:a3:16:ca:14:f1:29:5a:87:8c:e2:83:
                    b9:e0:b6:da:b5:af:28:50:b9:ea:99:8b:34:1d:8a:
                    6f:31:50:ab:b0:2c:49:b2:8d:6b:f5:45:9e:fe:29:
                    bb:c2:95:71:d0:fd:3b:d2:5a:56:77:bc:af:98:2f:
                    e4:97:89:66:dc:90:6a:38:25:25:5d:4a:fa:35:30:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:67:E2:A0:6A:37:5D:BD:98:01:EF:7E:94:DD:94:A8:77:08:4C
            X509v3 Authority Key Identifier:
                keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:17:7d:b7:6a:35:c4:34:d0:8c:6f:42:46:64:24:4f:ed:
         7c:f7:0e:65:14:ee:99:8c:09:d3:2d:d7:f3:59:81:91:c7:ba:
         81:ba:72:10:3b:03:24:50:e1:10:5a:c5:d1:d6:ea:4e:65:9d:
         98:a5:6a:63:6a:43:80:b3:4c:e0:e8:f0:7e:14:35:81:40:74:
         d0:c3:db:eb:e0:7e:cd:6e:67:1e:e6:98:3a:04:c7:5f:52:2b:
         d4:1b:6a:bd:69:ab:a2:44:0e:80:c8:0e:1a:2e:e1:e7:34:cf:
         3a:74:a1:85:a5:d6:e8:fe:4c:f3:7c:1c:26:a6:94:4a:b0:75:
         aa:9d:41:81:7b:fd:dc:09:7a:1b:27:ac:2c:0b:72:7a:eb:21:
         77:bd:0e:cc:8f:0d:fd:cf:bc:90:de:9a:09:62:a6:00:eb:80:
         53:f0:59:20:10:6d:2d:ed:15:18:55:fa:8f:c6:f5:8d:d8:20:
         a3:5f:a6:97:a7:21:97:dc:ba:d5:50:55:85:9d:99:5b:a4:28:
         5f:63:75:57:2b:cd:38:17:09:ab:01:68:6e:a0:b8:cc:79:a2:
         26:b7:6b:d8:fd:bb:22:11:ef:8d:97:30:70:0c:bd:0b:0c:27:
         80:be:18:20:b3:83:d4:8a:50:0b:f0:59:2a:99:d0:9e:51:a0:
         26:6b:64:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0
NUI2MjgzOTAwHhcNMjYwMTA2MjEyODA4WhcNMjYwMTEzMjEyODA4WjAYMRYwFAYD
VQQDDA02OTVkN2U2OS0wOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmDI9Cu8JnY5DS8R6qZdPyXO12ec0iD/6QHpuPDatpF/5iKyklpxKASCk63e0
wi3eF5Lm7GESBjHMWTysRFkVJbMb6N95J3GavQONsp11MBTtzfmQWzL1G7raWE1v
W7I3poBl4cOykbmCE+HH7L2BaaybzrTnhFAe5A7nQogoqsSYLEXWBPq7j/TZc3Ts
Zuex4SfhvxXa4dOWTQJzItMcUWvnMEfS1ZnZNdzQNgE5eAfJD7uRHn+1oxbKFPEp
WoeM4oO54Lbata8oULnqmYs0HYpvMVCrsCxJso1r9UWe/im7wpVx0P070lpWd7yv
mC/kl4lm3JBqOCUlXUr6NTBWWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO15Z+Kg
ajddvZgB736U3ZSodwhMMB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy
QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln
NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly
cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaKRd9t2o1xDTQjG9CRmQkT+189w5lFO6ZjAnTLdfzWYGRx7qBunIQ
OwMkUOEQWsXR1upOZZ2YpWpjakOAs0zg6PB+FDWBQHTQw9vr4H7Nbmce5pg6BMdf
UivUG2q9aauiRA6AyA4aLuHnNM86dKGFpdbo/kzzfBwmppRKsHWqnUGBe/3cCXob
J6wsC3J66yF3vQ7Mjw39z7yQ3poJYqYA64BT8FkgEG0t7RUYVfqPxvWN2CCjX6aX
pyGX3LrVUFWFnZlbpChfY3VXK804FwmrAWhuoLjMeaImt2vY/bsiEe+NlzBwDL0L
DCeAvhggs4PUilAL8FkqmdCeUaAma2Ql
-----END CERTIFICATE-----
Generated at Wed Jan 7 06:58:53 2026 by rpki-client