This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          iBN/yMRt7tD3l4qqpzv9C4Ay+NJyp6IAmVaMtrzT0VE=
Subject key identifier:   6C:24:F8:88:69:10:20:24:37:B5:47:D6:37:56:8B:06:CE:2E:AF:1F
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       624A4E6BE47390BFC50C6C4F4B007BA8202D77CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          06D8
Signing time:             Sun 11 Jan 2026 21:48:43 +0000
Manifest this update:     Sun 11 Jan 2026 21:43:43 +0000
Manifest next update:     Tue 13 Jan 2026 01:30:43 +0000
Files and hashes:         1: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
                          2: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
                          3: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=)
                          4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: a/1iPjqftMBJ/qHGV0Hs6eV7S8wRdbsCuLnXm2lK5ec=)
                          5: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 01:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:4e:6b:e4:73:90:bf:c5:0c:6c:4f:4b:00:7b:a8:20:2d:77:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Jan 11 21:43:43 2026 GMT
            Not After : Jan 13 01:30:43 2026 GMT
        Subject: CN=6C24F8886910202437B547D637568B06CE2EAF1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:a4:37:4d:66:0b:14:67:4f:5d:5f:2a:c4:
                    1b:5b:a9:cc:42:8c:2b:c9:d8:d0:46:87:0d:8b:07:
                    52:45:04:3f:1e:30:d8:76:76:f4:56:6e:e1:6f:5d:
                    f2:05:fe:25:7c:fd:7e:ea:1d:2c:96:22:e9:5d:11:
                    21:34:f1:20:b7:7b:0e:4d:6b:3e:f0:84:40:3d:31:
                    cd:d2:50:5e:32:09:03:31:a7:ec:8e:4d:59:46:43:
                    dc:55:6c:c6:15:7e:34:0a:9f:4e:3e:e8:23:83:9c:
                    cb:04:46:f9:3d:e7:22:5f:75:40:7c:ac:4c:7f:b6:
                    89:2c:cd:62:16:30:14:38:95:eb:19:7e:f4:3a:26:
                    05:08:37:bb:6f:4f:46:a4:e0:41:49:66:36:a3:42:
                    91:72:96:1c:da:f9:ca:7f:aa:61:3c:a8:43:38:7a:
                    df:3a:0c:e8:03:e8:96:34:3d:c5:7f:7a:13:84:80:
                    c0:de:84:83:8d:1b:10:cb:95:18:52:46:45:44:49:
                    66:a2:d3:4f:f2:a1:8f:f2:b8:28:ff:ba:e9:08:57:
                    d7:f5:c8:af:e7:59:a4:95:51:4d:41:0d:e0:c7:28:
                    e3:fe:74:e7:fb:68:22:96:b4:d7:08:a2:d9:3d:44:
                    73:0f:ab:69:a3:71:0f:d3:6d:6a:8f:7e:a5:21:06:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:F8:88:69:10:20:24:37:B5:47:D6:37:56:8B:06:CE:2E:AF:1F
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:65:00:0c:77:6e:eb:05:c6:bb:3f:d4:63:97:1d:3d:3d:
         f0:9a:c0:39:81:5f:82:62:8a:24:0d:e7:38:4c:0c:ba:7c:af:
         92:eb:ac:fc:25:99:8d:0c:60:cd:4b:e6:31:5e:eb:05:13:fa:
         cb:4c:db:0d:e4:f0:bb:cd:59:f7:e1:2e:73:e4:3b:0d:e9:ce:
         60:39:89:cc:3b:08:d1:db:21:63:d3:6e:e3:61:c8:6d:4d:54:
         19:a1:58:5c:6d:0a:3b:32:7f:b0:c2:29:28:c9:9a:bc:b2:f4:
         74:55:09:25:a5:1a:16:66:ad:cf:8a:a8:bf:cc:4b:f1:56:44:
         cc:47:b9:98:36:38:3f:cd:45:ef:56:70:9d:0a:4b:93:5a:02:
         e4:43:02:a8:d3:dd:05:75:3f:ea:82:ca:e3:22:b7:96:9d:36:
         e0:b5:fb:51:fb:9a:71:65:d7:cc:45:17:09:30:85:c6:26:49:
         5e:8a:ef:da:96:aa:15:fc:e6:75:ab:cd:40:e8:1a:eb:1b:c6:
         79:fa:75:6c:b3:a3:63:70:06:1f:46:cf:f7:ae:ea:70:0a:3f:
         c3:c0:93:c2:b0:8c:59:fc:57:1e:aa:a8:5e:3f:8a:a3:42:66:
         16:00:91:4a:45:bd:fa:da:00:4a:da:d0:37:0f:9b:53:bf:97:
         48:36:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:28:12 2026 by rpki-client