This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File:                     aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier:          5iv230+lfljYP3cHGLr9kYJ4HtzPxFdH8pB+sUeNr0M=
Subject key identifier:   83:C5:EA:78:4D:8D:B2:02:56:05:99:64:0E:1D:AF:71:B9:8A:5F:CA
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer:       /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial:       0C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number:          0C71
Signing time:             Sat 24 Jan 2026 18:11:00 +0000
Manifest this update:     Sat 24 Jan 2026 18:10:59 +0000
Manifest next update:     Sat 31 Jan 2026 18:10:59 +0000
Files and hashes:         1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: ely40YgFwdnbiKozDUOCldXOlzEtqgn0/98qCWH5qf0=)
                          2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 37wRY/Cc6Mq3QSLFvHgV5f/52WNRD8oTGzaqCKYmvRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
                          rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
        Validity
            Not Before: Jan 24 18:10:59 2026 GMT
            Not After : Jan 31 18:10:59 2026 GMT
        Subject: CN=69750b34-fc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:df:4a:cf:a1:7f:15:87:4f:e3:1c:a6:61:
                    b3:83:81:8e:8c:59:6a:32:1e:93:62:7d:f7:92:52:
                    4c:fe:0b:96:ba:3a:c5:51:65:68:30:7b:e2:57:94:
                    62:f2:ac:88:96:3c:dc:c4:a4:be:34:db:a8:22:2a:
                    3e:0c:4e:76:de:16:a9:61:d3:44:c7:59:a5:f3:14:
                    7e:8e:73:82:68:ec:6e:8f:50:d9:b0:42:97:41:0b:
                    e6:59:59:69:8e:c2:6b:37:c9:83:ac:32:7d:4f:ef:
                    0f:d3:fb:c1:ea:5e:40:49:bb:63:b4:43:08:2d:7b:
                    bc:fd:2c:2c:1f:f6:13:28:91:84:30:b2:75:81:a1:
                    90:6b:fb:54:e3:65:f7:bd:7c:ed:0d:90:21:d1:06:
                    b5:d4:92:e7:9b:9f:74:d4:fe:e2:0f:5e:5b:88:7b:
                    76:f2:7f:fb:f3:b4:64:4b:46:ba:e2:35:50:cd:d4:
                    e7:d2:28:96:ac:8f:06:75:ba:3a:41:50:ca:9a:60:
                    44:8b:4e:b8:61:b8:2b:43:26:48:bb:b0:7f:00:70:
                    64:ce:8f:40:6a:1b:a6:98:8d:c9:9b:66:36:44:85:
                    a3:8f:9d:df:7f:47:08:a6:87:1b:81:b0:d1:d1:b6:
                    be:df:86:3d:59:fa:3a:05:c9:d6:9f:6e:ce:79:61:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C5:EA:78:4D:8D:B2:02:56:05:99:64:0E:1D:AF:71:B9:8A:5F:CA
            X509v3 Authority Key Identifier:
                keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2b:db:21:59:5d:4b:a0:57:fd:bc:8a:55:7a:fc:dc:72:23:
         59:c2:f8:84:6a:02:27:a4:fd:80:6b:ec:e9:78:10:52:11:7c:
         81:66:93:0d:10:08:c8:4c:60:b6:89:e3:71:99:4d:36:45:09:
         3d:09:42:3e:37:d6:55:75:91:d3:ac:2d:dd:22:45:34:69:12:
         f0:b3:a9:ce:d8:75:c1:37:d8:68:7b:ae:61:08:0d:3a:17:45:
         2e:52:28:ea:e6:72:32:d5:c0:96:c8:e9:63:fa:3b:80:af:d7:
         21:58:c1:9d:cb:b4:56:65:cf:38:a4:18:0f:98:28:14:ec:65:
         6d:86:60:a5:32:61:81:00:1d:b6:73:f2:77:31:0c:45:3c:83:
         18:c4:e3:9c:93:5d:c4:8e:69:66:56:55:b4:f7:50:38:a4:95:
         49:5b:98:44:f0:d4:7a:c1:78:cf:9c:96:25:83:59:27:0b:f3:
         73:10:4a:40:6f:a6:22:c5:37:e3:6c:89:ac:0f:77:c3:8b:ec:
         29:5a:3e:d6:21:c2:7a:7b:8e:f4:b3:ee:ae:e2:8b:2c:f6:40:
         28:22:75:94:a7:5c:30:48:ff:62:a2:12:ce:e1:37:b2:ac:5e:
         35:3d:bc:9c:20:b9:52:6c:67:24:4d:b1:78:e7:40:fe:73:fa:
         1a:1a:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:55 2026 by rpki-client